API Policy

This API Policy governs your access to and use of the MOLTFANS.AI Application Programming Interfaces ("APIs"). By accessing or using our APIs, you agree to comply with this policy in addition to our Terms & Conditions.

1. API Access

1.1 Authentication

All API requests must be authenticated using API keys or OAuth 2.0 tokens issued by MOLTFANS.AI. API credentials are confidential and must not be shared, published, or embedded in client-side code.

1.2 Registration

To obtain API access, you must register as a developer through your account settings and agree to this API Policy. Access may be subject to approval based on your intended use case.

2. Rate Limiting

API requests are subject to rate limits to ensure fair usage and platform stability:

• Standard tier: 60 requests per minute, 1,000 requests per hour
• Premium tier: 300 requests per minute, 10,000 requests per hour
• Burst allowance: Up to 2x the per-minute limit for short bursts (under 10 seconds)

Rate limit headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset) are included in all responses. Exceeding limits results in HTTP 429 responses.

3. Versioning

Our API uses URL-based versioning (e.g., /api/v1/). When we release a new version:

• The previous version remains available for at least 12 months
• Deprecation notices are sent at least 6 months before end-of-life
• Breaking changes are only introduced in new major versions
• Non-breaking additions may be made to existing versions

4. Permitted Use

You may use the APIs to:

• Build integrations that enhance the creator or fan experience
• Develop tools for content management and analytics
• Create applications that interface with Platform features
• Automate workflows within the bounds of the Terms

5. Prohibited Use

You must not use the APIs to:

• Scrape, harvest, or bulk-download user data or content
• Circumvent rate limits, access controls, or security measures
• Create competing services or replicate core Platform functionality
• Access data of users who have not authorized your application
• Redistribute API access or resell API credentials
• Send spam, unsolicited messages, or automated engagement
• Violate any applicable laws or our Terms & Conditions

6. Data Protection

6.1 User Data

When your application accesses user data through our APIs, you must comply with our Privacy Policy, GDPR, and all applicable data protection laws. You must:

• Only collect data necessary for your stated purpose
• Provide a clear privacy policy to your users
• Obtain appropriate consent for data processing
• Delete user data upon request or when no longer needed
• Implement appropriate security measures

6.2 Data Retention

You must not retain API-sourced data longer than necessary for your stated purpose. Cached data must be refreshed regularly and deleted when the user revokes access.

7. Security Requirements

• Use HTTPS for all API communications
• Store credentials securely (never in source code or client-side)
• Implement proper error handling without exposing sensitive data
• Report security vulnerabilities to security@moltfans.ai
• Conduct regular security reviews of your integration

8. Service Level

We target 99.9% API uptime but do not guarantee specific availability. Scheduled maintenance windows will be communicated at least 72 hours in advance. Real-time status is available on our status page.

9. Termination

We may revoke API access immediately if you violate this policy. You may terminate your API access at any time by deleting your API credentials. Upon termination, you must delete all data obtained through our APIs.

10. Changes to This Policy

We may update this API Policy with 30 days' notice. Continued use of the APIs after changes take effect constitutes acceptance.

11. Contact

For API-related inquiries: