Developer Terms of Service

1. Eligibility

You must be at least 18 years old and either an individual or a legally-registered entity to use the Amigo Developer Platform. By using the platform you confirm you have the authority to enter this agreement on behalf of yourself or your organisation.

The platform is intended for use in Nigeria. We may decline service to anyone, for any lawful reason, at our discretion.

2. Account & API tokens

• An API token is a credential that represents you. Treat it like a password — keep it out of source control, public repositories, client-side JavaScript, mobile apps you ship to end users, and anywhere a third party might read it.
• You are responsible for every request made with your token. If a token leaks, rotate it immediately from settings.
• Tokens carry a per-minute rate limit. Exceeding it returns 429 rate_limited. Don't try to bypass it by rotating tokens — that's a suspendable offence.
• You may register multiple tokens (e.g. amg_test_… for sandbox vs amg_live_… for production). Same agreement applies to each.
• We may invalidate any token immediately if we believe it has been compromised or is being misused, with or without prior notice.

3. Account balance

• Your Amigo account holds a prepaid balance, denominated in Nigerian Naira, that you use to buy data, airtime, and commerce orders. Top it up using the funding options available in the app (e.g. Paystack, bank transfer).
• This balance is not a bank deposit, not a payment account, and not interest-bearing. Amigo is not a bank, payment processor, or licensed financial institution — the balance is purely a prepaid credit used to buy the services Amigo sells.
• Commerce orders and data top-ups debit your balance at request time. If your balance is below the order total, the request returns 422 insufficient_balance and nothing else happens.
• Refunds (e.g. order cancellations by us, failed data top-ups) credit back to the same balance. Cross-currency conversion is not supported.
• We do not issue cash withdrawals for unspent balance under normal conditions. Account-closure procedures are described in Amigo's general terms.
• Test-mode requests draw from a separate sandbox balance that has no monetary value. Manipulating, exploiting, or attempting to move funds across test and live balances is grounds for termination.

4. Acceptable API use

You agree NOT to use the API to:

• Resell or sublicense access to the API as a standalone product. You may build products on top of the API, but you may not wrap it and sell raw API access.
• Reverse-engineer, scrape, or otherwise extract bulk pricing/inventory data outside the documented endpoints (e.g. scraping /api/commerce/products/ in tight loops).
• Probe, scan, or attack the platform — DDoS, credential stuffing, automated abuse, fuzzing for vulnerabilities outside an agreed-upon disclosure program.
• Interfere with another developer's traffic, tokens, or webhooks.
• Process transactions that violate any applicable law, including but not limited to AML, KYC, sanctions, or tax obligations.

5. Commerce rules

• You may list, sell, and fulfill orders for products in the Amigo catalog through your own storefront, app, or sales channel. The catalog is curated; we may add or remove SKUs at any time.
• You are the merchant of record to your end customers. Amigo is the merchant of record from you to Amigo. Your customer-facing terms, returns policy, and support obligations are yours to define.
• You may not display prices that materially deviate from prevailing market prices in a way intended to deceive your customers. You may freely add a margin for your own commission.
• You may not list products outside the Amigo catalog under the Amigo Commerce API. The endpoint serves only products we explicitly stock.
• Orders may be cancelled by Amigo (e.g. supply issues, fraud signals, prohibited items). Cancellations trigger an order.cancelled webhook and a full wallet refund. You are responsible for refunding your end customer in turn.
• You agree that final fulfillment timing is at Amigo's discretion, subject to commercially-reasonable best effort. We do not currently offer a fixed SLA on accept/ship/deliver transitions; webhook events are the source of truth for status.

6. Customer data

• When you submit an order via POST /orders/, the customer and delivery fields contain personal data of your end customer. You confirm you have the legal basis (consent or otherwise) to share that data with us for fulfillment.
• We use that data only to fulfill the order and contact the recipient if needed. We do not market to your customers and do not re-sell the data.
• Phone numbers and addresses are retained for the lifetime of the order plus a reasonable accounting/audit window. Older orders may be archived or partially anonymised.
• You comply with applicable data-protection law (NDPR in Nigeria; equivalents elsewhere) when handling your customers' data on your side.

7. Webhooks

• You MUST verify the X-Amigo-Signature header on every incoming webhook using the secret returned to you at registration time, and reject any request whose X-Amigo-Timestamp is more than 5 minutes old. See the verify-signatures docs.
• Process webhooks idempotently. The X-Amigo-Delivery header is the immutable id of that delivery — we will retry the same delivery up to 7 times on backoff. Two requests with the same id are the same event.
• Your endpoint must return a 2xx within 4 seconds. Slower endpoints are queued for retry; pathologically slow endpoints may be auto-disabled.
• Don't point webhook endpoints at internal networks, cloud-metadata services, or other systems you don't own. We block obvious cases at registration time, but the intent is clear: webhooks go to your own infrastructure.

8. Brand & trademark

• The Amigo name, logo, and visual identity are trademarks of Amigo. You may reference "Powered by Amigo" or similar in your app to describe your integration, but you may not use the Amigo logo or imply endorsement without prior written permission.
• You retain all rights to your own brand and IP. We claim no ownership over your storefront, app, or customer relationships.

9. Suspension & termination

• We may suspend or terminate any developer account for breach of these terms, fraud, abuse, or any conduct that meaningfully threatens platform integrity or other users. Suspension may be immediate where required to protect the platform.
• You may terminate at any time by revoking your tokens and ceasing to use the platform. Outstanding wallet balance is governed by Amigo's general account-closure procedure.
• On termination: open orders are processed to completion or cancelled with a refund at our discretion; webhook deliveries to your endpoints stop; tokens stop authenticating.

10. Disclaimer & limitation of liability

Nothing in these terms limits any liability that cannot be excluded under Nigerian law.

11. Changes to these terms

We may update these terms from time to time. When we do, we'll update the "Last updated" date at the top of this page and, for substantial changes, send a notice to the email on your developer account. Continued use of the platform after a change constitutes acceptance.

12. Contact

Questions, security disclosures, or termination requests:

• General: hello@amigo.ng
• Security: security@amigo.ng
• Developer support: open the dashboard's support modal, or email developers@amigo.ng