"API Key" means the unique credential issued to you that authenticates your requests to the Service.

"Application" means any software, website, product, or service you build using the Service.

"Data" means the food intelligence information, product attributes, scores, flags, and all other structured content returned by the Service.

"Free Tier" means the Developer plan providing up to 1,000 API calls per calendar month at no charge.

"Paid Plan" means any subscription plan above the Free Tier, as listed on our pricing page.

"User" or "you" means any individual or legal entity accessing the Service.

To access the Service you must request an API Key by contacting us at support@nutrigraphapi.com. You must provide accurate and complete information. You are responsible for maintaining the confidentiality of your API Key and for all activity that occurs under it.

You must not share your API Key with third parties, publish it in public repositories, embed it in client-side code, or otherwise expose it in any way that would allow unauthorised access. If you suspect your API Key has been compromised, notify us immediately and we will issue a replacement.

Each API Key is issued to one legal entity. Multiple applications owned by the same entity may use the same key unless otherwise agreed in writing.

Subject to these Terms, your plan limits, and the restrictions in Section 4, you may use the Service solely to:

• Query on demand: Make real-time API calls in direct response to an end-user action or an application event within your own Application
• Display to end users: Present Data returned from a live API call to the specific end user whose action triggered the request
• Server-side enrichment: Use Data within your own Application's server-side logic — filtering, scoring, personalisation — provided results are not stored as a derivative dataset
• Short-term performance caching: Cache individual product responses for up to 24 hours solely for the purpose of reducing redundant API calls for the same product within your Application. Cached data must be used only within your Application and not exported, shared, or stored beyond this window
• Internal product development: Query the Service to test, develop, and QA your own Application, within your plan's monthly quota

You must not:

• Use the Service to build or populate a competing food data product, database, or API that is offered to third parties as a standalone data service
• Resell, sublicense, or redistribute raw API responses as a data feed or bulk dataset to third parties
• Use the Service for any unlawful purpose or in violation of applicable regulations
• Reverse engineer, decompile, or attempt to extract our underlying database structure
• Store, persist, archive, or accumulate Data beyond the 24-hour performance cache permitted in Section 3
• Build or populate any database, dataset, or knowledge base using Data from the Service
• Train, fine-tune, or evaluate any AI or machine learning model using Data from the Service
• Systematically query the Service to mirror or index our product database
• Transfer Data to third parties in raw or lightly processed form outside of your Application's end-user functionality
• Use automated means to circumvent rate limits or access controls
• Misrepresent the source or accuracy of Data in your Application in a manner that could endanger users, particularly with respect to allergen or dietary compliance information
• Use the Service to make medical diagnoses, prescribe treatments, or provide clinical advice without appropriate professional oversight and disclaimers
• Use the Service in any Application targeted at children under 13 without appropriate parental consent mechanisms

Ownership: All Data returned by the Service — including product attributes, scores, flags, ingredient structures, allergen qualifications, and all derived intelligence — is and remains the exclusive intellectual property of ScanGeni Ventures Pvt Ltd. Your use of the Service grants you no ownership rights in the Data, individually or in aggregate.

No derivative datasets: You must not use the Service to build, populate, or enrich any dataset, corpus, or knowledge base — whether for internal use, commercial use, AI/ML training, or any other purpose. Each API response is a transactional data delivery, not a data asset transfer.

No systematic collection: You must not query the Service in patterns designed to systematically collect, index, or mirror our product database — whether by sequential UPC iteration, bulk barcode lists (except under a separately agreed Enterprise data licensing arrangement), or any other method. We monitor for and will terminate access for systematic collection patterns without notice.

No onward transfer: You must not transfer, share, sell, sublicense, or otherwise make Data available to third parties in raw or lightly processed form. Data may only reach third parties as an integrated, functional feature of your Application — not as a data export, feed, or download.

No AI/ML training: You must not use Data to train, fine-tune, evaluate, or benchmark any machine learning model, large language model, or AI system without a separately negotiated written licence from NutriGraphAPI.

Provenance preservation: All API responses include provenance fields (data_source, source, and where applicable backfillNutrientsProcessed). You must not remove, alter, or obscure these fields in any end-user display. Where backfillNutrientsProcessed is true, Applications in clinical or regulated contexts must surface this distinction to end users.

Audit rights: We reserve the right to audit your use of the Service on reasonable notice to verify compliance with this Section. You agree to cooperate with such audits and to provide reasonable access to relevant system logs and application architecture documentation upon request.

The Service, including all software, algorithms, data structures, schemas, documentation, and the NutriGraphAPI name and brand, is the intellectual property of ScanGeni Ventures Pvt Ltd and is protected by applicable intellectual property laws.

We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service solely as permitted by these Terms and your plan.

