Legal

API Terms, Acceptable Use and Data Processing

The terms for developers who use Chakloon Platform: the Weather, Search, Suggest, Links, Chacki, Signatures, Papers, Legal and Ads APIs and Sign in with Chakloon, with keys, quotas and prices, permitted and prohibited uses and the data processing terms.

Version 1.0In force from October 16, 2026Updated: October 17, 2026All versions

Scope

Chakloon Platform, at platform.chakloon.net, with the endpoint api.chakloon.com, is the developer cabinet of the Chakloon package. It gives access to the Chakloon APIs, such as the Weather API, the Search API, Suggest, the Links API for short links on chak.uno, Chacki answers, the Signatures API of Chakloon Sign, the Papers API of Chakloon Papers, the Legal API of Chakloon Legal and the Ads API of Chakloon Ads, and to Sign in with Chakloon. It is operated by Haydamax OÜ, registry code 17351554, Narva mnt 5, 10117 Tallinn, Estonia.

These terms supplement the Terms of Service and the Privacy Policy, which apply in full. Payments are governed by Payments, refunds and withdrawal. By creating a key or registering an application you accept these terms for yourself or for the organisation you act for.

Some methods are also governed by the rules of the service behind them: the Chak Acceptable Use Policy for the Links API, the Chacki AI Terms for Chacki answers, the Chakloon Sign Terms for the Signatures API, the Chakloon Papers Terms for the Papers API, the Chakloon Legal Terms for the Legal API and the Advertising Policy and Advertiser Terms for the Ads API. These rules apply on top of these terms. Where they say something more specific about the method, they prevail for it, and where they are written for people who use the service directly, they apply to you and your application accordingly.

The Platform is meant for developers who act for their business, trade or profession. The rules marked as applying to business users do not apply to you if you use the Platform as a consumer; then the mandatory consumer law of your country applies instead.

Account and API keys

  • You use the Platform with a Chakloon Passport account. If you act for an organisation, you confirm that you are authorised to do so.
  • Keys begin with ck_live_. One key gives access to all APIs available to your account.
  • Keep your keys secret. Do not put them in public code, in a web page or in a mobile app where others can read them; call the APIs from your server.
  • You are responsible for all use of your keys. If a key may have been exposed, revoke it in the cabinet at once and create a new one.

Free quotas and payment

API Free quota
Weather API 1 000 requests a day
Search API 2 000 requests a month
Suggest 20 000 requests a month
Links API 1 000 new links and 10 000 reads a month
Chacki answers no free quota, from 0.03 EUR per answer
Signatures API 10 completed documents a month, then 0.15 EUR per document
Papers API 50 records a month, then 0.05 EUR per record; checking records is free
Legal API reading is free, 2 EUR per generated document set
Ads API 10 000 requests a day
Sign in with Chakloon free

Paid methods are charged from your Kassero balance, the shared prepaid balance of Chakloon, at the prices in this table, in the sections below and in the cabinet. The balance is described in Payments, refunds and withdrawal. Prices are shown without VAT; where VAT applies to a purchase, it is shown before payment, as set out there. Before a paid call, an amount may be held on your balance; when the call is finished, only its actual price is charged, and the rest of the held amount is released. A call that fails, for example because an answer could not be produced, is not charged, and the held amount is released in full.

If a free quota is used up and paid use is not available for the method, or if your balance does not cover a paid call, the API answers with HTTP 402 and does not perform the call. The API performs such calls again when the quota renews or when your balance allows them. We may change the quotas and prices for the future; we tell you at least 15 days before a change takes effect, and a change never applies to requests already paid for.

Rate limits and fair use

Each key has rate limits that protect the service for everyone. They include, for each key:

  • Links API: up to 60 requests a minute, and a daily limit for new links;
  • Chacki answers: up to 60 answers a minute and 5 000 answers a day;
  • Papers API: up to 100 records a day per account, together with the records made on the website.

