Developer Terms
Last updated: 2026-06-13
These Developer Terms govern your use of the Five Minutes Platform Developer Programme, the developer console at developers.infiveminutes.com, the public API at platforms.infiveminutes.com/api/v1, OAuth integrations, sandbox tenants, webhooks, and any other tools, content, or services we make available to you as a developer ("Developer Services").
By creating a developer account, requesting a magic-link sign-in, calling the API, registering an OAuth application, or installing an integration on a customer's tenant, you ("Developer", "you") agree to be bound by these terms.
If you are accepting these terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity, and "you" refers to that entity. If you do not have that authority, or you do not agree, do not use the Developer Services.
1. The Developer Programme
The Developer Programme lets you build applications and integrations that interact with the Five Minutes Platform on behalf of tenants who have explicitly authorised your application. We provide:
- A developer console for managing your applications, API keys, OAuth credentials, and webhooks.
- A sandbox tenant per developer account so you can build and test without touching real customer data.
- Documentation, sample code, and reference material at developers.infiveminutes.com/docs.
- Best-effort developer support via the email address shown in your console.
We may add, change, or remove features at any time. We will give reasonable advance notice for changes that materially break existing integrations — usually via the Changelog and email to the address on file.
2. Acceptable use
You agree NOT to:
- Use the Developer Services to violate any applicable law, including data-protection law (GDPR, India's DPDP Act, HIPAA where applicable to your customer's vertical) and export-control law.
- Misrepresent your identity, your application's purpose, or your relationship with the Five Minutes Platform or its tenants.
- Attempt to access, query, or modify data belonging to a tenant who has not authorised your application via the OAuth flow or by issuing you an API key.
- Bypass, disable, or interfere with rate limits, authentication, scope enforcement, audit logging, or any other security controls.
- Reverse-engineer the platform beyond what applicable law expressly permits.
- Send unsolicited or deceptive communications to platform users using contact information obtained via the API.
- Resell, sublicense, or redistribute access to the platform itself (you may, of course, build and sell your own application that calls the API).
We may suspend or revoke your developer account, your API keys, your OAuth applications, or your access to any tenant integration if we reasonably believe you have violated this section. Where the violation is not severe and is curable, we will tell you what you need to fix before suspension where it is practical to do so.
3. OAuth applications & customer tenants
When a tenant authorises your OAuth application, they grant you the scopes you requested at consent time. You agree:
- Your application will request only the scopes it actually needs ("minimum scope").
- You will display your application name, description, and contact email accurately on the consent screen.
- You will respect a tenant's revocation immediately. When a tenant or their administrator revokes consent or rotates their API key, you must stop calling the API with those credentials.
- You will treat the data you receive from a tenant as the tenant's confidential information. You will use it only to provide your application's stated function to that tenant, and you will protect it with at least the same level of care you apply to your own confidential information.
Five Minutes is the data processor for the tenant, and you may be a sub-processor or a separate controller depending on what your application does. We provide a sub-processor exhibit on request; you are responsible for any data-processing agreements your customers require of you.
4. API keys, tokens, and credentials
You are responsible for keeping your API keys, OAuth client secrets, and access tokens confidential. If a credential is compromised, you must rotate it immediately from the developer console and notify any affected tenants.
Test credentials (fmp_test_*) issued against your sandbox tenant carry no production data and have lower rate limits. They are not a substitute for production credentials on tenant workloads.
5. Rate limits, quotas, and fair use
The API is rate-limited per credential. The current limits are published in the Reference. We may change limits with reasonable notice. We may also throttle, queue, or temporarily block credentials that pose a real risk to platform stability — for example, a tight retry loop on a 5xx response. We will tell you why if we do this and what you need to change to lift the throttle.
6. Webhooks
If you register a webhook endpoint, you agree to:
- Verify every delivery's HMAC signature before acting on it.
- Respond with a 2xx status code within the documented timeout (currently 5 seconds).
- Handle the same delivery being sent more than once — webhooks are at-least-once.
We will retry failed deliveries on an exponential backoff for up to 24 hours, then disable the endpoint and surface the failure in your console.
7. Intellectual property
We retain all rights in the Developer Services, the documentation, and the platform itself. You retain all rights in your application's code and content. Nothing in these terms transfers ownership of anything.
You grant us a non-exclusive licence to display your application's public name, description, and logo on the consent screen, in the developer console, and (where relevant) in marketing materials describing the developer ecosystem.
8. Confidentiality
Documentation, beta features, technical previews, and any non-public information about the platform that we share with you under a notice of confidentiality is our confidential information. You may use it only to build, operate, and improve your application, and you must protect it with reasonable care.
9. No warranty
The Developer Services are provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all warranties — express, implied, or statutory — including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Developer Services will be uninterrupted, error-free, or that defects will be corrected.
10. Limitation of liability
To the maximum extent permitted by law, our aggregate liability to you for any claim arising out of or relating to these terms or the Developer Services will not exceed one hundred Indian Rupees (₹100). We will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, or business interruption, even if advised of the possibility of such damages.
The Developer Programme is a free service. The limits in this section reflect that you are not paying us for the Developer Services and are using them at your own risk.
11. Indemnification
You will indemnify, defend, and hold harmless Five Minutes Platform Inc. and its affiliates, officers, employees, and agents from and against any third-party claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of: (a) your application or its use by your customers; (b) your breach of these terms; or (c) your violation of any applicable law.
12. Termination
You may terminate your developer account at any time by deleting it from the console. We may suspend or terminate your access if you breach these terms or if continuing to provide Developer Services to you would expose us, our tenants, or other developers to legal, regulatory, or security risk we cannot reasonably accept.
Sections that by their nature should survive — IP, confidentiality, disclaimers, limitations, indemnification, and these termination provisions — will survive any termination of these terms.
13. Changes to these terms
We may update these terms from time to time. If a change is material (in our reasonable judgment), we will send notice to the email on your account and update the "Last updated" date at the top of this page. Continuing to use the Developer Services after a material change means you accept the new version. If you do not accept, your remedy is to stop using the Developer Services and delete your developer account.
14. Governing law
These terms are governed by the laws of India, without regard to conflict-of-laws principles. The courts located in Bengaluru, Karnataka have exclusive jurisdiction over any dispute arising out of or relating to these terms or the Developer Services, except that we may seek injunctive relief in any court of competent jurisdiction.
15. Contact
Questions about these terms, or about your developer account?
- Developer support: the support email shown in your console
- General contact:
fiveminuteshelp@gmail.com
These terms are provided in addition to, and not in lieu of, the main Five Minutes Platform terms of service that govern tenants. Where the two conflict for a question specific to the Developer Programme, these Developer Terms control.