You retain ownership of your Application and any original work you create using the Service. You grant us no rights in your Application by virtue of using the Service.

Product names, brand names, certifications, and other third-party marks returned in the Data remain the property of their respective owners. We make no claim of ownership over the underlying manufacturer declarations — however, the structured intelligence layer we apply to that data, including our AI qualification, scoring algorithms, schema design, and enrichment methodology, is proprietary to ScanGeni Ventures Pvt Ltd.

The aggregated dataset of 5 million products and all associated intelligence attributes constitutes a proprietary database protected under applicable database rights and intellectual property law. Any extraction, reutilisation, or substantial copying of this database — as defined under the EU Database Directive or equivalent applicable law — is prohibited without a separate written licence.

Each plan includes a monthly call quota as stated on the pricing page. Calls in excess of your quota will be charged at the overage rate applicable to your plan, or the Service will return a 429 Too Many Requests response until your quota resets.

We reserve the right to throttle or suspend access where usage patterns suggest abuse, circumvention of rate limits, or use inconsistent with these Terms, with reasonable notice where practicable.

Quota resets occur on the first day of each calendar month for monthly plans, or on the anniversary date for annual plans.

Paid Plans are billed in advance on a monthly or annual basis as selected at the time of subscription. All prices are in USD unless otherwise agreed. Taxes applicable under Indian law (GST) or the laws of your jurisdiction may be added to your invoice.

Annual plans are billed in full at the start of each annual period. Monthly plans are billed at the start of each calendar month.

Refund policy: Annual plan subscribers may request a pro-rata refund within 14 days of the billing date if they have not exceeded 10,000 API calls in the billing period. Monthly plan subscribers are not entitled to refunds for partial months. Founding Member discounts are non-transferable and apply for the lifetime of the subscription provided it remains active without a break exceeding 30 days.

We reserve the right to suspend or terminate paid access upon non-payment with 7 days written notice to the registered email address.

We target 99.9% monthly uptime for the Service. Scheduled maintenance windows will be communicated with at least 24 hours notice via email to registered users. Emergency maintenance may occur without prior notice.

Enterprise plan subscribers are eligible for a formal SLA with financial remedies for downtime exceeding agreed thresholds. Contact us at support@nutrigraphapi.com to arrange.

Free Tier access is provided on a best-efforts basis with no uptime guarantee.

10.1 — No Warranties

THE SERVICE, ALL DATA, DOCUMENTATION, AND ANY OTHER MATERIALS PROVIDED BY NUTRIGRAPHAPI ARE PROVIDED STRICTLY "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NUTRIGRAPHAPI EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

• WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
• WARRANTIES OF ACCURACY, COMPLETENESS, TIMELINESS, OR RELIABILITY OF DATA
• WARRANTIES THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE
• WARRANTIES OF NON-INFRINGEMENT OF THIRD-PARTY RIGHTS
• ANY WARRANTY ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE

NUTRIGRAPHAPI MAKES NO WARRANTY THAT ANY DATA IS CURRENT, ACCURATE, OR COMPLETE. PRODUCT FORMULATIONS, ALLERGEN DECLARATIONS, CERTIFICATIONS, AND NUTRITIONAL VALUES CHANGE WITHOUT NOTICE. YOU ASSUME ALL RISK ASSOCIATED WITH YOUR RELIANCE ON DATA RETURNED BY THE SERVICE.

10.2 — Total Exclusion of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NUTRIGRAPHAPI, SCANGENI VENTURES PVT LTD, AND THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS, AND SERVICE PROVIDERS SHALL HAVE NO LIABILITY WHATSOEVER TO YOU OR ANY THIRD PARTY FOR ANY CLAIM, LOSS, OR DAMAGE OF ANY KIND ARISING FROM OR RELATED TO:

• YOUR ACCESS TO OR USE OF, OR INABILITY TO ACCESS OR USE, THE SERVICE OR ANY DATA
• ANY INACCURACY, ERROR, OMISSION, OR INCOMPLETENESS IN THE DATA
• ANY DECISION MADE OR ACTION TAKEN BY YOU OR ANY END USER IN RELIANCE ON DATA
• ANY ALLERGIC REACTION, DIETARY HARM, HEALTH CONSEQUENCE, OR PERSONAL INJURY ARISING FROM RELIANCE ON ALLERGEN, DIETARY, OR NUTRITIONAL DATA
• UNAUTHORISED ACCESS TO OR ALTERATION OF YOUR TRANSMISSIONS OR DATA
• ANY INTERRUPTION, SUSPENSION, OR TERMINATION OF THE SERVICE
• ANY THIRD-PARTY CONDUCT OR CONTENT
• ANY OTHER MATTER RELATING TO THE SERVICE, HOWEVER ARISING

THIS EXCLUSION APPLIES TO ALL FORMS OF LIABILITY INCLUDING CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, BREACH OF STATUTORY DUTY, OR ANY OTHER LEGAL OR EQUITABLE THEORY, WHETHER OR NOT NUTRIGRAPHAPI HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSS OR DAMAGE.