If you exceed a limit, the API answers with HTTP 429 and refuses requests for a time. Do not try to get around limits or quotas, for example by creating many accounts or keys for one application. Cache answers where the API allows it, instead of repeating the same request. If your application needs higher limits, write to support@chakloon.com.

Prohibited uses

You must not use the APIs:

  • for anything illegal, or to help others break the law;
  • to send spam, phishing or malware, or to defraud people;
  • to track, profile or monitor people without a lawful basis;
  • to attack, overload or probe the security of our services or anyone else's;
  • to build a copy of Chakloon Net, Chakloon News or Chakloon Weather, or a dataset for resale;
  • to train AI models on raw data obtained from the APIs, unless we have agreed this in writing;
  • in a way that suggests that we endorse your product, or that hides that data comes from us.

Attribution

Where you show data from our APIs to the public, name Chakloon as the source in a visible way near the data, for example Weather: Chakloon. Keep the links to the original sources that our answers contain, in particular the links to publishers in search and news results.

News and search data

Results of the Search API and news data contain only a headline, a link and a short excerpt. The articles and pages themselves belong to their publishers. You may show these elements as a pointer to the source, with the link, but you may not fetch, reproduce or store the full text of publishers through us, or present their content as yours. If a publisher or a rights holder asks for removal, you remove the data from your service.

No resale of raw data

You may use API data in your own product. You may not sell, license or pass on the raw data, as such or in bulk, to others, or offer it through your own API, unless we have agreed this in writing.

The Links API creates and manages short links on chak.uno: you can create, list, read, change and delete your links, get a QR code as SVG or PNG and read click statistics. The links belong to your account, and you are responsible for every address they lead to, as the owner of a Chak link is under the Chak Acceptable Use Policy.

  • Every destination is checked against lists of phishing and malware addresses and under the Chak Acceptable Use Policy, when a link is created or changed and then regularly.
  • A link may be refused, may open for visitors only through a warning page, for example while it is under review, or may be blocked.
  • For each such measure you receive a statement of reasons and can appeal as described in the Chak Acceptable Use Policy.
  • The API returns only your own links and aggregated click statistics. It gives no IP addresses, names or accounts of visitors, and you must not try to identify individual visitors from the statistics or combine them with other data for that purpose.

Chacki answers

Chacki answers give your application an answer from Chacki, which can use Chakloon tools: web search, fresh news and weather. The answer is generated by an artificial intelligence system, not written by a person; it is produced by a model of Anthropic, Anthropic PBC, USA. The Chacki AI Terms apply to answers obtained through the API, in particular their rules on accuracy and prohibited uses.

We do not use your prompts or the answers to train or improve Chacki, and we do not store their text. For billing reconciliation we keep only the metadata of each answer: the key and account that requested it, the number of tokens and tool calls, and the time.

Price

  • An answer with up to 2 000 output tokens and up to 3 tool calls costs 0.03 EUR.
  • Each further 1 000 output tokens cost 0.01 EUR.
  • Each further tool call costs 0.005 EUR.
  • Before the answer, an amount is held on your Kassero balance, and after it only the actual price is charged; an answer that fails is not charged.

Streaming

If the request sets stream: true, the answer arrives as a stream of events: start, tool, delta and done. After done the gateway sends a charge event with the amount and the currency charged. If your client disconnects, the answer stops and only what has already been written is charged. If an error occurs or the stream breaks before done, nothing is charged.

Transparency under the AI Act

When you integrate Chacki answers into your product, you are a deployer of an AI system within the meaning of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689); if you offer the result under your own name as an AI system, you may also have the obligations of its provider. Under Article 50 of the AI Act you must:

  • where your product presents answers through a conversational interface, such as a chat, make sure that people are told clearly, at the latest at their first interaction, that they are interacting with an AI system, unless this is obvious to a reasonably well-informed person (Article 50(1));
  • where you publish an answer, or a text based on it, to inform the public on matters of public interest, disclose that the text is generated by AI, unless it has undergone human review or editorial control and a natural or legal person holds editorial responsibility for its publication (Article 50(4)).

