Platform Guidelines

At Falcon, our mission is to empower developers to build the next generation of financial products. We’ve created these Platform Guidelines to ensure consistency, trust, and innovation across all our integrations. This document outlines the best practices, usage policies, and compliance standards expected when working with Falcon APIs and services.

✅ Use Products and Services Responsibly

We welcome builders who align with our values. To maintain integrity across the Falcon platform, please follow these principles:

• Represent data and analytics accurately and transparently.
• Do not mislead users or third parties with manipulated outputs.
• Do not resell or re-license Falcon’s data, API responses, or SDKs.
• Avoid creating competing platforms or reverse-engineering our solutions.
• Do not scrape our APIs or the dashboard using bots, crawlers, or automated tools.
• Abide by our published rate limits and fair usage policies.

Our APIs and dashboards have been meticulously built to help you serve your users better. Let's ensure your implementation respects that ethos.

🔐 Users and Their Data

Protecting our users' data is central to everything we do at Falcon. When integrating with our systems, we expect your organization to uphold the same high standards.

Here are the key responsibilities for anyone accessing or processing data via Falcon:

• Ensure data encryption and access control at rest and in transit.
• Only request and store data that is strictly required for your use case.
• Have a clear Privacy Policy and Terms of Use that align with Falcon’s standards.
• Do not process unauthorized data or data without end-user consent.
• Be audit-ready. Falcon reserves the right to verify your data handling processes through documentation or third-party security audits.

🔄 Rate Limits & Fair Usage

We monitor and throttle usage based on:

• Number of requests per second
• Daily API volume per tenant
• Endpoint-specific limits (e.g., for card issuance or OTP requests)

📄 Developer Checklist

Before going live, ensure you have:

• Valid API credentials

• Signed up for production access

• Configured secure key storage

• Reviewed rate limits and retry logic

• Declared a data privacy officer/contact

• Added fallback logic in case of Falcon downtime