10.3 — Aggregate Liability Cap

10.4 — Exclusion of Consequential Damages

IN NO EVENT SHALL NUTRIGRAPHAPI BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES OF ANY KIND, INCLUDING WITHOUT LIMITATION:

• LOSS OF PROFITS, REVENUE, OR ANTICIPATED SAVINGS
• LOSS OF BUSINESS, CONTRACTS, OR OPPORTUNITIES
• LOSS OF GOODWILL OR REPUTATION
• LOSS OF DATA OR COST OF DATA RECOVERY
• COST OF SUBSTITUTE GOODS OR SERVICES
• PERSONAL INJURY OR PROPERTY DAMAGE OF ANY NATURE
• ANY REGULATORY FINES OR PENALTIES IMPOSED ON YOU

THIS EXCLUSION APPLIES EVEN IF NUTRIGRAPHAPI HAS BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

10.5 — Your Responsibility to End Users

You are solely responsible for the products and services you build using the Service and for all obligations to your end users arising therefrom. You must:

• Include prominent disclaimers in any Application displaying allergen, dietary, or health-related data stating that the information is sourced from manufacturer label declarations and is not a substitute for professional medical or dietary advice
• Inform end users that food formulations change and that they should always verify allergen information on physical product packaging before consumption
• Ensure your Application complies with all applicable food labelling, consumer protection, and health regulations in every jurisdiction where it operates
• Not represent to end users that Data is guaranteed to be accurate, complete, or current

10.6 — Jurisdictional Savings

Some jurisdictions do not allow the exclusion of implied warranties or the limitation of certain damages. To the extent such laws apply to you, some of the exclusions and limitations above may not apply, but they shall apply to the fullest extent permitted by law.

To the fullest extent permitted by applicable law, you agree to indemnify, defend, and hold harmless NutriGraphAPI, ScanGeni Ventures Pvt Ltd, and their respective officers, directors, employees, contractors, agents, licensors, and successors (collectively, the "Indemnified Parties") from and against any and all claims, actions, proceedings, demands, damages, losses, liabilities, costs, and expenses (including reasonable legal fees and court costs) brought by any third party arising from or related to:

• Your access to or use of the Service, including any automated, batch, or programmatic use
• Your Application, its functionality, its end users, and any harm suffered by end users in connection with Data displayed or used therein
• Any allergic reaction, dietary harm, personal injury, or health consequence suffered by any person in connection with your Application's use of allergen, dietary, or nutritional Data
• Your breach of any provision of these Terms, including the data storage, single-use, and no-derivative restrictions in Sections 3, 4, and 5
• Your violation of any applicable law, regulation, or third-party right, including data protection, food safety, consumer protection, or health regulations
• Any misrepresentation you make to end users regarding the accuracy, completeness, or currency of Data
• Any claim by a third party that your Application or your use of the Service infringes their intellectual property or other rights

NutriGraphAPI reserves the right to assume exclusive control of the defence of any matter subject to indemnification by you, at your expense. You agree to cooperate fully with NutriGraphAPI's defence of such claims. You must not settle any claim that imposes any obligation, restriction, or liability on NutriGraphAPI without our prior written consent.

You may terminate your use of the Service at any time by ceasing all API calls and notifying us at support@nutrigraphapi.com.

We may suspend or terminate your access immediately upon written notice if you breach these Terms, if continued access poses a security risk to the Service or other users, or if required by law.

Upon termination, your licence to use the Service ends immediately. Provisions that by their nature should survive termination — including Sections 5, 6, 10, 11, and 13 — will survive.

These Terms are governed by the laws of India. Any dispute arising from or relating to these Terms or the Service shall first be attempted to be resolved through good-faith negotiation. If unresolved within 30 days, disputes shall be submitted to binding arbitration under the Arbitration and Conciliation Act, 1996 (India), with the seat of arbitration in Bengaluru, Karnataka.

Notwithstanding the foregoing, either party may seek emergency injunctive relief from a court of competent jurisdiction in Bengaluru to prevent irreparable harm pending resolution of a dispute.

Users accessing the Service from outside India agree that Indian law governs these Terms and consent to the jurisdiction of Bengaluru courts for enforcement of arbitral awards.

We reserve the right to modify these Terms at any time. Material changes will be communicated to registered users via email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Terms.

The version history of these Terms is maintained at nutrigraphapi.com/terms/history.

