Legal

API Terms, Acceptable Use and Data Processing

The terms for developers who use the APIs of Chakloon Platform and Sign in with Chakloon, including keys, free quotas, permitted and prohibited uses, and the data processing terms for authentication.

Version 1.0In force from October 16, 2026Updated: October 16, 2026All versions

Scope

Chakloon Platform, at platform.chakloon.com, with the endpoint api.chakloon.com, is the developer cabinet of the Chakloon package. It gives access to the Chakloon APIs, such as the Weather API, the Search API and Suggest, and to Sign in with Chakloon. It is operated by Haydamax OÜ, registry code 17351554, Narva mnt 5, 10117 Tallinn, Estonia.

These terms supplement the Terms of Service and the Privacy Policy, which apply in full. Payments are governed by Payments, refunds and withdrawal. By creating a key or registering an application you accept these terms for yourself or for the organisation you act for.

The Platform is meant for developers who act for their business, trade or profession. The rules marked as applying to business users do not apply to you if you use the Platform as a consumer; then the mandatory consumer law of your country applies instead.

Account and API keys

  • You use the Platform with a Chakloon Passport account. If you act for an organisation, you confirm that you are authorised to do so.
  • Keys begin with ck_live_. One key gives access to all APIs available to your account.
  • Keep your keys secret. Do not put them in public code, in a web page or in a mobile app where others can read them; call the APIs from your server.
  • You are responsible for all use of your keys. If a key may have been exposed, revoke it in the cabinet at once and create a new one.

Free quotas and payment

API Free quota
Weather API 1 000 requests a day
Search API 2 000 requests a month
Suggest 20 000 requests a month
Sign in with Chakloon free

When a free quota is used up, the API answers with HTTP 402 until the quota renews or, where paid use is available, until your balance allows further requests. Paid use is charged from your Kassero balance at the prices shown in the cabinet. We may change the quotas and prices for the future; we tell you at least 15 days before a change takes effect, and a change never applies to requests already paid for.

Rate limits and fair use

Each key has rate limits that protect the service for everyone. If you exceed them, requests are refused for a time. Do not try to get around limits or quotas, for example by creating many accounts or keys for one application. Cache answers where the API allows it, instead of repeating the same request. If your application needs higher limits, write to support@chakloon.com.

Prohibited uses

You must not use the APIs:

  • for anything illegal, or to help others break the law;
  • to send spam, phishing or malware, or to defraud people;
  • to track, profile or monitor people without a lawful basis;
  • to attack, overload or probe the security of our services or anyone else's;
  • to build a copy of Chakloon Net, Chakloon News or Chakloon Weather, or a dataset for resale;
  • to train AI models on raw data obtained from the APIs, unless we have agreed this in writing;
  • in a way that suggests that we endorse your product, or that hides that data comes from us.

Attribution

Where you show data from our APIs to the public, name Chakloon as the source in a visible way near the data, for example Weather: Chakloon. Keep the links to the original sources that our answers contain, in particular the links to publishers in search and news results.

News and search data

Results of the Search API and news data contain only a headline, a link and a short excerpt. The articles and pages themselves belong to their publishers. You may show these elements as a pointer to the source, with the link, but you may not fetch, reproduce or store the full text of publishers through us, or present their content as yours. If a publisher or a rights holder asks for removal, you remove the data from your service.

No resale of raw data

You may use API data in your own product. You may not sell, license or pass on the raw data, as such or in bulk, to others, or offer it through your own API, unless we have agreed this in writing.

Changes and deprecation

The APIs evolve. We may add, change or remove functions. We announce changes that break existing integrations, and the end of an API version, at least 15 days in advance, and keep the old version running for a transition period. In urgent cases, such as security problems or orders of an authority, we may act without notice, and we then tell you as soon as we can.

We tell you about a change of these terms by e-mail or in the cabinet at least 15 days before it takes effect. If you do not agree, you may stop using the Platform and end the contract before that date; an unused paid balance is then refunded.

