Terms of use of the Domain Feed API

This English version is a courtesy translation. If there is any discrepancy, the Spanish version prevails.

1. Purpose, acceptance and relation to the website terms

These API Terms of Use (the “API Terms”) govern the purchase and use of Cifradia’s Domain Feed service (the “API”), available at https://api.cifradia.com.

The purchase is completed under the explicit acceptance model (click-wrap) described in section 1 of the Terms and conditions of use and electronic commerce: the client expressly accepts these API Terms on the checkout page, before paying or starting the free trial. Matters not covered here are governed by the website’s Terms and conditions of use and electronic commerce; in case of conflict regarding the API, these API Terms prevail. The processing of personal data is governed by the Personal data processing policy.

2. Legal information about the provider

The service is provided by Cifradia, whose legal details are those stated in section 2 of the Terms and conditions of use and electronic commerce:

• Trade name: Cifradia.
• Interim controller: Juan Sebastián Abello.
• NIT / Identification: being issued by the DIAN.
• Domicile and address for legal notices: Calle 64C # 68B-97, Bogotá D.C., Colombia.
• Phone: +57 319 582 1804.
• Official email: contacto@cifradia.com.

3. Description of the service

The API delivers, in JSON format, lists derived from the zone files of the generic top-level domains (gTLDs):

• domains registered and deleted each day, with filters by TLD, keyword and date;
• the registration and deletion history of a domain;
• keyword statistics;
• on the plans that include it, a daily ZIP file with the day’s registrations or deletions.

The features, prices, limits, history and TLDs included in each plan (Starter, Pro and Business, billed monthly or yearly) are those published on the product page of Cifradia’s website and on the checkout page at the time of purchase.

4. Access keys

1. Delivery: after payment or the start of the trial, Cifradia sends to the email address registered in the purchase a single-use, time-limited link to obtain the access key. The key is shown only once.
2. Use: the key is sent in the Authorization: Bearer header of each request. Cifradia stores only a fingerprint (hash) of the key, not the key itself, and cannot recover it; if it is lost, the client can request a new one at contacto@cifradia.com, and the previous one stops working.
3. Safekeeping: the key is personal and non-transferable. The client is responsible for keeping it secret and for any use made with it, and must notify Cifradia without delay if they suspect a third party knows it.
4. Suspension or revocation: Cifradia may suspend or revoke a key for abuse or breach of these API Terms, for non-payment or for security reasons (for example, if the key has been publicly exposed). Where possible, the client will be informed by email.

5. Permitted and prohibited use

The client may use the data for their own lawful purposes, such as brand protection, fraud and phishing investigation, cybersecurity and market analysis, and integrate it into their own systems and products, provided they do not engage in the prohibited uses.

The following is prohibited:

• Marketing and unsolicited communications: using the data to send advertising, bulk email, calls or any unsolicited commercial communication, or to support high-volume automated registration or query processes, in line with the zone file access terms imposed by the registries (the operators of each TLD).
• Reconstruction or redistribution of the zones: reconstructing, compiling or redistributing the zone files or a substantial portion of them.
• Resale and competition: reselling, assigning, sharing or publishing the key, or redistributing the data, raw or with minor changes, as a feed, API or database that competes with the API.
• Circumventing the limits: using several keys or accounts to exceed the plan’s limits, or circumventing the access controls in any other way.
• Unlawful or harmful use: any use contrary to law, or that affects the security or availability of the service, including the activities prohibited in section 4 of the Terms and conditions of use and electronic commerce.

6. Usage limits

Each plan has a maximum number of requests per minute and per day, a history period and a set of TLDs. The limits are enforced on the server: when they are exceeded, the API responds with HTTP status 429 and a Retry-After header stating when the request can be retried. Queries outside what the plan includes are rejected. Exceeding the limits does not generate additional charges.

7. Availability of the service

Cifradia provides the API with diligence and strives to keep it continuously available, but offers no service level agreement (SLA) and does not guarantee a minimum availability. The data is updated once a day. The service may be interrupted for maintenance, failures of infrastructure providers, force majeure or acts of God.

8. Accuracy of the data

The data is derived from third-party sources and is provided “as is”. It may be incomplete, delayed or contain errors, for example when a registry does not publish its zone on a given day or withdraws access to it. Cifradia does not guarantee that the data is complete, accurate or fit for a particular purpose, nor that a TLD will remain available; the client must verify it before making decisions that depend on it. This is without prejudice to the legal warranty in section 5 of the Terms and conditions of use and electronic commerce: Cifradia guarantees that the data delivered matches the zone files received.