ScanGeni Ventures Pvt Ltd
Bengaluru, Karnataka, India
Email: support@nutrigraphapi.com
Legal queries: legal@nutrigraphapi.com

Account and contact data: Name, email address, company name, and intended use case — provided when you request an API Key.

API usage data: Request timestamps, UPC/barcode values queried, response codes, response times, volume of calls per period, and your API Key identifier. We do not log the full response payload returned to you.

Billing data: For Paid Plan subscribers — billing contact name, email, and payment reference identifiers. Full payment card data is processed by our payment processor and is not stored by us.

Communications data: The content of emails or messages you send to support@nutrigraphapi.com or legal@nutrigraphapi.com.

Technical data: IP address, user agent string, and request headers associated with API calls. This data is used for security, abuse prevention, and rate limiting.

• Directly from you — when you request an API Key, subscribe to a Paid Plan, or contact us
• Automatically — through server logs generated by your API calls
• From our infrastructure providers — Google Cloud Platform logs associated with service operation

We do not purchase personal data from third parties or use data brokers.

We collect and process personal data on the following legal bases:

• Contract performance — to provide the Service you have requested, including issuing API Keys, processing payments, and managing your account
• Legitimate interests — to operate, secure, and improve the Service; to prevent fraud and abuse; to monitor usage for fair use compliance
• Legal obligation — to comply with applicable Indian law, tax regulations, and lawful requests from authorities
• Consent — for any marketing communications, which you may withdraw at any time

• To issue and manage your API Key and account
• To process payments and maintain billing records
• To monitor usage against plan quotas and enforce rate limits
• To detect and prevent abuse, fraud, and security incidents
• To send transactional communications — key delivery, quota alerts, billing notices, Terms updates
• To respond to your support queries
• To improve the Service through aggregated, anonymised usage analysis
• To comply with legal obligations

We do not use your personal data to train machine learning models without your explicit consent. We do not sell your personal data to any third party. Ever.

We share personal data only in the following circumstances:

• Infrastructure providers: Google Cloud Platform (hosting and logging). Data is processed under Google's Data Processing Addendum.
• Payment processors: Our payment partner processes card transactions. They are PCI-DSS compliant. We receive only a payment reference, not card data.
• Legal requirements: We may disclose data where required by Indian law, court order, or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your data may be transferred to the acquiring entity, who will be bound by this Policy.

We do not share your data with advertisers, data brokers, or analytics platforms that aggregate personal data for commercial purposes.

Account data is retained for the duration of your account plus 3 years, to comply with Indian tax and accounting obligations.

API usage logs (request metadata, not response content) are retained for 90 days for security and abuse investigation purposes, then deleted.

Billing records are retained for 7 years as required by Indian GST and accounting regulations.

Support communications are retained for 2 years from the date of resolution.

Upon account deletion, personal data is removed from active systems within 30 days, subject to retention obligations above.

We implement industry-standard technical and organisational measures to protect your personal data, including:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• API Key hashing — we store a hash of your key, not the key itself
• Access controls limiting internal access to personal data on a need-to-know basis
• Regular security reviews of our infrastructure

In the event of a personal data breach that poses a risk to your rights, we will notify you within 72 hours of becoming aware of it, as required by applicable law.

Under the DPDPA 2023 and, where applicable, GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data, subject to legal retention obligations
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — withdraw consent for marketing at any time
• Nomination — under DPDPA, nominate another person to exercise rights on your behalf in the event of death or incapacity

To exercise any of these rights, email legal@nutrigraphapi.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

Our website (nutrigraphapi.com) uses only strictly necessary cookies required for the site to function. We do not use advertising cookies, third-party analytics cookies, or tracking pixels.

The API endpoint itself does not use cookies. API authentication is via the X-API-Key header only.

If we introduce optional analytics in future, we will update this Policy and seek consent before setting any non-essential cookies.

The Service is directed at businesses and developers and is not intended for use by individuals under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us at legal@nutrigraphapi.com and we will delete it promptly.

Our primary infrastructure is hosted on Google Cloud Platform in the Asia-South1 (Mumbai) region. Personal data of users in the European Economic Area may be transferred to India, which the European Commission has not designated as an adequate jurisdiction. Where such transfers occur, we rely on Standard Contractual Clauses approved by the European Commission as the transfer mechanism.

You may request a copy of the applicable safeguards by emailing legal@nutrigraphapi.com.

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email at least 14 days before they take effect. The effective date at the top of this Policy reflects the date of the most recent revision.

Data Protection contact:
ScanGeni Ventures Pvt Ltd
Bengaluru, Karnataka, India
Email: legal@nutrigraphapi.com

If you are located in the EU and believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority.

If you are located in India and have a complaint regarding our handling of your personal data under DPDPA 2023, you may contact the Data Protection Board of India once operational.

We take all privacy complaints seriously and will respond within 30 days.