Accuracy and permitted use

Answers can be wrong. An AI model can state wrong facts, invent sources and figures or give outdated information with confidence, and the tools do not guarantee that what they find is correct. Answers are not medical, legal, financial, psychological or other professional advice. Do not present them to your users as checked facts or as the advice of a professional.

You must not use Chacki answers:

  • to generate child sexual abuse material or any sexual content involving minors;
  • to deceive people, for example through fraud, phishing, disinformation, fake reviews or the impersonation of real persons or organisations;
  • to produce spam or content for mass unsolicited distribution;
  • for any practice prohibited by Article 5 of the AI Act, such as manipulation that exploits people's vulnerabilities or social scoring;
  • for any other use that the Chacki AI Terms prohibit.

Do not use answers to make decisions with legal or similarly significant effects on people, such as decisions on hiring, credit, insurance, education or access to public services, without review by a person who has the authority and the information to change the decision.

Signatures API

The Signatures API lets your application create documents for signature in Chakloon Sign. You upload a finished PDF of up to 25 MB and set from 1 to 20 signers and the order in which they sign. The Chakloon Sign Terms apply to every document created through the API, and you have the responsibilities of the sender under them, including the choice of the signers, the title of the document shown on the public verification page and the decision whether a simple electronic signature is enough for the document.

Each month 10 completed documents are free. Each further completed document costs 0.15 EUR and is charged from your Kassero balance.

Webhooks

Your server can be notified when a document is completed or declined, through the events document.completed and document.declined. You set the webhook secret yourself, in the field webhookSecret of the request that creates the document, and it applies to that document. Each delivery is signed with HMAC-SHA256 of the request body, using this secret. There is no separate rotation of the secret: a new secret comes with a new document.

  • Verify the HMAC signature of every delivery before you act on it, and reject a delivery whose signature does not match.
  • Keep the webhook secret confidential, like an API key, and store it only on your server. If it may have been exposed, stop using it and set a new secret for new documents.
  • You are responsible for the endpoint that receives deliveries and for what your system does with them. We are not liable for a delivery once it has reached an endpoint you control, or for damage caused by a delivery that you accepted without verifying its signature. This does not limit liability that cannot be limited by law.

Papers API

The Papers API lets your application make records in Chakloon Papers and check them. Your application computes the SHA-256 hash of a file itself and sends us the hash, the title of the work and, if it wishes, the name, type and size of the file; the file itself never reaches us. Any record can be checked by its number or its hash free of charge, and the list of records returns only the records of your account. The Chakloon Papers Terms apply to every record made through the API.

  • Public and permanent records. The registry is public. Anyone can open a record by its number or its hash without signing in and see the title of the work, the name, type and size of the file, the hash, the statement of the record and the display name of the applicant. Records cannot be edited or deleted, neither through the API nor on the website, so everything a record shows stays public permanently.
  • What a record proves. A record shows that a file with this hash existed no later than the moment of the record. It does not prove who created the file or holds the rights in it, what the file means, or that its content is true or lawful, and it is not a qualified electronic time stamp under Regulation (EU) No 910/2014 (eIDAS). Do not present a record to your users as more than this.
  • The applicant. The applicant of a record made through the API is the Chakloon Passport account that owns the key, and the public record shows the display name of that account. The e-mail address, @handle and identifier of the account are not shown.
  • Records for your users. If your application makes records for its users, you need the right to record their files on their behalf. Before the first record, tell them clearly that the record, with its title, file name and statement, and the display name of the applicant become public and cannot be deleted. Do not put personal data of other people, confidential information or secrets into the title, the file name or the statement.
  • Price. Each month 50 records are free. Each further record costs 0.05 EUR and is charged from your Kassero balance. Checking records is free.
  • Data of records. We process the data of records as controller under the Papers Terms and the Privacy Policy, not as your processor, so the data processing terms of this document do not apply to them.

