PlayerVault Seller API Terms

PlayerVault grants a limited, revocable, non-exclusive, non-transferable permission to use documented Seller API endpoints only for the approved Seller’s own legitimate listing, inventory, Order, and webhook operations. No ownership or broader license is transferred.

• Keep keys secret, server-side, encrypted at rest, scoped to least privilege, and inaccessible in public code, client apps, logs, tickets, or chat.
• Do not sell, share, sublicense, or use another Seller’s key. Authorized personnel/service-provider access remains Seller’s responsibility.
• Rotate or revoke a suspected compromised key immediately and notify Support. Seller is responsible for authorized API activity and for failing to take reasonable key-security measures.
• API-created Listings and inventory carry the same accuracy, ownership, delivery, fee, and evidence obligations as website-created content.

Follow documented request, daily listing, bulk-size, payload, idempotency, and webhook limits. Do not evade limits through multiple keys/Accounts, parallel abuse, scraping, or retry storms. PlayerVault may throttle, queue, reject, or temporarily block traffic to protect availability and integrity.

Use HTTPS destinations you control, protect webhook secrets, verify PlayerVault’s timestamped signature against the exact raw body, reject stale requests, compare signatures safely, deduplicate event IDs, and design for retries/out-of-order delivery. Do not place prohibited secrets or sensitive Buyer information in webhook descriptions or URLs.

• unauthorized access, vulnerability exploitation, malware, denial of service, scraping unrelated data, or reverse engineering except where law permits;
• creating prohibited/misleading inventory, manipulating price/search/reviews, self-dealing, credential harvesting, or off-platform solicitation;
• collecting, combining, or retaining Buyer data beyond Order fulfillment, security, records, and lawful obligations;
• using the API to evade suspension, verification, sanctions, policy, or marketplace controls.

The API is “as is” and may experience outages, maintenance, errors, or changed limits. PlayerVault does not guarantee availability or permanent compatibility. Where feasible, we will use reasonable efforts to document material changes and preserve backwards compatibility or provide migration notice, but urgent security/compliance changes may be immediate.

PlayerVault may log API key ID, Seller, endpoint, timestamp, IP/user agent, request outcome, rate-limit events, and security signals as described in Privacy Policy. We may suspend or revoke keys for compromise, abuse, Seller standing, excessive errors, risk, legal compliance, or service retirement. Revocation does not erase obligations from API activity.

Public developer documentation describes current mechanics but does not override these terms or an Order snapshot. Seller Terms control sales/payouts; these API Terms control API-specific matters; Terms control otherwise. Contact Support for compromise or access issues.