Terms of Service

By creating an account or using RestWard, you agree to these terms. If you do not agree, do not use the service.

If you are using RestWard on behalf of an organization, you represent that you have authority to bind that organization.

RestWard is a platform that generates and serves REST APIs from databases you connect. Specifically:

• You connect a database; RestWard reads its schema and generates CRUD endpoints for the tables you choose to expose.
• RestWard enforces tenant isolation, RBAC, API key management, and rate limits around your API.
• OpenAPI documentation is generated from your live schema and served alongside the API.

Your database and its data remain yours. RestWard does not copy or store your database contents.

You agree to:

• Provide accurate account and billing information.
• Maintain the security of your API keys and credentials; keys are hashed, but you are responsible for their use.
• Use the service lawfully and not in a way that disrupts other tenants or the platform.
• Ensure you have the rights to expose any data you connect to RestWard.
• Keep your use within the limits of your plan.

RestWard is provided "as is." To the maximum extent permitted by law:

• We are not liable for indirect, incidental, or consequential damages.
• Our liability is limited to the amount you paid us in the relevant period.
• We are not liable for data loss arising from your database configuration, schema choices, or failure to back up your data.

You are responsible for backing up your own database. RestWard generates an API around it; it does not store your data.

You can delete your organization at any time from the organization's settings. Only an active Administrator of the organization can request deletion, and the request is confirmed through a one-time link e-mailed to that administrator's verified address.

Once confirmed, the organization becomes read-only and its generated APIs stop serving. Any Administrator can restore the organization within 30 days; after that the deletion is permanent and cannot be undone. Upon the final deletion:

• Everything belonging to the organization is erased: members and invitations, database connections and their credentials, APIs, API keys, and configuration.
• Invoices and payment records are kept for 5 years from the end of the financial year they relate to, as required by Danish bookkeeping law; everything else is erased 30 days after deletion.
• Deleted data remains in encrypted backups for up to 22 days (about three weeks) before the backups holding it are pruned.

The full behaviour is described in the Privacy Policy and in Deleting your organization.

We may suspend or terminate access for violation of these terms, non-payment, or to protect the platform. This section is a draft and will be finalized before launch.