The Legal API gives site owners of Chakloon Legal access to their sites from their own systems. You can list your sites and read one of them, read the consent log and the latest documents of a site, and generate a new set of documents from the answers to the questionnaire: a privacy policy, a cookie policy, terms and a legal notice. A generated set arrives as drafts, and you publish them in the cabinet at legal.chakloon.net. Adding a site and proving its domain are possible only in the cabinet. The API works once you have opened legal.chakloon.net, which creates your workspace. The Chakloon Legal Terms apply to every site, document and consent log that you use through the API.

  • Not legal advice. The documents are templates built only from the answers you send. They are not legal advice, and using the API creates no lawyer and client relationship between you and us. Read every document before you publish it, keep it current and ask a lawyer where your situation requires it.
  • Responsibility for the website. The site owner remains responsible for true and complete answers, for choosing, adapting and publishing the documents and for the compliance of the website with the law, as set out in the Legal Terms. If you use the API for a site owner, for example as a developer or an agency, you need the site owner's authority for every action, you send only answers that the site owner has given or confirmed, and you remain responsible for what you send with your key.
  • Price. Reading sites, documents and consent logs is free. Each generated document set costs 2 EUR and is charged from your Kassero balance.
  • Consent log. Through the API you receive the consent events of the visitors of a site: the consent identifier, the version of the banner settings, the type of event, the choices by category, the domain of the page and the time. For these data the site owner is the controller and Haydamax OÜ is its processor. The data processing agreement in the Legal Terms applies to the log, and the data processing terms of this document apply to its delivery through the API; where the two differ, the Legal Terms prevail for the consent log. If you read the log for a site owner, you do so on its instructions and only for its purposes, such as proving consent, and you must not use it to identify or track visitors.
  • Widget storage. The consent widget is not part of the API and works as set out in the Legal Terms: it keeps the choice of a visitor in the local storage of the browser, under a key made of chakloon_legal_consent_ and the identifier of the site, and sets no cookie.

Ads API

The Ads API gives advertisers of Chakloon Ads, at chakloon.net/add, access to their campaigns from their own systems. You can list your campaigns and read one of them, pause a running campaign and resume a paused one, read reports with impressions, clicks and spend for 1 to 365 days, and read the advertising balance and spend. Creating and editing campaigns and ads, and topping up the balance, are possible only in the cabinet at chakloon.net/add. The Ads API is free, up to 10 000 requests a day.

  • Advertising Policy. The Advertising Policy and Advertiser Terms apply in full to every campaign and every ad that you manage through the API. In particular, every ad is reviewed by a person and shown only after approval, the prohibited and restricted content listed there is not accepted, every ad carries the label Ad and the name of the advertiser, and ads are targeted only by the languages of the visitor's browser. The API does not change these rules: it can resume only a paused campaign that has passed moderation, and not a campaign that was stopped after a notice.
  • The advertiser's responsibility. The advertiser remains responsible for the ads, the landing pages and the goods and services offered, as set out in the Advertising Policy. Pausing or resuming a campaign through the API is an action of the advertiser, in the same way as in the cabinet.
  • Acting for an advertiser. A key gives access only to the campaigns of the account that owns it. If you use the Ads API for an advertiser, for example as a developer or an agency, you need the advertiser's authority for every action you take, and you make sure that the names of the advertiser and of the payer entered in the cabinet are correct and name the person or company on whose behalf and at whose expense the ad is shown. Do not use the API to present an ad as coming from anyone other than its real advertiser.
  • Payment. Impressions are paid from the prepaid advertising balance at the auction prices set out in the Advertising Policy. The balance is topped up only in the cabinet, also from your Chakloon balance, as set out there and in Payments, refunds and withdrawal. The Ads API does not charge for requests, does not move money and does not top up the balance.
  • No political advertising. We do not accept political advertising within the meaning of Regulation (EU) 2024/900 on the transparency and targeting of political advertising, or any other ad that the Advertising Policy describes as political. This applies equally to campaigns managed through the API, and we stop a campaign that contains such advertising.
  • Refusal and suspension. If a campaign or an ad breaks the Advertising Policy or the law, we may refuse, stop or remove it and suspend the advertiser account or the key, as set out there and in the section Suspension and termination. We tell you the decision with a statement of reasons, which rule or law is broken and which facts we relied on, and you can reply or appeal as described in Content moderation and appeals.

