API Data Access Agreement

Last updated: 2026-06-14 · Version 2026-06-14

1. Overview & Scope

This API Data Access Agreement (“Agreement”) governs (a) your use of all third-party API integrations provided by DA.N (“the Service”) — domain registrars, search-engine webmaster tools, analytics providers, and infrastructure platforms — and (b) your use of the DA.N Developer API, where your Plan includes it. By connecting any integration and supplying credentials, or by using the Developer API, you agree to the terms below. This Agreement supplements, and is part of, our Terms of Service; in case of conflict on API-specific matters, this Agreement controls.

DA.N is operated by:

OptiRank OÜ
Sepapaja tn 6, Tallinn, 15551, Estonia
Registry code: 16691153 · VAT: EE102594362

2. Data Accessed

2.1 Domain registrar APIs

When you connect your registrar account (e.g., Namecheap, Dynadot, Spaceship, INWX, Porkbun, GoDaddy, InternetBS, RX-Name), the Service may access:

  • Domain availability checks via registrar APIs
  • Domain registration capabilities using your registrar account (one-click and auto-registration)
  • Account balance and pricing information
  • Order and contact metadata associated with the registrations the Service performs on your behalf

2.2 Google Search Console + Google Analytics 4 (Google OAuth)

When you connect a Google account, the Service requests scoped OAuth tokens (no password) and may:

  • Read Search Console performance, coverage, and URL inspection data for properties you own
  • Submit sitemaps and URLs to the Google Indexing API on your behalf
  • Read Google Analytics 4 reports for properties you own

2.3 Bing Webmaster Tools

When you provide a Bing Webmaster API key, the Service may:

  • Read site analytics, query, and coverage data for properties registered under that key
  • Submit URLs for indexing via Bing Webmaster and the IndexNow protocol

2.4 Cloudflare

When you connect a Cloudflare account (API token plus optional R2 access keys), the Service may:

  • Read zone analytics and request logs
  • Create / read / modify DNS records on zones in your account
  • Upload static-site artifacts and media to R2 buckets in your account
  • Read and (with your permission) modify Cloudflare Pages projects you create through DA.N

The Service never reads or modifies zones, buckets, or projects that you have not explicitly attached to a DA.N project.

3. Credential Storage

Your registrar API credentials (API keys, tokens, usernames) are stored encrypted at rest on our servers. They are decrypted only at the moment of executing an API request on your behalf. No plaintext credentials are stored in logs or backups.

4. System Proxy Routing

If you choose to use system proxies (shared DA.N proxy IPs), your API requests are routed through our proxy servers. This means:

  • Your registrar API calls originate from our proxy IP addresses
  • Your request data passes through our servers
  • We do not log, store, or inspect the content of API responses beyond what is necessary for the Service to function

You may use your own proxies as an alternative. When using your own proxies, API calls are routed through your proxy servers instead.

5. Authorized Use

API access — both the third-party integrations and the DA.N Developer API — is provided for your own legitimate use within the scope of your Plan. You agree to:

  • Use each integration only with accounts, properties, zones, and domains you own or are authorised to manage
  • Use the Developer API only with the credentials issued to you, and keep API keys confidential
  • Comply with the terms of service of every connected third party (registrars, Google, Microsoft, Cloudflare)
  • Not use the API to build a competing product, to circumvent Plan limits, or for any unlawful purpose

6. Rate Limits & Fair Use

We apply rate limits and fair-use thresholds to API access to protect the Service and the upstream providers. Limits depend on your Plan and may be adjusted to maintain stability. You must not attempt to bypass, evade, or artificially inflate these limits (for example by rotating accounts or credentials). Excessive, abusive, or automated use beyond your authorised access may be throttled, suspended, or terminated.

7. Prohibition on Redistribution & Resale

Data obtained through the Developer API or any integration is licensed to you for your own use only. You may not redistribute, resell, sublicense, syndicate, publish as a data feed, or otherwise make available to third parties the domain data, listings, scoring, AI analysis, or other Content obtained through the API, in whole or in part, without our prior written consent. Systematic extraction, bulk downloading, mirroring, or building a derivative or competing database from DA.N data is prohibited. These restrictions are in addition to the database rights described in our Terms of Service.

8. Attribution

Where you are permitted to display data retrieved through the Service that originates from a third-party provider, you must preserve and display any attribution that the provider requires for that data, and must not remove, obscure, or alter such attributions or any proprietary notices. We will tell you where a specific attribution is required.

9. Credential Security Obligations

You are responsible for safeguarding all credentials — the registrar, Google, Microsoft, and Cloudflare credentials you connect, and the DA.N Developer API keys we issue. You must keep them confidential, use least-privilege scopes where the provider allows, and revoke and rotate them promptly if you suspect compromise. We store credentials you connect encrypted at rest (see Section 3) and decrypt them only to perform requests on your behalf, but you remain responsible for the security of the upstream accounts themselves. Notify us at [email protected] if you believe a credential or API key has been exposed.

10. “AS IS” Service Provision

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT ANY WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, TO THE EXTENT PERMITTED BY LAW.

We make no guarantees regarding:

  • Domain availability or registration success
  • Accuracy or completeness of domain data
  • Uptime or availability of the Service or its API
  • Availability, behaviour, or security of third-party registrar and provider APIs

11. User Responsibility

You are solely responsible for:

  • All actions performed through your registrar and provider accounts via this Service
  • Keeping your registrar API credentials and Developer API keys secure
  • Compliance with each provider's and registrar's terms of service
  • Any financial consequences of domain registrations, transfers, or DNS changes

12. Suspension for Abuse

We may suspend or revoke your API access — immediately and without prior notice where reasonably necessary — if we detect abuse, security risk, breach of this Agreement, excessive load on the Service or an upstream provider, or a request from a provider to do so. Where practicable we will tell you the reason and, where appropriate, restore access once the issue is resolved.

13. Limitation of Liability

IN NO EVENT SHALL DA.N BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE OR ITS API.

Our total aggregate liability for any claim related to the Service shall not exceed the amount you paid for the Service in the preceding 1 (one) month. Nothing in this Agreement limits liability that cannot be limited under applicable law.

14. Indemnification

You agree to indemnify, defend, and hold harmless DA.N and its operators from any claims, damages, losses, liabilities, and expenses arising from your use of the Service or its API, including claims related to domain registrations performed through your registrar accounts or to redistribution of data in breach of this Agreement.

15. Data Retention and Deletion

Your registrar and provider credentials are retained for as long as your account is active. Upon account deletion, all stored credentials and issued Developer API keys are permanently removed. Consent and billing records are retained as required by law.

16. Termination

This Agreement remains in effect while you have any integration connected or any active API access. You may terminate it at any time by disconnecting your integrations and ceasing to use the API; we may terminate or suspend it under Section 12 or as set out in the Terms of Service. Provisions on redistribution, intellectual property, disclaimers, limitation of liability, and indemnification survive termination.

17. Governing Law

This Agreement is governed by the laws of the Republic of Estonia and applicable European Union law. Any disputes shall be subject to the exclusive jurisdiction of the courts of the Republic of Estonia, without prejudice to mandatory consumer protections of your country of residence.

18. Changes to This Agreement

We may update this Agreement from time to time. Continued use of the Service or its API after changes take effect constitutes acceptance of the updated terms. We will notify registered users of material changes via email.

19. Contact

Questions about this Agreement? Contact us at [email protected].