Evri collection times change on 3 November Evri moves Leeds and Bristol collections to 17:30.
Each key belongs to one system. Give it only the permissions it needs.
API keys
| Name | Key | Permissions | Created | Last used | Status | |
|---|---|---|---|---|---|---|
| Demo key Custom software | cd_live_acme_dem…0000 | orders:readorders:writeproducts:readproducts:writeinventory:writeshipments:readwebhooks:manage | 26 Oct 2026 | never | Active |
Data use rules
Every key holder agrees to these when the key is created.
- Delete buyer details after 30 days Personal details of marketplace buyers (names, addresses, phone numbers, emails) must be deleted or anonymised within 30 days of the order shipping.
- Keep logs for 12 months Keep request and access logs for 12 months, then delete them.
- Use buyer data only to fulfil the order Never use marketplace buyer data for marketing, profiling or building data sets, and never pass it to anyone who would.
- Report breaches within 24 hours Tell us at security@clouddespatch.com within 24 hours of finding any breach or suspected leak of data from CloudDespatch.
- Lock accounts down Use multi-factor sign-in on every account that can create keys, and give each key only the permissions its system needs.
We only store a fingerprint of each key, so nobody at CloudDespatch can read it back. If a key leaks, revoke it here and create a new one; requests using the old key stop at once.