These Developer Terms (the "Agreement") form a binding contract between Attendium AB ("Attendium," "we," "us") and each person or entity that registers an OAuth client, accesses the Attendium API, or operates an Application integrating with the Services ("Developer," "you"). By doing any of those things, you accept this Agreement. If you do not accept, do not register, integrate with, or use the API.
This Agreement supplements the Attendium Terms of Service. For matters concerning Developer activity, this Agreement controls over any conflicting term in the Terms of Service. This Agreement does not limit switching or retrieval rights under section 16 of the Terms of Service or applicable law, including access by an End User's authorized destination provider for those purposes.
3.1 If you register an OAuth client, access the API or operate an Application on behalf of an entity, you represent that you have authority to bind that entity, and "you" refers to that entity. You are responsible for compliance with this Agreement by persons acting on your behalf.
3.2 By registering an OAuth client by any means — including automated registration — the requester represents that (a) metadata submitted is accurate to the extent within its control, (b) it accepts the then-current version of this Agreement, and (c) registration is made for a legitimate integration need.
3.3 The latest version of this Agreement is always available at attendium.com/developer-terms. Continued use of the API constitutes ongoing acceptance of the Agreement as updated in accordance with Section 23.
Subject to this Agreement, Attendium grants you a non-exclusive, non-transferable, revocable, royalty-free license during the term to (a) access the API and Documentation, (b) register and operate Applications that integrate with the Services, and (c) use Attendium trademarks solely as permitted in Section 11. No other rights are granted. All rights not expressly granted are reserved.
5.1 You may use the API and Authorized Data only as expressly authorized by the relevant End User and in compliance with applicable law. You are responsible for obtaining all required rights, permissions and consents.
5.2 You must request the minimum scopes necessary for your Application's functionality.
5.3 You must respect all rate limits, quotas, and technical restrictions Attendium publishes or enforces.
5.4 Section 10.1 of the Terms of Service applies to Customer Content accessed through the API, subject to Section 6(a).
You shall not, and shall not permit any third party to:
(a) Competitive use. Use the API or functionality provided by the Services to build or operate a product or service that is substantially similar in purpose to, and primarily intended to replace, Attendium's offerings. This restriction does not prevent lawful use or transfer of an End User's Customer Content or the development or use of tools solely for that End User's internal purposes.
(b) Credential proxying. Build, operate, or offer a service that authenticates End Users to the Services by collecting Attendium passwords or by any means other than Attendium's official OAuth flow.
(c) API resale. Resell, sublicense, or expose access to the API to third parties as a standalone offering. This does not prevent customer-authorized integrations from accessing the API on the End User's behalf.
(d) Circumvention. Bypass paid features, pricing tiers, rate limits, scopes, authentication, or any other technical restriction.
(e) Excessive extraction. Extract or mirror Authorized Data beyond what is necessary for the purposes expressly authorized by the End User.
(f) Harmful activity. Use the API for spam, phishing, fraud, harassment, malware distribution, unauthorized surveillance, or any unlawful purpose.
(g) Prohibited AI practices. Use the Services or API in any AI system in a manner prohibited under applicable law, including the EU AI Act.
(h) Impersonation. Operate an Application that impersonates Attendium or falsely implies endorsement, partnership, or affiliation, including through domain names, branding, or logos.
(i) Other harmful activity. Any other use that Attendium reasonably determines harms the Services, Attendium, Attendium's users, or the ecosystem of integrations.
7.1 Roles. Each party's role as controller or processor is determined by applicable law and its processing activities. A provider independently engaged by an End User is not Attendium's sub-processor merely because it accesses the API. Attendium is not responsible for that provider's acts or omissions, except as required by applicable law or Attendium's data processing agreement.
7.2 Data minimization. You must collect only the data necessary for your Application's disclosed functionality.
7.3 Retention. Retain Authorized Data only for as long as lawfully necessary for the End User's authorized purposes. Delete it when the End User requests deletion or it is no longer needed. When authorization or API access ends, delete the Attendium credentials and data copies held solely for that authorization or access. Complete required deletion within 30 days, unless applicable law requires otherwise. Disconnection or inactivity alone does not require deletion of copies lawfully retained by the End User or under its separate, continuing authorization. On Attendium's written request following termination, certify compliance with this Section, identifying any retained copies.
7.4 Disclosure. You may disclose Authorized Data to a third party only with the relevant End User's express authorization and in accordance with applicable law.
7.5 Sub-processors. You shall maintain a list of sub-processors used in connection with Authorized Data and provide it to Attendium or the relevant End User on reasonable request.
7.6 Transparency. You must provide the privacy information required by applicable law, including how Authorized Data is used, retained and disclosed and how individuals can exercise their rights.
7.7 Processor terms. Each party must have the data processing agreements required for its role under applicable law in place before the relevant processing begins.
8.1 You must follow industry-standard security practices, including secure storage of OAuth tokens and client secrets, TLS for all communications, and prompt patching of known vulnerabilities.
8.2 You must not store End User Attendium passwords under any circumstances.
8.3 You must notify Attendium at security@attendium.com without undue delay, and no later than 72 hours after becoming aware of any unauthorized access to Authorized Data, OAuth tokens, or client credentials. Notifications must include the nature of the incident, data affected, remediation steps, and a point of contact.
8.4 You must cooperate with Attendium's security investigations and implement reasonable remediation requested by Attendium.
8.5 You shall not make any public statement regarding a security incident affecting the Services without Attendium's prior written consent during any active coordinated-disclosure window. This restriction does not apply to notices you are legally required to issue to regulators or affected data subjects.
9.1 Information shown on the OAuth consent screen must accurately reflect the Application and its Operator. Attendium may, at its discretion, override, modify, or supplement any client-provided metadata shown on the consent screen.
