CannaLib API — Terms of Service and API Licence

Interim version, effective 25 September 2026. It will be replaced by our reviewed version; we will email account holders before any change that affects them.

1. Who this agreement is between

These terms are between you (the account holder, whether an individual or an organisation) and
CannaLib (ABN 71 736 904 934), an Australian sole trader (“CannaLib”, “we”,
“us”), the operator of the CannaLib API and cannalib.org. By creating an account, requesting an API key, or making a
call to the API, you accept these terms.

2. What the service is

CannaLib provides metered access to structured datasets — variety records, lineage links and sourced
attribute data — over an API, delivered as JSON. Access is identified by an API key and limited by the plan
attached to that key: a monthly call allowance, a rate limit, a distinct-record cap, and a level of evidence detail.
Plan limits and prices are published at /api/pricing/ and may change with notice under
section 11.

3. Accounts and keys

  • You must provide a working email address to create an account. We do not require a password; sign-in is by a
    one-time link sent to your email.
  • You are responsible for keeping your API key confidential. Anyone who has your key can use your plan’s
    allowance. If a key is exposed, rotate it from your account dashboard immediately — the old key stops working
    and a new one is issued.
  • Do not share a key between unrelated users or resell access to your key. One key is for one account’s own use.
  • We may suspend a key that shows credible signs of abuse (shared/leaked key, scripted evasion of rate limits,
    attempts to enumerate or scrape beyond your plan’s caps) while we investigate, and will tell you why.

4. API licence — what you may do with what you receive

Subject to payment of any applicable fees and compliance with these terms, we grant you a limited,
non-exclusive, non-transferable licence to query the API and to use the records you receive, as follows:

  • Attribution. Free and Grower plans require a visible attribution link back to CannaLib
    (cannalib.org) wherever data from the API is displayed or published. Builder plans require attribution. Commercial
    and Scale plans may omit attribution if they choose. The required attribution format is: a text or logo link
    reading “Data by CannaLib” pointing to https://cannalib.org, placed on any page or in any interface
    where the data appears.
  • Caching. Free and Grower plans may not cache or store responses beyond the session needed to
    display them. Builder plans may cache responses for up to 30 days before re-querying. Commercial and Scale plans may
    cache responses for as long as the subscription is active; cached data must be deleted or stop being served within
    30 days of the subscription ending.
  • No bulk export. You may not systematically download, scrape, or otherwise reconstruct a
    substantial part of the CannaLib dataset outside the distinct-record caps that apply to your plan, regardless of how
    many individual calls that takes.
  • No competing database. You may not use API data to build, populate or materially improve a
    product whose primary purpose is to offer the same or a substantially similar structured dataset to others.
  • No model training without a data licence. You may not use API data to train, fine-tune or
    evaluate a machine-learning model, including large language models, without a separate written data licence from
    us. Contact [email protected] to discuss one.
  • No resale of raw access. You may build a product or service that uses API data, but you may
    not resell, sublicense, or provide API access itself (your key, or a proxy to it) to third parties.
  • Rights not expressly granted above are reserved.

5. Rate limits, quotas and fair use

Each plan has a monthly call allowance, a distinct-record cap, and per-minute/hourly/daily rate limits, published
at /api/pricing/. We may reject calls that exceed these limits with a 429
response. We may also apply reasonable, temporary throttling to protect service stability for all users. Attempting
to evade rate limits or distinct-record caps (for example, by creating multiple free accounts, rotating keys, or
using multiple IP addresses to bypass a limit) is a breach of these terms and may result in suspension of all
associated accounts.

6. Suspension and termination

  • We may suspend or revoke a key, with notice where practical, for: non-payment beyond the grace period described
    at /api/pricing/; breach of the API licence in section 4; abuse or attempted evasion of
    limits under section 5; or a chargeback/payment dispute on your account.
  • You may close your account at any time from your dashboard. Closing your account revokes your keys and cancels
    any active subscription; see refunds for what happens to unused fees.
  • Sections 4 (as it applies to data already received), 8, 9 and 10 survive termination.

7. Subscriptions, billing and cancellation

Paid plans are subscriptions that renew automatically (monthly or annually, as you choose) until you cancel.
Before you subscribe, the checkout screen discloses: the plan and price, what is included, that it renews
automatically, the renewal date and frequency, and how to cancel. You can cancel online, at any time, in one step,
from your account dashboard; cancelling stops future renewal and you keep access until the end of the period you
already paid for. Paddle.com Market Limited, as merchant of record, processes payment, issues receipts and operates
the billing portal used for cancellation and payment-method changes. See refunds for
refund terms.

8. No warranty on data

Records are compiled from a range of public and licensed sources and may contain errors, omissions or be
out of date. Data is provided “as is” without warranty that it is complete, accurate or fit for any particular
purpose. Nothing on this site or in the API constitutes advice of any kind. Where the Australian Consumer Law or
other law implies guarantees that cannot be excluded, nothing in these terms excludes, restricts or modifies those
guarantees.

9. Limitation of liability

To the maximum extent permitted by law, our total liability to you arising out of or in connection with the
service, however arising, is limited to the amount you paid us in the 12 months before the claim arose. We are not
liable for indirect, special or consequential loss. Nothing in this section limits liability that cannot be limited
under the Australian Consumer Law or other applicable law.

10. Governing law

These terms are governed by the laws of New South Wales, Australia, and the parties submit to the non-exclusive
jurisdiction of the courts of New South Wales.

11. Changes to these terms

We may update these terms or the API licence from time to time. Material changes will be notified by email to
the address on your account and/or a notice on this page at least 14 days before they take effect. Continued use of
the API after a change takes effect means you accept the updated terms; if you do not agree, you may cancel your
account before the change takes effect.

12. Contact

Questions about these terms: [email protected].