These API Terms of Service ("API Terms") govern Customer's access to and use of the CarsDataset application programming interface (the "API") operated by Knitted Logic, obrt za IT usluge, vl. Vedran Balagović ("Provider"). These API Terms supplement and incorporate by reference the general CarsDataset Terms of Service. In case of conflict between the general Terms and these API Terms with respect to API usage, these API Terms control.
Subject to Customer's active paid subscription and compliance with these API Terms and the general Terms of Service, Provider grants Customer a non-exclusive, non-transferable, non-sublicensable, revocable right to access the API and to use the data returned by the API (the "API Data") solely for Customer's internal business purposes and within Customer's own applications serving Customer's own end users, subject to the restrictions below.
Issuance. Upon successful subscription payment, Provider will issue an API key to the email address associated with Customer's payment method. The key is transmitted via email once; Provider does not retain a recoverable plaintext copy.
Confidentiality. API keys are confidential credentials equivalent to passwords. Customer shall:
Attribution of activity. All traffic authenticated with Customer's API key is conclusively attributed to Customer, regardless of whether Customer actually authorized that traffic. Customer is responsible for all fees, damages, and consequences of activity conducted under its key, including the acts of its employees, contractors, and any third party that comes into possession of the key by any means.
Key rotation. Customer may request key rotation at any time by emailing vedran@knittedlogic.com. The previous key will be deactivated within twenty-four (24) hours of the new key being issued.
Each subscription tier is associated with rate limits (requests per minute and per day) as stated in the product description at the time of Order. Rate limits are enforced by the API and requests exceeding them will return HTTP 429 responses.
In addition to numeric rate limits, Customer shall use the API in accordance with reasonable and fair usage principles, meaning:
Customers engaging in bulk enumeration patterns indistinguishable from dataset exfiltration may be immediately suspended without notice, in addition to remedies available under Section 12 and the general Terms.
Customer may cache API responses locally for up to twenty-four (24) hours for the purpose of improving end-user performance and reducing API load. Caching periods longer than 24 hours, or persistent storage of the API Data beyond 30 days, require the equivalent of a one-time dataset License and are not permitted under a subscription alone.
For clarity: using the API to silently build a local copy of the dataset is a material breach of these API Terms regardless of the technical method used, and shall be treated as an attempted circumvention of the license fee for the applicable one-time dataset product.
Customer shall not, and shall not permit any third party to:
Customer may integrate API responses into Customer's own application(s) for use by Customer's end users, provided that:
Customer shall be solely responsible for all acts and omissions of its end users, including any misuse of the API Data received through Customer's application. Provider has no contractual relationship with Customer's end users and no obligation to support them. Claims by end users arising out of the API Data shall be addressed by Customer and are subject to Customer's indemnification obligation under Section 11 of the general Terms.
Provider will use commercially reasonable efforts to maintain API availability, but does not guarantee any specific uptime, latency, or error rate unless separately agreed in a written Enterprise SLA. Scheduled and emergency maintenance may occur without notice. Transient outages, cloud-provider incidents, and third-party network failures do not constitute a breach of these API Terms and do not entitle Customer to any refund or credit.
Customers requiring uptime guarantees, incident response SLAs, or a financial credit mechanism should contact Provider to discuss a custom Enterprise plan.
The API is provided on an evolving basis. Provider may, at any time and without liability:
It is Customer's responsibility to monitor such notices and to keep its integration compatible with the current version of the API. Provider has no obligation to maintain backward compatibility with deprecated versions indefinitely.
Provider logs API requests for operational, security, billing, and abuse-detection purposes. Logged information may include the API key hash, source IP address, request path, query parameters, response status, and timestamp. Logs are retained for a reasonable period (typically up to ninety (90) days for operational logs and longer for billing/audit records).
Provider may share logs with law enforcement or regulators as required by law and may use aggregated log data to improve the Service. Customer consents to such logging and use.
Billing cycle. Subscriptions are billed monthly in advance via Stripe at the fee stated on the pricing page at the time of Order. Prices are in USD and exclude applicable VAT/sales tax, which will be added at checkout where required.
Automatic renewal. Subscriptions automatically renew each month until cancelled by Customer or terminated by Provider. Customer authorizes Stripe to charge the payment method on file for each renewal.
Cancellation. Customer may cancel at any time through the Stripe customer portal (link available by emailing vedran@knittedlogic.com). Cancellation takes effect at the end of the current paid period. API access continues until period end.
Failed payments. If a renewal payment fails, Provider may immediately suspend API access. Customer will be notified by email and may re-activate access by updating payment information within fourteen (14) days, after which the subscription and associated API key may be permanently terminated.
No refunds. Subscription fees are non-refundable for the current period, except where required by mandatory applicable law.
Price changes. Provider may change subscription fees with at least thirty (30) days' advance notice to the email on file. New prices take effect at the next renewal; Customer's continued use constitutes acceptance.
Provider may, at its sole discretion and without prior notice, suspend or terminate Customer's API access if Provider reasonably believes that:
Upon suspension, API requests authenticated with Customer's key will return HTTP 401 or 403 errors. Upon termination, the key is permanently deactivated, and Customer must cease using any cached API Data in accordance with Section 15 of the general Terms.
Termination by Provider for cause does not entitle Customer to any refund. In the case of termination without cause (e.g., Provider discontinuing the API entirely), Customer shall receive a pro-rata refund for the unused portion of the current paid period.
Sections 2 (Attribution of activity), 4 (Caching), 5 (Prohibited Usage), 7 (End-User Responsibilities), 10 (Monitoring), 12 (Suspension & Termination), and 13 (Survival) shall survive termination of these API Terms, together with all provisions of the general Terms that survive by their nature.
Knitted Logic, obrt za IT usluge, vl. Vedran Balagović
Ulica Bedřicha Smetane 13
10000 Zagreb, Croatia
OIB: 94496971361
Email: vedran@knittedlogic.com