TarseekLegal CenterDraft

Overview

  • Legal Center

Legal

  • Terms
  • API Terms
  • Usage Policy
  • Copyright
  • Beta Terms

Privacy & Data

  • Privacy
  • Data Practices
  • Model Providers
  • DPA
  • Subprocessors
  • Cookies
  • Privacy Choices
  • Regional Privacy
  • Sensitive Data

Trust & Security

  • Security
  • Vulnerability Disclosure
  • AI Transparency
  • Law Enforcement

Tarseek Legal Center

API & Developer Terms

Terms
Effective
Not yet effective
Last updated
September 26, 2026
Version
1.0
Usage Policy

This document is currently being prepared and is not yet effective. It is a draft of Tarseek’s intended legal framework. It does not create a binding contract, privacy notice, or other legal obligation until Tarseek publishes an effective version and users agree to it where required.

These API & Developer Terms supplement the Terms of Service and apply when you access Tarseek programmatically, generate API Keys, or build applications that call Tarseek.

1. API keys and credential security

You must keep API Keys secret, restrict them to trusted environments, rotate them if exposed, and revoke Keys you no longer need. You are responsible for all requests authenticated with your Keys.

IMPLEMENTED

Project managers can create, restrict, disable, atomically rotate, and revoke keys. Tarseek administrators can immediately suspend compromised or abusive keys with an immutable enforcement record.

2. Automated access

Automated access is permitted only through documented APIs using valid credentials. Scraping Tarseek websites, harvesting model catalogs by abusive means, or bypassing authentication is prohibited.

3. Rate limits, quotas, and cost guardrails

Tarseek and Model Providers may impose rate limits, quotas, and concurrency limits. Optional project and key cost limits use Tarseek's recorded estimates to reject later requests. They do not cap the Customer's provider account or guarantee the provider's final invoice.

IMPLEMENTED — Cost guardrails

Project monthly and per-key monthly or lifetime hard stops are enforced against recorded estimated cost before additional usage. Provider-account limits remain the Customer's responsibility.

4. Billing and metering

Customers bring their own Provider Credentials. Model Providers bill the Customer's provider account directly under the provider's terms. Tarseek does not sell prepaid inference credits or add a model-usage markup. Tarseek may display usage and estimated cost based on provider-reported usage, catalog prices, token counts, or other provider billing units. A provider may charge for work completed before a stream is interrupted.

IMPLEMENTED

Customer inference is BYOK-only. Customer credit, checkout, shared-provider credential, and platform usage-debit routes are not exposed or used for inference.

5. Routing, fallback, and retries

Tarseek uses the explicit Model's designated primary Deployment with the Customer's matching Provider Credential. It does not silently switch to another Deployment or a Tarseek-owned key. You must design clients for retries, idempotency where offered, and partial streams. Request identifiers should be retained for support and provider billing disputes.

IMPLEMENTED

Request IDs appear on gateway responses and in project request history.

6. Downstream applications and end users

If you provide an application to end users, you are responsible for that application’s compliance, including your end users’ Inputs, your user terms, age restrictions, privacy notices, and provider rules. Tarseek has no direct contract with your end users unless it separately agrees.

7. API abuse

Prohibited conduct includes credential stuffing, automated attacks against Tarseek, bypassing rate limits or safety systems, mining undocumented endpoints, misusing provider identifiers, generating abusive traffic, or using Keys from unauthorized accounts.

IMPLEMENTED — Abuse enforcement

Authenticated reporting, request/project correlation, rate limits, immediate key, project, account, and deployment suspension, restoration, evidence metadata, provider-escalation tracking, and administrator audit records are implemented.

8. Reverse engineering and undocumented endpoints

You may not reverse engineer the Service except to the extent that restriction is prohibited by law. Undocumented endpoints, beta headers, and internal identifiers may change or disappear and are not a supported contract. Do not present Tarseek-internal provider identifiers as if they were the provider’s official product names in a misleading way.

9. Streaming

Streaming may disconnect. Tokens already processed by a provider may be billed to the Customer's provider account. Clients must handle incomplete streams.

10. API deprecation, versioning, and compatibility

Tarseek intends to version public APIs and to provide reasonable deprecation notice for breaking changes where practicable. Backwards compatibility is a goal, not an absolute guarantee, especially for Model availability and provider-specific behavior. Beta endpoints are governed by the Beta & Preview Terms.

PARTIALLY IMPLEMENTED

The developer changelog and compatibility policy are published. Production rollout and retirement-notice validation remain pending.

11. Provider rules

You must comply with applicable Model Provider terms. Tarseek may pass through or enforce those rules, including commercial-use, geographic, and data-handling restrictions.

Related policies

  • Terms of Service
  • Acceptable Use Policy
  • Data Practices & Retention

Version history

No prior effective versions have been published. Future effective versions will be retained at stable URLs rather than silently overwritten.

Contact

Questions about this document: legal@tarseek.com. General legal inquiries: legal@tarseek.com. Privacy inquiries: privacy@tarseek.com.

REQUIRES IMPLEMENTATION — Contact channels

The public addresses are legal@tarseek.com, privacy@tarseek.com, and security@tarseek.com. They may reach the same inbox. No data-protection officer or EU representative is appointed. Confirm the mailboxes are monitored before these pages become effective.

On this page

    Legal

    • Terms
    • Privacy
    • Usage Policy
    • Legal Center

    Trust

    • Data Practices
    • Security
    • Model Providers
    • Subprocessors

    Documents in the Legal Center are drafts and are not yet legally effective. See the Legal Center for the complete index.