You can connect an App Store Connect API key or Google Play access to AppForShare. When you do, AppForShare acts as your service provider and uses that access only on your behalf, only for the apps you choose, and only for the actions you or people you authorize start in AppForShare. We keep the key confidential, encrypted, and never share it, and we hold ourselves to terms at least as protective of Apple and Google as your own agreements with them. You stay responsible for your developer accounts and for what is done with them, including by people you invite.
While an app is shared, AppForShare checks its release status on a schedule. For Apple apps it also adds a webhook named "AppForShare release status" to that app in App Store Connect, so Apple can tell us about review and build changes, and removes it when you stop sharing the app or disconnect. These checks only read; they do not change your listings or releases.
AppForShare also collects the customer reviews of shared apps. A reply is posted to the store only when a person in your workspace presses Post reply, never by AI on its own, and it appears publicly under the review. You are responsible for what your replies say and for following Apple's and Google's rules for review responses.
Create keys with the least access you need, never with the Admin role. If you connect your account to someone else's workspace through an invite link, they can use it for the apps you shared until you disconnect. Disconnecting deletes the key from AppForShare at once; revoking the key itself is done in App Store Connect or Play Console. Apple and Google can change or limit their APIs at any time, and we are not responsible for what their services do or refuse.