This policy says what you may not do with the Rally & Roam API, the MCP server and the data they return. It applies alongside our API terms and our general acceptable use and anti-scraping policy. If you are not sure whether something is allowed, ask us first.

You must not

Resell or give away access to the API itself, share keys between unrelated businesses, or build a service whose main purpose is to pass our API on to others.
Copy our catalogue in bulk to build a competing directory, booking service or dataset, or combine our data with data you took from our website by scraping.
Get around limits: open several accounts to multiply your allowance, rotate keys to dodge the per-minute limit, or hide who you are.
Hide or remove the attribution notices that come with the data, or present the data as your own work.
Make bookings for people who have not asked you to, use made-up guest details, or hold courts you do not intend to use.
Use the data to contact players, clubs or coaches for marketing they have not agreed to, or to build profiles of individual people.
Use the API or the data for anything unlawful, deceptive or harmful, including discrimination, harassment, or misleading people about prices or availability.
Probe, scan or load-test the API, the MCP server or our OAuth service, or try to reach data that is not yours. Security research is welcome under our responsible disclosure rules.
Send us malware, or content that infringes someone else's rights, in any field such as a booking note.

AI assistants and automation

You may connect AI assistants and agents to the MCP server and let them call tools for your users.
You must not use the data to train or fine-tune a general purpose AI model, or build a dataset for one, without a separate written agreement with us. Using answers at the moment you need them, inside your product, is fine.
An assistant acting for you is bound by this policy as if it were you.

What we do if this policy is broken

Depending on how serious it is, we may contact you to ask you to stop, slow down or pause a key, suspend live access, or close the account. Where we reasonably can, we tell you what is wrong first and give you time to put it right. We act at once, without notice, where there is a risk to people, to the service or to other customers, or where the law requires it.

You must not

AI assistants and automation

What we do if this policy is broken

Reporting misuse

API acceptable use