API Use Policy

Legal

API Use Policy

Download Page

Thank you for using the Mailchimp application program interfaces (“APIs”). By accessing the APIs, you agree to this API Use Policy (the “Policy”) and our Terms. Mailchimp has open APIs that you can access at https://mailchimp.com/developer/ and https://mandrillapp.com/api/docs/. We provide these APIs to allow people to build on and benefit from our Service by creating software, services, or modules that connect to our platform or have access to the data within our platform via our APIs (an “Integration”). This Policy is and will be treated as part of our Terms. Capitalized terms used and not otherwise defined in this Policy have the meanings given to them in our Terms.

1. Login

You’ll only access the API using OAuth or an API key. If you have an Integration, then users must have the option to log in via OAuth or their API key. You won’t prompt users to provide their Mailchimp username, password, or security questions.

2. Permitted Use

You won’t use the API to send spam or take any actions that violate our Acceptable Use Policy and our Standard Terms of Use. You will comply with all applicable laws (including privacy laws and United States export control laws and regulations and economic sanctions laws and regulations). You’ll follow all documentation we provide for the APIs. You won’t attempt to hack or change the way the Service functions. We may throttle your use of the APIs at any time. We may monitor your use of the APIs for compliance with these rules, and we may deny you access to the API if you violate this Policy.

3. Privacy

You’ll respect the privacy of our users. You must obtain express permission from each user before you access their Mailchimp account. Your Integration must display a privacy policy for users detailing the information you’ll collect from them when they use the Integration. You will only access a user’s data to the extent permitted by the user and explained in your privacy policy. You must immediately delete a user’s data if the user requests deletion or terminates their account with you. Any user data which is collected by Mailchimp via your Integration will be treated in accordance with our Global Privacy Statement.

4. Security

You will implement and maintain appropriate technical and organizational security measures to protect and to preserve the security, integrity and confidentiality of the data of your users. These security measures shall prevent the unauthorized access or disclosure of personal or confidential data that you process. You must promptly report any security deficiencies or security incidents that may impact or compromise our users, APIs, or Service in writing to securityincidents@intuit.com. And, if there is a security incident, you will work with us to immediately correct the incident or deficiency.

We reserve the right to review or audit your books, records, agreements, access logs, third-party audit and examination reports, systems, networks, facilities (including physical and remote access to data centers and cloud facilities), controls, policies and procedures related to your Integration to ensure compliance with this Policy. You will promptly correct any security flaws or deficiencies. Upon remediation, you will certify in writing that you are now in compliance.

5. License

We grant you a non-exclusive, non-transferable, non-sublicensable, revocable, limited right to access and use the APIs to develop, test and support your Integration and to distribute or allow access to your Integration to users of your service, provided that you comply with this Policy and all applicable laws. You have no right to distribute or allow access to our stand-alone APIs. We may terminate your access to our APIs at any time for any reason.