Developer Agreement

Last Updated: November 2025

This PassFlow Developer Agreement (“Agreement”) is a legally binding contract between you and Netnodes Limited (“PassFlow”, “we”, “us”, or “our”).

By creating a developer account, signing in, or accessing the PassFlow API, you agree to this Agreement.

If you do not agree, do not use the PassFlow API.

1. Overview

This Agreement governs your access to and use of the PassFlow developer platform, including the PassFlow API, SDKs, tools, sample code, documentation, dashboards, test environments, and any related materials (“Developer Services”).

Your use of the Developer Services must comply with this Agreement at all times.

2. Developer Account

You must create and maintain a PassFlow account to use the Developer Services.

You are responsible for:

• keeping your login details secure
• all activity under your account
• ensuring your developers and contractors comply with this Agreement

You may not share, sell, or lease access to your account or API credentials.

Licence to Use the Developer Services

PassFlow grants you a limited, non-exclusive, non-transferable, revocable licence to use the Developer Services solely to integrate your product or service with PassFlow.

You may not use the Developer Services to develop, operate, or assist a competing digital pass issuance platform.

PassFlow owns all intellectual property rights in the Developer Services.

4. Your Responsibilities

You must:

• comply with all applicable laws, including privacy and data-protection laws such as GDPR
• follow all technical documentation and integration guidance
• obtain all necessary rights and permissions from your end users
• maintain security appropriate to the sensitivity of the data you process

You may not misrepresent your integration or imply that your product is endorsed or certified by PassFlow.

5. Data Protection and Privacy

If you process personal data through the Developer Services, you must do so lawfully, transparently, and only for purposes your users reasonably expect.

You must:

• only send lawful, authorised data to the PassFlow API
• implement technical and organisational measures to protect personal data
• comply with the PassFlow Privacy Notice and any data-processing terms we make available
• promptly delete data that you no longer require
• notify us without undue delay if you discover a security incident involving the Developer Services

You may not collect, store, or use personal data from the Developer Services for profiling, advertising, or any unrelated purpose.

6. Security

You must:

• keep API keys confidential
• store keys only in secure, server-side environments
• rotate keys if you suspect compromise
• use industry-standard encryption for data in transit and at rest
• prevent unauthorised use of your integration

You may not:

• interfere with or disrupt the Developer Services
• attempt to access data belonging to other PassFlow customers
• probe or scan PassFlow infrastructure

7. Rate Limits and Usage Restrictions

PassFlow may apply rate limits, quotas, or other restrictions to ensure stable operation.

You may not attempt to bypass or exceed these limits.

PassFlow may throttle, suspend, or terminate access that negatively impacts system performance or violates this Agreement.

8. Brand Use and Attribution

You may reference PassFlow factually (e.g., “Integrates with PassFlow”).

You may not:

• use PassFlow’s name, logos, or branding without written permission
• imply partnership, endorsement, or certification
• modify or create derivative works of PassFlow trademarks

PassFlow may request that you modify or remove branding that we believe misuses our marks.

9. Prohibited Conduct

You may not use the Developer Services to:

• create fraudulent passes or misrepresent identity
• distribute malware, spam, or harmful content
• engage in phishing or deceptive practices
• violate intellectual-property rights
• harvest or misuse personal data
• circumvent authentication, encryption, or access controls
• build competing pass-issuance platforms or similar services

PassFlow may suspend or terminate access immediately if prohibited conduct is detected.

10. API Changes and Availability

PassFlow may update, modify, or discontinue the Developer Services at any time.

We aim to provide reasonable notice for changes that materially affect your integration, but availability is not guaranteed.

The Developer Services are provided on an “as is” and “as available” basis.

11. Fees

Access to certain Developer Services may require payment based on published pricing or a separate written agreement.

If pricing changes, continued use of the Developer Services constitutes acceptance of the new terms.

12. Termination

You may stop using the Developer Services at any time.

PassFlow may suspend or terminate your access if you:

• violate this Agreement
• create security or operational risk
• misuse the Developer Services
• fail to pay applicable fees

Upon termination, you must:

• stop using the Developer Services
• delete all API credentials
• delete any cached PassFlow data unless retention is legally required

13. Disclaimers

To the maximum extent permitted by law:

• PassFlow provides the Developer Services without warranties or guarantees
• PassFlow does not warrant uninterrupted or error-free operation
• PassFlow is not responsible for loss of data, revenue, or business

14. Limitation of Liability

To the maximum extent permitted by law, PassFlow’s total liability arising out of or relating to this Agreement is limited to the amount paid by you for Developer Services in the preceding twelve months.

PassFlow is not liable for indirect, incidental, consequential, or punitive damages.

15. Changes to this Agreement

We may update this Agreement from time to time.
If we make material changes, we will notify you.
Your continued use of the Developer Services after the changes take effect constitutes acceptance.

16. General Terms

This Agreement:

• is governed by the laws of England and Wales
• does not create a partnership, agency, or employment relationship
• may not be assigned without our written consent
• remains valid even if one clause is found unenforceable

This Agreement forms the entire agreement between you and PassFlow regarding the Developer Services.