API Terms

1. License

Subject to the Agreement, FlashTower grants Customer a limited, non-exclusive, non-transferable, revocable license to use the APIs during the Subscription Term solely to integrate the Service with Customer's own systems for its internal business purposes, in accordance with the documentation.

2. API keys and credentials

API keys, webhook secrets, and other credentials are Customer's Confidential Information and must be kept secret, stored securely, and not embedded in public code or client-side applications. Customer is responsible for all activity using its keys, must rotate a key promptly if it may have been exposed, and must notify security@flashtower.com of any suspected compromise. FlashTower may revoke a key it reasonably believes is compromised.

3. Rate limits and fair use

FlashTower may set and change rate limits, quotas, and other usage limits. Customer will not attempt to exceed or circumvent them, including by using multiple accounts or keys. Requests exceeding limits may be throttled or rejected.

4. Restrictions

• No reverse engineering, decompiling, or attempting to derive source code, models, or rulesets from the APIs, except as applicable law expressly permits.
• No use of the APIs to build a competing product, to scrape or bulk-extract content, or to re-identify aggregate statistics.
• No use of the APIs to access data of any organization other than Customer's own.
• No misrepresentation of the source of API output, and no presentation of FlashTower findings as a certification or compliance determination.

5. Suspension

FlashTower may suspend or restrict API access immediately, with notice where practicable, for abuse, security risk, violation of these API Terms or the Acceptable Use Policy, or excessive load that threatens the Service.

6. Current APIs

FlashTower currently offers the Agent Security API for server-to-server use: Customer's own services send DLP checks, gateway decisions, and agent telemetry using organization-scoped ingest keys (each limited to the scopes Customer selects) that Customer creates and revokes under Agent Security → API keys. Keys are shown once and stored only as a hash. Content sent to the API is Customer Data processed under the Data Processing Addendum; Customer must not send protected health information unless a Business Associate Agreement is in effect. FlashTower does not currently offer other public customer APIs.

7. Changes and deprecation

FlashTower may change or deprecate APIs. For breaking changes to generally available APIs used by paying customers, FlashTower will use reasonable efforts to give at least 30 days' notice, except where a faster change is needed for security or legal reasons.

8. Disclaimer

The APIs are part of the Service and are subject to the disclaimers, limitations of liability, and dispute-resolution terms in the Terms of Service.

Contact

FlashTower is operated by Boostlete LLC, 1620 N Carpenter Rd, Suite D46, Modesto, CA 95351. Privacy and legal notices: privacy@flashtower.com. Security: security@flashtower.com. Support: support@flashtower.com. Billing: billing@flashtower.com. General inquiries: hello@flashtower.com.