Yes, the Dropbox API has a rate limiting system, for both the user and Business endpoints.
Note that not all 429s and 503s indicate explicit rate limiting, but in any case that you get a 429 or 503 the best practice is to retry the request, respecting the Retry-After header if given in the response, or using an exponential back-off, if not.
