# Nedion API Service Agreement

**Version:** 2026-09-21  
**Provider:** 7StockApp OÜ — a private limited company incorporated in the Republic of Estonia, registry code **16976938**, registered address **Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia**  
**Contact:** info@7stock.app

This agreement is between the legal or natural person that receives a Nedion
API key (the "Customer") and 7StockApp OÜ ("Nedion"), and takes effect on
first use of the key. The Terms of Use apply separately to app users.

## 1. The Service

The Nedion API provides server-to-server access to the news cards Nedion
produces (summary, plain-language sentence, facts, importance score,
translations in three languages and the source link):

- `GET /api/v1/news/` — news list and filters
- `GET /api/v1/news/{slug}/` — a single card
- `GET /api/v1/export/news/` — bulk export for incremental sync
- `POST /api/v1/webhooks/` — instant notification when news is published
- `GET /api/v1/usage/` — the key's daily usage

Technical reference: `/api/schema/` (OpenAPI). The schema is versioned; a
backwards-incompatible change ships under a new version number with at
least 90 days' notice.

## 2. Plans and limits

| Plan | Calls per day | Webhook endpoints | Use |
|---|---|---|---|
| Trial (TRIAL) | 1,000 | 1 | Evaluation; not for commercial publication |
| Standard (STANDARD) | 50,000 | 5 | Commercial use |
| Partner (PARTNER) | 500,000 | 25 | High volume; by separate agreement |

Limits are counted per calendar day (UTC); on exceeding them the API returns
`429` and the count resets at midnight. Fees and payment terms are agreed in
writing with the key (order form or e-mail); this document governs the
service, not the price.

## 3. Key security

- The key is shown to the Customer once, in full; Nedion stores only its hash
  and cannot recover a lost key, only issue a new one.
- The key is confidential: it must not be placed in client applications,
  browsers or public repositories. On suspicion of a leak, notify
  info@7stock.app immediately; the key is revoked and replaced.
- Every call made with the key counts as the Customer's.

## 4. Webhooks

- Every delivery carries an `HMAC-SHA256(secret, "<timestamp>.<body>")`
  signature in the `X-Nedion-Signature` header; the Customer must verify it.
- Failed deliveries are retried with increasing intervals; when the retry
  limit is reached the endpoint is suspended, which is visible in the console
  and in the `/usage/` response.
- The Customer's endpoint must be HTTPS and return `2xx` within 10 seconds.

## 5. Use of the content and attribution

- The Customer may display, search, filter and present the cards to its own
  users within its own product.
- Every display keeps the **link to the source institution**; a card may not
  be presented as if it replaced the source.
- Cards are AI-generated summaries; the Customer may not present them as
  investment, legal or tax advice and informs its own users of that limit.
- Reselling Nedion's data set, using it to build a competing news data
  service, or using it in bulk to train a language model is prohibited. The
  last requires separate written permission.
- Content Nedion obtains from source institutions belongs to them; when a
  rights holder has a card removed (see the Copyright and Takedown Policy),
  the Customer removes its own copy within 48 hours. Removals are also
  announced by webhook.

## 6. Service level

- Nedion targets **99.5%** monthly availability for the API; planned
  maintenance is announced in advance and not counted. This is a target; a
  written SLA with outage credits is agreed separately on the Partner plan.
- Delay of news relative to the source (polling interval, processing queue)
  is outside the SLA; Nedion does not promise "real-time" data.
- Nedion may suspend a key without notice for abuse or security reasons; the
  Customer is informed within 24 hours at most.

## 7. Personal data

What the API sends to the Customer is news content and is not expected to
contain personal data. About the Customer, Nedion processes only the key
holder's contact details, the key's usage counters and the webhook endpoint
addresses (the Privacy Policy applies). If the Customer collects its own
users' data at the webhook endpoint, the Customer is the controller of that
data.

## 8. Liability

Nedion's total liability under this agreement is limited to the amount the
Customer paid in the 12 months before the event giving rise to liability.
Indirect damage, loss of profit and the Customer's obligations towards its
own users are excluded. Liability for intent and gross negligence remains.

## 9. Term and termination

- The agreement runs until the key is revoked. Either party may terminate on
  30 days' written notice.
- Nedion may terminate immediately on breach of Section 3 or 5.
- After termination the Customer stops displaying cards obtained from Nedion
  in its product within 30 days; no liability arises for content its own
  users saw before that date.

## 10. Governing law

Estonian law applies; disputes are heard by Harju County Court (Tallinn).
The parties first negotiate in good faith for 30 days.

## 11. Governing language

This agreement is written in English. Turkish and Spanish translations are
provided for convenience only; if a translation differs from the English
text, the English text prevails.

## 12. Acceptance

Using the key constitutes acceptance of this agreement. For the Partner plan,
a signed order form refers to this document and prevails over it in case of
conflict.
