Legal
Terms of Service
Last updated 1 May 2026
1. Acceptance
By creating an account or using the Loyalty Engine API you agree to these Terms of Service ("Terms"). If you do not agree, do not use the service. These Terms apply to all users, including integrators and merchants.
2. Service description
Loyalty Engine is a multi-tenant API platform that enables merchants to add points-based loyalty mechanics to their POS, e-commerce, or mobile applications. Yoyo grants you a limited, non-exclusive, non-transferable licence to access the API during your subscription period.
3. API keys and security
You are responsible for keeping your API keys confidential. Never commit keys to source control or expose them in client-side code. Test keys (sk_test_*) must not be used in production. Live keys (sk_live_*) must not be used in development environments. You must notify us immediately at security@yoyorewards.com if you suspect a key has been compromised.
4. Acceptable use
You may not use the service to process fraudulent transactions, to build competing loyalty infrastructure products, to store payment card data (PCI-DSS prohibited), or in any way that violates applicable law including POPIA. We reserve the right to suspend accounts that violate these terms.
5. Billing
Paid plans are billed monthly in South African Rand (ZAR). Invoices are issued on the first of each month. Failure to pay within 14 days may result in service suspension. We do not store full card numbers; payment processing is handled by our PCI-compliant payment provider.
6. Availability
We target 99.9% monthly uptime for production APIs. Planned maintenance is communicated at least 24 hours in advance via the status page. We are not liable for downtime caused by events outside our reasonable control, including third-party infrastructure failures.
7. Data processing
By using the API you acknowledge that we process personal data on your behalf as an operator under POPIA. You remain the responsible party for your customers' data. You must have a lawful basis for sending us personal data. Our Data Processing Agreement is incorporated by reference and available at yoyorewards.com/dpa.
8. Termination
Either party may terminate the agreement with 30 days written notice. We may terminate immediately for material breach (including non-payment). On termination your API keys are revoked and your data is retained for 90 days before deletion, unless legal obligations require longer retention.
9. Limitation of liability
To the maximum extent permitted by law, Yoyo's liability for any claim arising from these Terms is limited to the fees you paid in the three months preceding the claim. We are not liable for indirect, consequential, or punitive damages.
10. Governing law
These Terms are governed by the laws of South Africa. Any disputes shall be resolved in the courts of Cape Town, South Africa.