API terms

• Create keys in Settings → Developer API (up to 10 per account). A key is shown once; we keep only a hash and its first characters.
• Keep keys secret. Do not put them in public code, browser apps or mobile apps. You are responsible for everything done with your keys.
• Revoke a key straight away if it may have leaked, and tell us at security@castgenx.com if you see misuse.

Requests count against your account's monthly quota (calendar month, UTC), across all its keys. Each key may make up to 120 requests a minute, and you can give a key a lower monthly cap of its own.

Do not try to get around quotas or limits, for example by spreading traffic across accounts. Back off when you receive a 429 response and respect the Retry-After header. We may change limits; we give notice before lowering a paid plan's quota.

• Integrations for your own shows, and tools for clients whose shows live in your workspace.
• Your app must not suggest that CastGenX made or endorses it. You may say it “works with CastGenX”. Do not use our logo in a way that suggests otherwise without permission.

You may not:

• resell, sublicense or rent access to the API or your keys, or offer a service that is essentially a wrapper around CastGenX, without our written agreement;
• use the API to access data that is not yours or that you are not authorised to access;
• scrape, mirror or bulk-download content beyond what your integration needs, or use API data to build a competing product;
• use the API to create content that breaks the acceptable use policy, or to automate account creation or abuse;
• interfere with or overload the API, or probe it for weaknesses outside our security policy.

• Data you get from the API is your own content; handle any personal data in it (for example guest names) lawfully and securely, and delete it when you no longer need it.
• Private shows return no feed or audio URLs through the API. Do not use the API to make private content public.
• We log API requests (key, endpoint, time, result) to enforce quotas and keep the API secure.

The API is versioned (/v1). We may add endpoints and fields at any time. For breaking changes to a version we give at least 90 days' notice, except where security or the law requires faster action. The API is provided “as is”, without a service-level agreement unless we agree one in writing.

We may throttle, suspend or revoke keys or API access that break these terms, put the service or other users at risk, or create unusual costs, and we will tell you why where we can. API access ends when your plan no longer includes it or your account closes. You may stop using the API at any time by revoking your keys.

Questions about the API: support@castgenx.com. Security issues go to security@castgenx.com.