Data in the Ads API

The Ads API returns data of the advertiser account: the campaigns and their creatives, the names of the advertiser and of the payer, the moderation note, the reports and the balance. We process these data as controller under the Privacy Policy and the Advertising Policy, not as your processor, so the data processing terms of this document do not apply to them. Reports contain only aggregated numbers of impressions and clicks, spend and their totals by day and by campaign; they contain no IP addresses, identifiers or other data about individual visitors, and you must not try to identify visitors from them. If you act for an advertiser, you receive these data on the advertiser's behalf and may use them only for the advertiser's purposes.

Changes and deprecation

The APIs evolve. We may add, change or remove functions. We announce changes that break existing integrations, and the end of an API version, at least 15 days in advance, and keep the old version running for a transition period. In urgent cases, such as security problems or orders of an authority, we may act without notice, and we then tell you as soon as we can.

We tell you about a change of these terms by e-mail or in the cabinet at least 15 days before it takes effect. If you do not agree, you may stop using the Platform and end the contract before that date; an unused paid balance is then refunded.

Suspension and termination

We may restrict or suspend a key or an account, or block an application from Sign in with Chakloon, if these terms are broken, if use endangers the service or its users, if a payment is reversed or if an authority orders it. At the latest when the measure takes effect, we tell you the reason and the facts it is based on, unless the law or security does not allow it, and you can reply to clarify the facts or appeal as described in Content moderation and appeals. If the reason no longer exists, we lift the measure.

You may stop using the APIs at any time and delete your keys. We may end the contract for your account, or end the service, with at least 30 days' notice and reasons; without notice only for a serious or repeated breach or where the law requires it. An unused paid balance is then refunded as described in Payments, refunds and withdrawal.

Liability

The free APIs are provided as they are, without a promise of availability or accuracy. Weather forecasts, search results, Chacki answers, documents built through the Legal API and the results of link checks may be wrong or incomplete and must not be the only basis for decisions about safety, health, money or law; a link that has passed the check is not guaranteed to be safe. Our liability for paid use is governed by the Terms of Service. Nothing in these terms limits liability that cannot be limited by law, including liability for intent and gross negligence.

For business users: we are not liable for lost profit, lost data or other indirect damage caused by unavailability or errors of the APIs, and our total liability under these terms is limited to the amount you paid us for the Platform in the twelve months before the event. You are responsible for your application and its users, and if a third party or an authority makes a claim against us because of your application or your breach of these terms, you compensate us for the resulting damage and reasonable costs, unless the claim was caused by our own fault.

Sign in with Chakloon

Sign in with Chakloon lets your application sign users in with their Chakloon Passport account, using OpenID Connect. It is free.

Roles

For the personal data of your users that your application receives and uses, you are the controller. When we authenticate your users on your behalf and pass the result to your application, we act as your processor. The data processing terms below form the data processing agreement under Article 28 GDPR between you and us, for Sign in with Chakloon, for Chacki answers and the Links API as set out in the section Data processing for Chacki answers and links, and for the delivery of consent logs through the Legal API as set out in the section Legal API. You are responsible for having a lawful basis for the processing and for informing your users.