9. Payments through Paddle

Our order process is conducted by our online reseller Paddle.com, which acts as the Merchant of Record for all our orders: it processes the payment, issues the invoice and handles the applicable taxes. The Paddle Buyer Terms also apply to the purchase. Cifradia does not receive or store card or other payment method details.

Subscriptions renew automatically at the end of each period (monthly or yearly) at the plan’s current price until the client cancels them. Price changes are notified by email at least thirty (30) days in advance and apply from the next renewal; the client may cancel the subscription before that date.

As an exception to the preceding rule, a client who subscribes through January 31, 2027, inclusive, keeps the price published on the plans page on the date they subscribed for their plan and billing cycle for as long as the subscription remains active, renewals included (the “founder price”). The founder price is lost if the subscription is canceled or ends; a client who subscribes again after that date pays the price in force at that time. If a founder client changes plan, the founder price of the new plan applies. For all other clients, the thirty (30) day notice in the preceding paragraph applies.

10. Free trial

1. The Pro plan billed monthly includes a seven (7) day free trial. A payment method is required to start it.
2. If the client does not cancel before the trial ends, the first month is charged on the eighth (8th) day and the subscription continues.
3. The trial is offered only once per client. If a client who already had an API subscription (identified by their Paddle customer account, linked to their email address) starts a new trial, the key is not activated until the first charge.

11. Cancellation

The client may cancel the subscription at any time from Paddle’s customer portal or from the link included in Paddle’s emails. The cancellation takes effect at the end of the paid period: until then the key remains active, and afterwards it is revoked. Cancelling stops the renewals and does not, by itself, give rise to a pro-rata refund of the current period; refunds are governed by section 13.

12. Plan changes

To change plan or billing cycle, the client must write to contacto@cifradia.com from the subscription’s email address. Cifradia applies the change in Paddle, which calculates the charge or credit in proportion to the time left in the period. The key keeps its value and takes the limits of the new plan.

13. Refunds

1. Paddle’s policy: refund requests are governed by Paddle’s refund policy and are submitted to Paddle at paddle.net.
2. Right of withdrawal: the client may withdraw within five (5) business days after their first payment and receive a full refund of that payment. They must request it at contacto@cifradia.com; Cifradia makes the refund through Paddle and revokes the key. Withdrawal is granted only once per client.
3. Service failure: in addition, if within a paid period the API does not respond, or delivers no daily data for any of the plan’s TLDs, for more than seventy-two (72) consecutive hours, Cifradia refunds the value of the affected period: one month of subscription or, on yearly plans, one twelfth of the yearly payment. That is the maximum per affected period, even if it has several failures. The client must request it at contacto@cifradia.com within thirty (30) days after the failure ends. The only exclusions are ICANN or the registries not publishing the zones or withdrawing access to them, force majeure or acts of God, and suspensions due to the client’s breach; failures of the providers Cifradia contracts, such as hosting or the content delivery network, count as Cifradia’s. The refund is made through Paddle to the same payment method.
4. Payment reversal: since Paddle is the Merchant of Record, payment reversal (Art. 51, Law 1480 of 2011) is requested from Paddle at paddle.net and from the issuer of the payment instrument, with a copy to contacto@cifradia.com. Paddle processes it.
5. Consumer rights: nothing above limits the non-waivable consumer rights under Law 1480 of 2011, including the right of withdrawal (Art. 47) and payment reversal (Art. 51).

14. Suspension and termination

Cifradia may suspend or terminate access to the API if the client breaches these API Terms, if payment is not completed after Paddle’s payment retries, or if there is a security risk. In case of a serious breach (for example, reselling the key or using the data for unsolicited communications), termination is immediate, without prejudice to section 13 and to the non-waivable consumer rights. Cifradia may also stop providing the API, giving at least thirty (30) days’ notice and refunding the unused part of the periods already paid.

15. Liability

Section 5 of the Terms and conditions of use and electronic commerce applies. Accordingly, any limitation on indirect damages or loss of profits arising from the use of the API or the data, or from the inability to use them, will apply to the maximum extent permitted by Colombian law, without restricting the non-waivable legal warranty that applies by law.

16. Changes to these terms

Cifradia may modify these API Terms. The current version is published on this page with its last updated date. Changes that substantially affect the client’s rights will be notified by email at least thirty (30) days in advance and will apply from the next renewal; if the client does not agree, they may cancel the subscription before that date.

17. Governing law and jurisdiction

These API Terms are governed by and interpreted under the laws of the Republic of Colombia. Any dispute will be submitted to direct settlement mechanisms or to the ordinary courts or the Superintendence of Industry and Commerce of Colombia.

18. Contact

For inquiries, support, plan changes or claims about the API, the client can write to contacto@cifradia.com.