API & Developer Terms

These API & Developer Terms govern access to and use of the Kontaible Application Programming Interfaces, webhooks, OAuth integrations, and related developer resources (the "API"). They supplement the Terms of Service, which also apply in full. By generating an API credential, registering an application, or calling the API, you ("Developer") agree to these terms.

1. Purpose

The Kontaible API lets authorized third-party applications exchange data with a Kontaible account that has explicitly authorized the integration. Supported data includes contacts, documents, expense and reimbursement records, and message metadata — subject to the authorizing account's plan, permissions, and applicable law.

Integrations with accounting and invoicing software such as QuickBooks and similar tools are a primary use case, enabling seamless syncing of financial data between Kontaible and your accounting system.

2. Access and Authentication

2.1 Credentials

API access requires valid credentials — API keys and/or OAuth 2.0 tokens. You must keep credentials secret at all times. You may not share them, embed them in client-side code where they can be extracted, or commit them to public repositories.

2.2 Scopes and Permissions

Each integration must act only within the scopes granted by the authorizing Kontaible account. Account owners can revoke access at any time; you must immediately stop using revoked tokens.

2.3 Responsibility

You are responsible for all activity under your credentials. Notify us immediately of any suspected compromise at support@kontaible.com.

3. Acceptable Use of the API

You must not use the API to:

• Exceed published rate limits or attempt to circumvent throttling;
• Access data from accounts that have not authorized your application, or access other tenants' data;
• Scrape, bulk-export, or resell data except as expressly permitted by the authorizing account;
• Send spam or violate the Acceptable Use Policy or Dominican Republic Ley 172-13;
• Reverse engineer, probe, or attack the API or its underlying infrastructure; or
• Misrepresent your application's identity or its data handling practices to authorizing accounts.

4. Data Protection

4.1 Your Role as Processor

When you receive personal data via the API, you act on behalf of the authorizing Kontaible account (the data controller) and must process it only as that account authorizes and as permitted by Ley 172-13 and applicable law. You must maintain appropriate security measures and honor data-subject rights and deletion requests passed through from the account.

4.2 Your Privacy Obligations

You must have your own privacy policy, a lawful basis for your data processing, and must not use Kontaible data to build competing datasets, train AI models without consent, or for undisclosed purposes.

5. Webhooks

If you subscribe to Kontaible webhooks, you must:

• Verify event signatures using the shared secret provided;
• Handle retries idempotently (duplicate delivery is possible);
• Secure your webhook endpoints from unauthorized access; and
• Respond with HTTP 2xx promptly — slow endpoints may be disabled.

We are not liable for events you fail to receive or process.

6. Third-Party Platforms (QuickBooks, etc.)

Integrations with platforms like Intuit QuickBooks are also governed by those platforms' own developer terms and require separate authorization from those platforms. Kontaible is not affiliated with or endorsed by those platforms (see WhatsApp & Third-Party Disclaimer §1). You are responsible for complying with each platform's developer policies and for the accuracy of data synced between systems.

7. API Changes and Versioning

The API may evolve. We will use reasonable efforts to provide advance notice of breaking changes and to maintain versioned endpoints where practical. However, we may modify, deprecate, or discontinue any part of the API. You are responsible for keeping your integration current and testing against new versions.

8. Intellectual Property and Branding

We grant you a limited, revocable, non-exclusive, non-transferable right to use the API solely to build integrations with Kontaible. You may state that your application "works with Kontaible" but may not imply endorsement, partnership, or affiliation, and may not use our trademarks beyond fair descriptive use without written permission. All API intellectual property remains the property of Kontaible SRL.

9. No Warranty; Limitation of Liability

The API is provided "as is" without any warranty, express or implied. Our liability to you as a Developer is limited as set out in the Terms of Service §11–§12. We are not liable for losses arising from API downtime, changes, deprecation, or failures in your integration.

10. Suspension and Termination

We may suspend or revoke API access for violations of these terms, security risk, excessive load, or at our discretion — with or without prior notice depending on severity. Authorizing Kontaible accounts may also revoke your access at any time from their account settings.

11. Contact

Developer support and API key requests: support@kontaible.com

API documentation: kontaible.com/docs/api (once published)