9.2 You must not induce End Users to grant scopes they do not understand or that exceed what the Application needs.
9.3 You must provide End Users with a reasonable way to revoke the Application's access and request data deletion.
Attendium may, at its sole discretion, offer differentiated access tiers with different scopes, rate limits, and consent-screen treatment, and may require identity verification or additional terms as a condition of any access. Attendium may restrict, throttle, mark as unverified, or remove any Application at any time.
11.1 You may not use Attendium trademarks in your Application name, domain name, logos, or in a manner suggesting endorsement, partnership, or affiliation without Attendium's prior written consent.
11.2 Attendium may, but is not obligated to, list your Application's name and logo as an integration in its marketing materials. You may opt out in writing.
11.3 No exclusivity. Attendium makes no commitment of exclusivity and may offer similar integrations, partnerships, or relationships with any party, including your competitors.
Attendium may add, modify, deprecate, or remove any part of the API at any time, with or without notice. Attendium makes no commitment to backward compatibility, versioning, or migration paths.
Attendium provides no support, no service-level commitments, and no uptime guarantees for the API. Any support, documentation, changelog, or communication provided is at Attendium's discretion and may be reduced or discontinued at any time.
Attendium may introduce or change fees, quotas, or paid tiers. Fee changes are subject to the notice requirements in section 4.6 of the Terms of Service. Continued use after a change takes effect constitutes acceptance.
15.1 By you. You may terminate this Agreement at any time by deleting your OAuth clients and ceasing use of the API.
15.2 By Attendium. Attendium may suspend or terminate your access, any Application, or this Agreement at any time, with or without cause and with or without notice, including where Attendium reasonably believes that (a) you have violated this Agreement or the Terms of Service, (b) you are engaging in competitive use prohibited by Section 6(a), (c) your Application poses a security, privacy, or reputational risk, or (d) continued access is inconsistent with Attendium's legal, regulatory, or business interests. Termination under this Section 15.2 shall not require Attendium to disclose or prove the reason for termination.
15.3 Effect. On termination, you must immediately cease use of the API and handle deletion and retention in accordance with Section 7.3. Sections intended by their nature to survive — including those governing prohibited use, data protection, security, confidentiality, feedback, sanctions, disclaimers, liability, and indemnification — survive termination.
Non-public API features, documentation marked confidential, and Attendium business information disclosed to you must be kept confidential and used only to operate your Application under this Agreement.
Any feedback, suggestions, or ideas you provide regarding the Services or API are non-confidential, and Attendium may use them for any purpose without obligation or attribution to you.
You warrant that your use of the Services does not violate applicable sanctions or export control laws (including EU and US regimes), and that you are not a sanctioned person or acting on behalf of one.
The API and Services are provided "as is" and "as available." Attendium disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation, to the maximum extent permitted by law.
Outputs generated by AI agents or models interacting with the Services through the API are produced by third-party systems outside Attendium's control. Attendium disclaims all liability for the accuracy, completeness, or appropriateness of such outputs.
20.1 To the maximum extent permitted by law, Attendium's aggregate liability under this Agreement shall not exceed the greater of (a) €1,000 or (b) fees paid by Developer to Attendium in the twelve (12) months preceding the event giving rise to liability. For Attendium's liability for processing governed by a data processing agreement between the parties, that agreement's liability provisions apply instead.
20.2 Neither party shall be liable for indirect, incidental, consequential, special, or punitive damages, or for loss of profits, revenue, data, or goodwill.
20.3 The limitations in this Section 20 do not apply to (a) gross negligence or wilful misconduct, (b) indemnification obligations under Section 21, (c) Developer's liability for breach of Section 16 (Confidentiality) or Section 7 (Data protection), (d) liability to data subjects under GDPR Article 82, or (e) any liability that cannot be limited under applicable Swedish law.
You shall defend, indemnify, and hold harmless Attendium and its affiliates, officers, employees, and agents from any claim, loss, damage, liability, or expense (including reasonable attorneys' fees) arising out of (a) your Application, (b) your breach of this Agreement, (c) your violation of law or third-party rights, or (d) your handling of Authorized Data.
Attendium shall not be liable for any delay or failure to perform caused by events beyond its reasonable control.
23.1 Attendium may modify this Agreement at any time.
23.2 Material changes — those that reduce Developer's rights or expand Developer's obligations in a material way — take effect no earlier than 30 days after Attendium publishes the updated Agreement. Developer is responsible for monitoring attendium.com/developer-terms for updates.
23.3 Non-material changes take effect on publication.
23.4 If you do not accept a material change, you must cease use of the API before the effective date.
24.1 This Agreement is governed by the laws of Sweden, excluding conflict-of-laws rules.
24.2 Disputes shall be resolved by the Stockholm District Court as court of first instance.
24.3 Notwithstanding Section 24.2, either party may seek interim or injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.
25.1 Language. The English-language version of this Agreement governs.
25.2 Entire agreement. This Agreement and the Terms of Service constitute the entire agreement between the parties regarding Developer activity. Where you process personal data obtained from the Services, any data processing agreement entered into under Section 7.7 and Attendium's privacy policy apply in addition to this Agreement.
25.3 Assignment. You may not assign this Agreement without Attendium's consent. Attendium may assign freely in connection with a corporate reorganization, merger, or sale of assets.
25.4 Severability. If any provision is held unenforceable, the remainder continues in effect.
25.5 No waiver. Failure to enforce any provision is not a waiver.
25.6 Notices. Notices to Attendium: legal@attendium.com. Attendium may give notice to Developer by any reasonable means, including publication on the developer portal or email to the address associated with registration or the Operator account.