Journyx App Developer Policy and API Usage Guidelines

Last modified: November 8, 2024

Journyx App Developer Policy

This policy applies to you and any Application you create. By “Application,” we mean any software application, functionality, website, product, or service that you create that uses the Journyx APIs. Application developers (“Developers”) are required to comply with this Policy and our related API terms and other obligations. By “Services” we are referring to Journyx’s services and related systems and technology, as well as Journyx’s websites and all of the information and content made available by or on behalf of Journyx through any of those services.

We reserve the right to take any action we deem necessary, if an Application violates the letter or spirit of this Policy, to protect Users and our Services. By “User” we mean any “User” as defined in our Journyx Master Services, Subscription and License Agreement, including anyone who interacts with the Application directly or indirectly or anyone whose Data is exposed to or used by the Application. By “Data” we mean data, information or content uploaded, posted, transmitted, or otherwise made available by Users via the Services, including messages, files, comments, profile information, metadata, and token data.

Application Security: Your network and the operating system and software of your web servers, databases, and computer systems must be properly configured to securely operate your Application and securely store Data. Data must be stored and served using strong encryption.

Prohibited Activities and Uses: Applications and developers are prohibited from:

Diminishing or compromising the security of the Application or our Services in any way
Providing access to our Services in any fraudulent or unauthorized way, including bypassing or circumventing our protocols and access controls
Using our unpublished APIs
Making, publishing, or including in your Application misleading and/or deceptive statements about Application functionality, performance, origin, or Data use
Transmitting any viruses or other code that may damage, detrimentally interfere with, surreptitiously intercept, or expropriate any system or Data
Attempting to reverse engineer or otherwise derive source code, trade secrets, or know-how in our API or any portion thereof

Support of your Application: You must provide appropriate assistance to your Application customers, including the provision of installation instructions and customer support contact information. Your Application must be updated as needed and you must provide timely and accurate User support.

Business Practices: Applications and developers are prohibited from:

Circumventing our intended limitations (such as pricing, features and access)
Using the API to replicate or compete with products or services offered by Journyx
Permitting advertising, including display ads, within the Application experience or the Journyx platform
Using data or content from Journyx in any advertisements or for purposes of targeting advertisements or contacting Users, including in the Application, your other Applications, or elsewhere
Implying a Journyx endorsement, certification, affiliation, or partnership unless you have explicit permission from Journyx to do so
Sub-licensing, distributing, or allowing access to the Journyx APIs to anyone else

Design: Applications and developers are prohibited from:

Violating the Journyx Trademark Guidelines
Infringing upon any intellectual property rights. Your marks, icons, and overall design conventions must not resemble those of Journyx

Data: You have no independent rights to any Data. Applications and developers are prohibited from:

Collecting, storing, and using Data without obtaining proper consent of the User
Using Data to contact Users
Obtaining any sensitive, private, and confidential personal information, such as credit card numbers or passwords from Users unless specifically necessary as part of the Application’s legitimate function and purpose
Selling, sharing, or renting Data to/with third parties under any circumstances
Permit any User to enter, access, modify, or delete any Data in violation of the User’s permissions and abilities in the Journyx product and/or software service
Encouraging Users to circumvent or interfere with their own workplace and employer data, privacy, and security policies
Using Data to create User profiles other than those strictly necessary for the Application to function
Combining Data with data gathered from other sources for any purposes unrelated to the User’s ability to use the Application for its intended purpose
Requesting and using scopes not required for your Application’s functioning — clearly define the need for scopes within your Application’s description
Failing to include a publicly available and easily accessible privacy policy that explains how the Application collects, uses, processes and stores Data, and what control Users have over their Data, in accordance with all applicable laws and legal requirements in all locations where the Application is made available to Users
Accessing Data for surveillance purposes, or allowing or assisting any entity to conduct surveillance or obtain Data using your access to the Journyx API
Otherwise exploiting Data in a way not disclosed to and permitted by Users. You may, however, use Data that is both aggregated and anonymized for purposes of analytics and development related to the Application

Compliance with Laws: Each Application must comply with all applicable laws and legal requirements in all locations where it is made available to Users. In addition, Applications and developers are prohibited from:

Spamming, harassing, stalking, intimidating or threatening Users
Allowing impersonation of Users or otherwise allowing for false representations within the Application
Facilitating violations of the law
Infringing on anyone else’s intellectual property rights (including Journyx’s)
Representing that your Application is authorized by or produced by another company or organization
Allowing or facilitating financial transactions conducted in an insecure and unapproved manner

Data breach: If Data is breached, exposed, exploited, or otherwise compromised through your Application or company, you must inform all affected customers and Journyx immediately. Notices to Journyx of your data breach must be sent to [email protected].

Export Controls: You are responsible for classifying your Applications pursuant to the Export Administration Regulations, including submission of any necessary classification requests or self-classification reports. Because the Journyx software products and services are made available worldwide with limited exceptions, developers are thus prohibited from creating Applications with an ECCN other than EAR99 or 5D992 (mass market).

Other requirements: We require Applications and developers to follow this policy as well as all other Journyx guidelines and policies including terms in any partner agreement between you and Journyx, the Journyx Master Services, Subscription and License Agreement that governs your use of our software and services, and the Journyx API Terms of Service.

If you violate this policy or any of our other terms or policies, we may take any action we deem necessary with or without notice to you, including where applicable removal of your listing from any Application directory, token revocation, developer suspension, User notification, legal action, or any other action. Upon our request, you must provide us with proof of compliance with this policy.

This policy may change. Please check back regularly for updates. We may use your email address or a notice through the Services to communicate any material changes to this policy.

Journyx API Usage Guidelines

Journyx monitors usage of the public APIs to ensure a quality experience for users of the Journyx application. All integrations must comply with the Journyx Developer Policy and API Terms. Please see https://journyx.com/policies-and-legal/api-terms.

We reserve the right to change or deprecate the APIs over time – we will provide developers notification in those cases. These notifications will be provided through our API documentation. Journyx reserves the right to place and/or define limits by which a single integration (as identified by an access token) can consume the Journyx public APIs, such as a number of requests per second or per day, or the number of times an integration can poll Journyx for new or updated information.

Integrators should use their own public and documented APIs when working with the Journyx APIs.