MallPlus Open Platform Console
Console Documentation
Legal

Terms of Service

Last Updated: 2026-04-18

1. Acceptance of Terms

By registering for and using the MallPlus Open Platform ("Platform"), you agree to be bound by these Terms of Service and all applicable laws and regulations. If you do not agree with any of these terms, you are prohibited from using the Platform.

These terms apply to all partners, including Third-party Partner Platforms, WMS Providers, Brand Direct sellers, and any other entity accessing the MallPlus Open API.

2. API Usage Policy

  • API credentials (Client ID, Client Secret) must be kept confidential and stored securely.
  • You must not share your credentials with unauthorized third parties.
  • Sandbox credentials are for testing only. Production credentials must only be used for live operations.
  • You must not circumvent rate limits or use the API in a way that degrades service for other partners.
  • All API calls must include proper HMAC-SHA256 authentication headers.
  • You must handle seller data in compliance with the Philippine Data Privacy Act of 2012 (RA 10173).

3. Data Handling

  • Seller data accessed through the API must only be used for the purposes described in your app registration.
  • You must not store seller data beyond what is necessary for your integration.
  • You must delete seller data within 30 days of a seller revoking authorization.
  • You must implement reasonable security measures to protect seller data.
  • You must notify MallPlus within 24 hours of any data breach affecting seller information.

4. Rate Limits & Fair Use

  • Default rate limits: 100 GET requests/minute, 30 write requests/minute per app.
  • Exceeding rate limits will result in HTTP 429 responses with a Retry-After header.
  • Persistent rate limit violations may result in app suspension.
  • Contact MallPlus support for rate limit increases for enterprise integrations.

5. Termination

MallPlus reserves the right to suspend or terminate your API access at any time if:

  • You violate these Terms of Service.
  • Your integration causes harm to sellers, buyers, or the platform.
  • You fail to maintain the security of your credentials or seller data.
  • Your account remains inactive for more than 12 months.

Upon termination, you must immediately cease all API calls and delete any stored seller data.