API Usage Policy

1. Authorized API Access

Paradise Container Services provides API-based tracking access only to approved clients, internal teams, and integration partners operating under valid commercial or technical authorization. API access is intended for business use cases such as shipment visibility, ERP integration, milestone retrieval, and client dashboard synchronization.

2. API Key Management

Each authorized client receives one or more API credentials tied to a named account or integration context. API keys are confidential and must be stored securely by the receiving organization.

• API keys must not be hardcoded in public repositories, exposed in client-side code, or shared with unauthorized persons.
• Clients must rotate keys when compromise is suspected, when personnel changes occur, or when requested by our team.
• We may suspend, regenerate, or revoke API keys to protect service continuity, data confidentiality, or contractual compliance.

3. Rate Limiting and Fair Use

To preserve system stability and fair access, API usage is subject to rate limiting, concurrency management, and abuse detection controls. Our standard rate expectation is 120 requests per minute per API key, unless a separate enterprise agreement states otherwise.

• Clients should cache responses where practical and avoid unnecessary repeated polling.
• Clients should use retry and backoff logic rather than aggressive reconnect behaviour.
• Batch integrations must be designed to avoid avoidable request bursts during peak operational periods.

4. Prohibited Use

The API must not be used in ways that threaten system integrity, confidentiality, or fair access for other customers.

• Do not attempt credential stuffing, token guessing, endpoint scanning, scraping of unrelated data, or privilege escalation.
• Do not access consignments, containers, or tracking histories that are outside the scope of your authorization.
• Do not repackage or resell API data without written permission.
• Do not interfere with service availability through automated overload, denial-of-service behaviour, or malformed traffic.

5. Monitoring, Suspension, and Contact

Paradise Container Services may log API activity, investigate suspicious traffic, and suspend or restrict access where misuse, instability, or policy violations are detected. Questions regarding onboarding, technical support, or security reporting may be sent to paradisecontainerservice@gmail.com.