Legal hub

The documents that govern the ExtremeX developer platform, and what they require of your application.

Platform documents

Terms & Conditions — the developer agreement you accept by using this portal and its APIs.
Privacy Policy — how the platform itself processes developer and end-user data.

Have your own privacy policy. Data you receive through ExtremeX ONE (name, email, app data) is personal data — your policy must state what you collect, why, and how long you keep it.
Honest consent reasons. The reasons you write in Data access are shown verbatim to users; misleading reasons are grounds for suspension.
Respect revocation. When the API returns access_revoked, you must stop processing and delete cached ONE data for that user within 30 days.
Data minimisation. Request only fields your app needs; mark optional everything it can work without.
No resale. Identity data obtained through the platform may not be sold, brokered, or used to build shadow profiles.
Security incidents. Report suspected credential leaks to [email protected] and rotate the secret immediately.