The legal terms that govern your use of the Planlined API.
Public API terms are being finalized. Until they are published here, use of the API is governed by the Planlined platform Terms of Service that apply to your Planlined account, plus any partner agreement signed with your account contact. For a copy of the current API terms, email support@trybart.com.
Interim operating norms
While the formal terms are pending, the following expectations apply to API consumers:
- Authorized use only. Each API key is owned by the signed-in user or organization that issued it. Sharing keys outside that boundary is not authorized.
- Quota respect. Stay within your key's documented rate limits. Repeated 429 responses without backoff may result in key revocation.
- Idempotency for writes. Use
X-Idempotency-Keyon every mutating call — it protects both your data integrity and our infrastructure during retries. - Signature verification for webhooks. Always verify the HMAC signature on inbound webhook deliveries before acting on them. Treat unverified payloads as untrusted.
- Confidentiality of client secrets and signing secrets. Treat OAuth
client_secret, API keys, and webhook signing secrets as production credentials. Do not commit them to source control. - Data handling. Case data, plan data, and census data may include sensitive employer information. Handle in accordance with your existing data-protection commitments.
Reporting
Report suspected key compromise, accidental disclosure, or security issues to support@trybart.com. Compromised keys can be rotated immediately via the developer portal.