Suspension and termination

We may restrict or suspend a key or an account, or block an application from Sign in with Chakloon, if these terms are broken, if use endangers the service or its users, if a payment is reversed or if an authority orders it. At the latest when the measure takes effect, we tell you the reason and the facts it is based on, unless the law or security does not allow it, and you can reply to clarify the facts or appeal as described in Content moderation and appeals. If the reason no longer exists, we lift the measure.

You may stop using the APIs at any time and delete your keys. We may end the contract for your account, or end the service, with at least 30 days' notice and reasons; without notice only for a serious or repeated breach or where the law requires it. An unused paid balance is then refunded as described in Payments, refunds and withdrawal.

Liability

The free APIs are provided as they are, without a promise of availability or accuracy. Weather forecasts and search results may be wrong or incomplete and must not be the only basis for decisions about safety. Our liability for paid use is governed by the Terms of Service. Nothing in these terms limits liability that cannot be limited by law, including liability for intent and gross negligence.

For business users: we are not liable for lost profit, lost data or other indirect damage caused by unavailability or errors of the APIs, and our total liability under these terms is limited to the amount you paid us for the Platform in the twelve months before the event. You are responsible for your application and its users, and if a third party or an authority makes a claim against us because of your application or your breach of these terms, you compensate us for the resulting damage and reasonable costs, unless the claim was caused by our own fault.

Sign in with Chakloon

Sign in with Chakloon lets your application sign users in with their Chakloon Passport account, using OpenID Connect. It is free.

Roles

For the personal data of your users that your application receives and uses, you are the controller. When we authenticate your users on your behalf and pass the result to your application, we act as your processor. The data processing terms below form the data processing agreement under Article 28 GDPR between you and us. You are responsible for having a lawful basis for the processing and for informing your users.

Data processing terms

  • Subject matter and duration. Authentication of users of your application and transfer to it of the identity data that the user allows and your application requests, for as long as your application uses Sign in with Chakloon.
  • Nature and purpose. Checking the sign-in of the user, and sending your application the result and the requested data over an encrypted connection.
  • Types of data and data subjects. Identity data of the Chakloon Passport account that your application requests and the user allows, such as an account identifier, name, e-mail address and avatar, and technical data of the sign-in. The data subjects are users of your application who sign in with Chakloon Passport.
  • Instructions. We process this data only on your documented instructions, which are these terms and your configuration in the cabinet, including with regard to transfers outside the European Economic Area. If the law requires us to process it otherwise, we tell you before, unless the law forbids this. We tell you if we believe an instruction breaks the law.
  • Location. This processing takes place in the European Economic Area.
  • Confidentiality. People who process the data for us are bound by confidentiality.
  • Security. We protect the data with appropriate technical and organisational measures under Article 32 GDPR, including encrypted connections and limited access.
  • Sub-processors. You give us general authorisation to use sub-processors. We use Hetzner Online GmbH for servers and object storage in Germany and Finland. We tell you at least 15 days in advance about any new or replaced sub-processor for this processing, and you may object within that time on reasonable grounds; if we cannot meet the objection, you may stop using Sign in with Chakloon and end this agreement. Each sub-processor is bound by a contract with the same data protection obligations, and we remain responsible to you for its work.
  • Assistance. We help you, as far as the nature of the processing allows, to answer requests of your users under the GDPR and to meet your obligations on security, breach notification, impact assessments and prior consultation of a supervisory authority.
  • Breach notification. We notify you of a personal data breach that affects your users without undue delay after we become aware of it, with what we know of its nature, the data and users concerned, the likely consequences and the measures taken, and we add details as we learn them.
  • Deletion or return. When you stop using Sign in with Chakloon, we stop processing for your application and, at your choice, return or delete the data held for you, unless the law requires us to keep it.
  • Audits. We give you the information needed to show compliance with these terms and with Article 28 GDPR, first by answering your written questions and providing documents. Where that is not enough, we allow an audit or inspection by you or an auditor you appoint, with reasonable notice, during working hours and under confidentiality.

Your users and us

Your users still have their own relationship with us: their Chakloon Passport account is governed by our Terms of Service and Privacy Policy, and for that account we are the controller. Your application must have its own privacy policy that explains what it does with the data it receives. Do not ask users for their Chakloon password, and do not suggest that your application is operated by Chakloon.

Contact