1. Authentication and key handling

API keys must be used only by authorized users. Sharing keys publicly, storing them insecurely, or disclosing them to unauthorized third parties is prohibited.

2. Permission scope

Use least-privilege access whenever possible. Trading permissions should be minimized, and withdrawal permissions should remain disabled unless explicitly required.

3. Rate limits and quotas

Rate limits and quotas may be enforced to protect service quality and security. Requests above limits may be delayed or rejected.

4. Prohibited usage

You may not use the API for unlawful, abusive, manipulative, or service-disruptive behavior. Access may be restricted for violations.

5. Logging and auditing

Limited technical metadata may be retained for security, abuse prevention, and legal compliance. These records are used for incident response and service integrity.

6. Limitation of liability

To the maximum extent permitted by law, Nexvexa disclaims liability for direct, indirect, incidental, or consequential damages arising from API use.