API Terms of Use

These API Terms of Use ("API Terms") govern access to and use of any Milli application programming interfaces, webhooks, data feeds, SDKs, and related documentation (the "Milli API") by developers, partners, and integrators ("you" or "Developer"). Access to the Milli API is by invitation and written approval only. By accessing the Milli API, you agree to these API Terms, our Terms of Service, and our Acceptable Use Policy.

1. Access and Credentials

Milli will issue API keys or OAuth credentials to approved Developers. Credentials are confidential and may not be shared, sold, or embedded in client-side code or public repositories.
You are responsible for all activity under your credentials. Notify support@drivemilli.com immediately of any suspected compromise.
Milli may rotate, suspend, or revoke credentials at any time.

2. Permitted Use

You may use the Milli API only to build integrations approved in writing by Milli, and only to provide services to Milli users who have given express, informed, revocable consent to share their data with your application. You must access only the minimum data necessary for the approved use case.

3. User Data Protections

Do not sell, rent, or share Milli user data with third parties, or use it for advertising, profiling, credit decisioning, or eligibility determinations, unless expressly authorized in writing and permitted by law.
Comply with all applicable privacy and financial laws, including the Gramm-Leach-Bliley Act, the FTC Safeguards Rule, CCPA/CPRA, and GDPR where applicable.
Maintain administrative, technical, and physical safeguards at least as protective as those described in our Data Security Policy, including encryption in transit and at rest.
Delete user data promptly when a user revokes consent, when no longer needed, or upon termination.
Notify Milli within 24 hours of discovering any security incident affecting Milli data.

4. Rate Limits

The Milli API is subject to rate limits and quotas published in the developer documentation or communicated to you, which may vary by endpoint and partner tier. You may not attempt to circumvent rate limits. Milli may throttle or block traffic that exceeds limits or degrades service for others.

5. Prohibited Uses

You may not: (a) scrape, harvest, or bulk-export data outside documented endpoints; (b) reverse engineer or probe the API for vulnerabilities outside our responsible disclosure process; (c) impersonate Milli or a user; (d) use the API to build a competing product; (e) introduce malware or excessive load; (f) misrepresent your relationship with Milli; or (g) use the API for any unlawful, deceptive, or fraudulent purpose.

6. Branding

You may not use the MILLI name, M mark, or other Milli trademarks without Milli's prior written approval, and any approved use must follow Milli's trademark usage requirements.

7. Audits

Milli may request reasonable information, certifications, or security assessments to verify your compliance with these API Terms.

8. Changes and Availability

Milli may change, deprecate, or discontinue any part of the Milli API, and will make reasonable efforts to provide advance notice of material breaking changes. The Milli API is provided "as is" without any service-level commitment unless agreed in a separate written agreement.

9. Termination

Milli may suspend or terminate your API access at any time for any violation of these API Terms or to protect users, Milli, or the Services. Upon termination, you must cease all use of the Milli API and delete all Milli user data and credentials.

10. Liability and Indemnity

To the fullest extent permitted by law, Milli's total liability under these API Terms will not exceed one hundred U.S. dollars ($100). You will indemnify Milli against claims arising from your application, your use of the Milli API, or your breach of these API Terms.

11. Contact

Developer and partnership inquiries: support@drivemilli.com, subject line "API Access."