Terms for developers

Everything you build on Palloo is covered by the Developer Terms of Service, on top of Palloo's Terms of Service, Privacy Policy and Acceptable Use Policy. Read the full terms; this page is only a summary and does not replace them.

In short

• You're responsible for your app. What your bot or app does counts as if you did it. Describe it honestly and ask only for the permissions, intents and scopes it needs.
• Keep credentials secret. Bot tokens, webhook URLs, client secrets and private keys are passwords. Don't share or publish them, rotate them when in doubt, and tell us if one leaks. We can revoke any credential to protect people.
• Respect rate limits. Slow down on 429 and never spread requests across apps, tokens or addresses to get around a limit.
• Treat user data with care. Use it only for what your app says it does, with people's consent. Never sell it or scrape it. Delete it when someone asks, disconnects your app, removes your bot or deletes their account, within 30 days. Keep it secure and tell us about a breach within 72 hours.
• Not allowed: spam, harassment, surveillance, training machine learning models on Palloo content without the consent of the people who wrote it, impersonating Palloo, getting around safety features, and anything illegal, above all child sexual abuse material.
• Moderation applies to apps too. We may review, limit, suspend or revoke an app that breaks the rules.
• Log in with Palloo apps need approval. Give accurate details, link a privacy policy, ask only for the scopes you need and never make a misleading consent screen. See Log in with Palloo for how to request one.
• Our marks. You can say your app works with Palloo, but don't use Pip or the Palloo logo, or suggest we made or endorse your app.
• The API is in beta. It may change; where practical we announce breaking changes in the changelog ahead of time.