KadmilOS API — Terms of Use & Data Processing Summary

1. Acceptable Use

• API key is non-transferable and tied to one organisation.
• Prohibited: reverse engineering, resale, scraping unrelated to your own DPP workflow, intentionally exceeding rate limits.
• Trial keys: 10 calls/month (DPP+Eco), 5 calls/month (Eco or Carbon). Limits enforced server-side.

2. Data Processing

• KadmilOS stores: API call logs, DPP records you create, carbon certificates you upload, eco scores computed per request.
• Data is isolated per organisation (user_id scoped). No cross-tenant access.
• GDPR basis: contractual necessity (Art. 6(1)(b)). Data controller: Andrea Anastasi, VinKet / KadmilOS, EU.
• Deletion: request deletion at andrea@vinket.eu. Data purged within 30 days.

3. Service Level

• Trial: best-effort, no SLA, may be throttled or paused.
• Paid plans: 99.9% monthly uptime target, excluding scheduled maintenance. Credits issued for verified downtime >0.1%.

4. Liability

• Service provided "as is" during trial. Maximum liability capped at fees paid in the preceding 3 months.
• Not liable for indirect, consequential, or loss-of-business damages.

5. Governing Law

• Italian law applies. Disputes subject to exclusive jurisdiction of Milan courts.