Data processing terms

  • Subject matter and duration. Authentication of users of your application and transfer to it of the identity data that the user allows and your application requests, for as long as your application uses Sign in with Chakloon.
  • Nature and purpose. Checking the sign-in of the user, and sending your application the result and the requested data over an encrypted connection.
  • Types of data and data subjects. Identity data of the Chakloon Passport account that your application requests and the user allows, such as an account identifier, name, e-mail address and avatar, and technical data of the sign-in. The data subjects are users of your application who sign in with Chakloon Passport.
  • Instructions. We process this data only on your documented instructions, which are these terms and your configuration in the cabinet, including with regard to transfers outside the European Economic Area. If the law requires us to process it otherwise, we tell you before, unless the law forbids this. We tell you if we believe an instruction breaks the law.
  • Location. Authentication, short links and consent logs of Chakloon Legal are processed in the European Economic Area. For Chacki answers, the request is also processed by Anthropic in the USA, as set out in the section Data processing for Chacki answers and links.
  • Confidentiality. People who process the data for us are bound by confidentiality.
  • Security. We protect the data with appropriate technical and organisational measures under Article 32 GDPR, including encrypted connections and limited access.
  • Sub-processors. You give us general authorisation to use sub-processors. We use Hetzner Online GmbH for servers and object storage in Germany and Finland and, for Chacki answers only, Anthropic PBC, USA, to generate the answers. We tell you at least 15 days in advance about any new or replaced sub-processor for this processing, and you may object within that time on reasonable grounds; if we cannot meet the objection, you may stop using Sign in with Chakloon and end this agreement. Each sub-processor is bound by a contract with the same data protection obligations, and we remain responsible to you for its work.
  • Assistance. We help you, as far as the nature of the processing allows, to answer requests of your users under the GDPR and to meet your obligations on security, breach notification, impact assessments and prior consultation of a supervisory authority.
  • Breach notification. We notify you of a personal data breach that affects your users without undue delay after we become aware of it, with what we know of its nature, the data and users concerned, the likely consequences and the measures taken, and we add details as we learn them.
  • Deletion or return. When you stop using Sign in with Chakloon, we stop processing for your application and, at your choice, return or delete the data held for you, unless the law requires us to keep it.
  • Audits. We give you the information needed to show compliance with these terms and with Article 28 GDPR, first by answering your written questions and providing documents. Where that is not enough, we allow an audit or inspection by you or an auditor you appoint, with reasonable notice, during working hours and under confidentiality.

Your users and us

Your users still have their own relationship with us: their Chakloon Passport account is governed by our Terms of Service and Privacy Policy, and for that account we are the controller. Your application must have its own privacy policy that explains what it does with the data it receives. Do not ask users for their Chakloon password, and do not suggest that your application is operated by Chakloon.

When you send us content through Chacki answers or the Links API, such as prompts, the context you add to them and destination addresses, we process the personal data in it on your behalf and only on your instructions, as your processor. The data processing terms in the section Sign in with Chakloon apply to this processing as well, with these specifics:

  • Subject matter, purpose and duration. Producing answers to your prompts, and creating, checking and redirecting your short links, for as long as you use these methods.
  • Types of data and data subjects. Any personal data of your users or other people that you include in prompts, in their context or in destination addresses.
  • Transfer to the USA. For Chacki answers, the prompt and its context are sent to Anthropic PBC, USA, our sub-processor, to produce the answer. The transfer relies on the Standard Contractual Clauses approved by the European Commission or another transfer mechanism under Chapter V GDPR. Anthropic does not use data from our API account to train its models; under its terms it may keep the data for a limited time, for example to detect abuse, and then deletes it.
  • Sensitive data and children. Do not send special categories of personal data, such as data about health, religious beliefs or sex life, or data of children, in prompts or destination addresses, unless you have a lawful basis for it, including a condition of Article 9 GDPR where it applies, and you have informed the people concerned.
  • No training, no stored text. We do not use prompts and answers of Chacki answers to train or improve Chacki, and we do not store their text. For billing reconciliation we keep only the key and account, the number of tokens and tool calls and the time of each answer.
  • Retention. The log of each API request, with the key, the method, the status and the duration but without the request and answer bodies, is kept for 13 months and cleaned daily. The metadata of Chacki answers are kept for 13 months. Destination addresses of short links are kept as long as the link exists and are deleted with the link or with your account. Documents created through the Signatures API, records of Chakloon Papers and consent logs of Chakloon Legal are kept under the Chakloon Sign Terms, the Chakloon Papers Terms and the Chakloon Legal Terms.
  • Visitors of short links. The data of people who open your short links, including the click records described in the Chak Acceptable Use Policy, are processed by us as controller under the Privacy Policy; you receive only aggregated statistics.

Contact