Use only approved credentials, permissions, endpoints, and data for a legitimate merchant workflow.
Protect credentials, request the minimum necessary data, and follow applicable platform and privacy rules.
PODJST may limit or suspend access that creates a security, legal, reliability, or abuse risk.
Access and Authorization
API access is a limited, revocable, non-exclusive, non-transferable permission. Availability can require an approved account, technical review, separate agreement, or platform authorization.
You may use credentials only for the approved application and merchant. Do not sell, sublicense, publish, share, or embed secrets in public code or client-side applications.
Permitted Use
Use the API only to perform documented product, order, fulfillment, shipping, tracking, support, or account functions for an authorized merchant. Request and retain only the minimum data necessary for those functions.
Prohibited API Conduct
- Circumvent authentication, permission scopes, access limits, technical restrictions, or platform review requirements.
- Probe, scan, reverse engineer, scrape, overload, disrupt, or attempt unauthorized access to PODJST or connected systems.
- Use data for surveillance, profiling, advertising, resale, data brokerage, discrimination, or an unrelated purpose.
- Submit unlawful, infringing, deceptive, malicious, unsafe, or prohibited products, content, or orders.
- Misrepresent synchronization status, inventory, delivery, pricing, merchant consent, or PODJST affiliation.
Security Requirements
Use TLS for data in transit, protect credentials with server-side secret controls, restrict staff access, log sensitive actions, maintain supported dependencies, validate webhook signatures where required, and promptly revoke exposed credentials.
Report suspected credential exposure, unauthorized access, or a material integration incident immediately to support@podjst.com.
Data and Privacy
You must provide a clear privacy notice, establish a lawful basis, honor rights requests, comply with platform deletion events, and delete PODJST data when no longer required. You may not combine customer data with unrelated data unless lawfully instructed by the merchant and permitted by the applicable platform.
Rate Limits, Versions, and Changes
PODJST may apply request, concurrency, storage, or usage limits and can reject abusive or malformed traffic. API versions, fields, and endpoints can change. Reasonable migration notice will be provided for material breaking changes where practical.
Third-Party Platform Terms
A Shopify, Temu, Etsy, TikTok Shop, or other platform integration must comply with that platform's developer, API, listing, branding, security, privacy, and merchant rules. Platform approval is not guaranteed by PODJST API access.
Ownership and Feedback
PODJST retains its API, documentation, software, trademarks, and service data. Merchants retain their data and content subject to the limited processing license needed for the service. Feedback may be used without restriction unless separately agreed in writing.
Monitoring, Suspension, and Contact
PODJST may monitor technical usage for security, support, billing, and compliance. Access may be limited or revoked for risk, breach, non-payment, platform direction, or service discontinuation. The general Terms and Conditions apply to disclaimers, liability, governing law, and disputes.
Contact JST COMMERCE LIMITED, operating as PODJST, at support@podjst.com, +852 64203057, or RM D07, 8/F, KAI TAK FTY BUILDING, NO. 99 KING FUK STREET, SAN PO KONG, HK.
Questions or requests?
Contact JST COMMERCE LIMITED, operating as PODJST, and include the policy or request type.
