Resources

Frequently Asked Questions

Answers to common questions about the Outfame API. If something isn't covered here, email developers@outfame.com.

Authentication

How do I get an API key?

Go to dashboard.outfame.com → Settings → API Keys → Create new key. Takes about 30 seconds. Keys are available on all plans, including during the free trial.

What is the difference between API keys and OAuth tokens?

It depends on your architecture:

• API keys authenticate your application directly. Best for server-to-server integrations where you control the Outfame account.
• OAuth 2.0 tokens authenticate on behalf of a specific Outfame user. Use these for multi-tenant SaaS apps or third-party integrations where each user connects their own account.

If you're building a single integration for your own account, API keys are simpler. If you're building a platform where multiple users connect their Outfame accounts, go with OAuth.

Do API keys expire?

No. Keys stay valid until you manually revoke them from the dashboard. We recommend rotating every 90 days as a best practice, but nothing forces you to.

Can I have multiple API keys?

Up to 25 per organization. Most teams create separate keys for dev, staging, and production environments.

Rate limits

What happens when I hit the rate limit?

You get a 429 Too Many Requests response with a Retry-After header telling you how long to wait. Your request isn't dropped — just wait the indicated time and retry. The Rate Limits guide covers retry strategies in detail.

Are rate limits per key or per organization?

Per API key. Each key has its own independent limit, so if one key hits the ceiling, others keep working. One exception: OAuth tokens share the rate limit of the organization they belong to.

Can I request a higher rate limit?

The fastest way is upgrading your plan — each tier has higher limits. If you need something beyond Turbo tier, reach out to enterprise@outfame.com for a custom Enterprise setup.

Webhooks

How reliable are webhooks?

Very. First-attempt delivery succeeds 99.7% of the time for endpoints that respond within 5 seconds. Every failed delivery gets retried 3 times with exponential backoff (1 min, 5 min, 30 min). The delivery model is at-least-once, not exactly-once.

Can I receive the same event twice?

It's rare, but possible. At-least-once delivery means duplicates can happen. Use the event id field to deduplicate on your end — something like:

if (processedEvents.has(event.id)) return;
processedEvents.add(event.id);

Do webhook URLs have to be HTTPS?

HTTP URLs are rejected during webhook creation. HTTPS only — no exceptions.

What if my endpoint is temporarily down?

Failed deliveries are retried automatically (see schedule above). But if your endpoint fails 10+ consecutive deliveries across any events, we disable the webhook and send you an email. Once your endpoint is back up, re-enable it from the dashboard.

SDKs

Which SDK versions are currently supported?

Can I use the API without an SDK?

The API is standard REST — any HTTP client in any language works fine. The SDKs handle auth, retries, pagination, and type safety for you, but they're optional. If you're working in a language we don't have an SDK for, curl or your language's HTTP library is all you need.

Will there be SDKs for other languages?

Go and Ruby are on the roadmap for Q2 2026.

Data and privacy

How long is analytics data retained?

For the lifetime of your account — there's no rolling window. Historical data going back to the day you connected is always available through the API. If you delete an account, its data is permanently removed after 30 days.

Is Outfame GDPR compliant?

Fully. We process personal data only as necessary to provide the service, maintain a lawful basis for processing, and respond to data subject access requests (DSARs) within 30 days. Our Data Processing Agreement (DPA) is available on request — email legal@outfame.com.

Where is data stored?

AWS us-west-2 (Oregon). Encrypted at rest, TLS 1.3 in transit. Enterprise plans can opt into EU data residency in eu-west-1 (Ireland).

Can I export my data?

A few ways:

• API — Pull everything programmatically through the Analytics endpoints. Works on all plans.
• Dashboard export — Bulk CSV/JSON export, available on Turbo and Enterprise plans.
• Full data dump — Request through support if you need everything at once.

What data does Outfame collect about targeted users?

Only publicly available profile info: username, bio, follower/following count, post count, and engagement metrics. No private messages, no passwords, no non-public data. Targeted user data is processed transiently during the engagement session and not stored afterward.

Infrastructure

What is Outfame's uptime SLA?

Is there a status page?

status.outfame.com — real-time API status with email and Slack notifications for incidents and maintenance.

Does the API support IPv6?

Both IPv4 and IPv6 on all endpoints.

Billing

Is there a free trial?

3 days, full API access, no credit card required.

What payment methods do you accept?

Visa, Mastercard, Amex, and PayPal. Enterprise customers can pay by invoice (NET-30).

Can I cancel at any time?

Cancel from the dashboard whenever you want. Your API access continues through the end of the current billing period. No cancellation fees, no "retention specialists" calling you.

Security

Is the API encrypted?

TLS 1.3 on all traffic. Plaintext HTTP requests are rejected outright.

Do you require my Instagram or TikTok password?

Never. Outfame uses official platform APIs and public data only. We don't ask for, store, or have access to your social media credentials.

Has Outfame completed a SOC 2 audit?

Not yet — SOC 2 Type II certification is in progress, expected Q2 2026. Enterprise customers can request a compliance letter in the meantime.