API In short: your workspaces are end-to-end encrypted, so your Encryption Passphrase and Recovery Key are the only way back into them — keep them safe, because we can't reset them. You own what you put in API Partner, workspace owners decide who can see it, and you're responsible for the requests you send and the secrets you store. We're responsible for keeping the Service running and never reading your data.
This User Agreement is between you and Shreyansh Jain ("we", "us"), who operates API Partner. It applies when you create an account, create a workspace, or accept an invitation to join one, and sits alongside the Terms of Use and the Privacy Policy. If they conflict on how an account or workspace works, this agreement wins.
1. Your account
One account is for one person. Give your real name and an email address you control; we use it to sign you in, send you codes and invitations, and tell you about important changes and security events. Keep your password and sign-in methods secret and don't share your account. You are responsible for what happens under it until you tell us it has been compromised. If you think someone else has access, sign out of other sessions from Settings → Security, change your password, turn on MFA, and let us know.
2. Your passphrase and Recovery Key
When you set up encryption, you choose an Encryption Passphrase and receive a 24-word Recovery Key. They are separate from your account password, and neither is ever sent to us.
- You need one of them to unlock your workspaces on a new device or after signing out.
- If you forget your passphrase, your Recovery Key lets you set a new one. You can also create a new Recovery Key in Settings → Security, which replaces the old one.
- If you lose both, we cannot recover your data. Resetting your account password does not help, because the password does not unlock your keys. Workspaces shared with others stay readable to their other members, who can invite you again once you have set up new keys.
Store your Recovery Key somewhere safe and offline, such as a password manager or on paper, and don't share it.
3. Workspaces, owners and members
The person who creates a workspace is its owner. Owners and admins can invite others by email and give them a role: owner, admin, editor or viewer. Editors can change the workspace's content; viewers can only read and send requests. Whoever assigns a role is responsible for giving people only the access they need, and for removing people who should no longer have it.
When someone joins, an owner's or admin's app seals the workspace key to the new member's public key. Each member shows a safety code; comparing it with that person by another channel confirms their key is genuine. We recommend doing this for workspaces that hold sensitive secrets.
Removing a member stops the server from serving them the workspace immediately. Anything they already opened may remain on their devices, so rotate any credentials they had access to that matter to you.
If you accept an invitation, you agree that the workspace's other members can see your name, username, email and role, and the content you add, and that its owner and admins can remove you at any time.
4. Secrets in your workspaces
Collections and environments often hold tokens, API keys, passwords and internal URLs. End-to-end encryption keeps them from us, but every member of a workspace can read them. You are responsible for deciding which secrets belong in a shared workspace, for keeping them current, and for revoking them at their source if they may have been exposed.
5. The requests you send
Requests go directly from your device to the servers you choose. You are responsible for having permission to call those servers, for complying with their terms and rate limits, and for the effects of what you send — including requests sent by scripts. Responses are shown as received; we don't check or change them.
The web app runs in your browser and is subject to browser rules such as CORS, which may block some requests that work in the desktop app.
6. Who owns the data
The content of a workspace belongs to its owner and the organisation they act for, and each member keeps whatever rights they have in what they contribute. Your own account details belong to you. You give us permission to store, sync, back up and deliver that data only as needed to run the Service for you. Workspace content reaches us only in encrypted form, and we don't try to decrypt it, sell it or use it for advertising.
7. Exports and your own copies
You can export collections and environments to Postman v2.1, cURL or API Partner's native format, which can be protected with a passphrase. Exports are written to your device unencrypted unless you choose a passphrase — store them carefully. Keep your own exports of anything you can't afford to lose, and take one before deleting a workspace or your account.
8. Fees
API Partner is currently free to use. If we introduce paid plans, we will tell you at least 30 days in advance and explain what will change. Nothing will be charged without your agreement, and you will be able to export your data before deciding.
9. Availability and changes
We work to keep the Service available and your encrypted data backed up, but there may be downtime for maintenance, outages at our providers, or problems we didn't foresee. The desktop app keeps working offline from its local cache and syncs when it reconnects. We may add, change or remove features, and the desktop app updates itself to new versions. If we plan to shut the Service down, we will give you at least 60 days' notice to export your data.
10. When an account or workspace ends
Leaving a workspace. You can leave, or be removed from, a workspace at any time; an owner transfers ownership to another member first. What you contributed stays with the workspace.
Deleting your account. Use Settings → Security → Delete account, or email us as described in the Privacy Policy. Workspaces that only you belong to are deleted with it. If you own a workspace other people share, transfer its ownership or delete it first.
Deleting a workspace. Only the owner can delete a workspace. It disappears for every member and can't be undone from the app; export first.
Suspension by us. If we suspend an account for breaching this agreement or the Terms of Use, we will, where the law and safety allow, give you a reasonable chance to export your data first.
11. Notices
We send notices to the email address on your account, or show them in the app. Send notices to us at shreyansh@shrynshjn.com.
12. General
This agreement is governed by the laws of India, and disputes are handled as set out in the Terms of Use. We may update this agreement; the date at the top shows the latest version, and we will tell you about significant changes before they take effect. If any part of it is found unenforceable, the rest still applies. You may not transfer this agreement without our consent; we may transfer it to whoever takes over the Service, and will tell you if we do.