Partner terms
The short version: act only for restaurants that linked to you, keep your keys safe, and use customer details only to make the order. The full agreement is signed before your live keys.
Who can use the API
Companies that make restaurant POS or billing software, for restaurants that use it. Sandbox keys are for building and testing only and see Laayo test stores only.
Acting for a restaurant
- You act on a store only after its owner gives you a link code from the Laayo vendor app.
- You stop as soon as the owner unlinks you, and you respect owner takeover.
- Price and name changes you send wait for the owner's approval. You do not ask restaurants to bypass it.
Keys and security
- Keep secrets on your server or in the POS, never in a public app or a web page.
- Rotate a secret at once if you think it leaked, and tell us.
- Check our signature on every webhook before you act on it.
Customer details
Orders carry what the kitchen needs, with phone numbers masked. Use them only to prepare and hand over that order and for the restaurant's own records. No marketing, no selling, no building profiles.
Cost
The Partner API is free for POS companies. Restaurants keep their own agreement with Laayo.
Changes and suspension
We announce changes to the API in the changelog before they reach live keys. We may pause a key that puts restaurants or customers at risk, and we tell you why.
Questions
Write to partners@laayo.com.np, or ask the person at Laayo who answers your team on WhatsApp.