Terms of Service

01Acceptance of these terms

These terms govern access to and use of anonimiza.ai, available at https://shinra.anonimiza.ai. Using the platform means agreeing to them.

anonimiza.ai is an enterprise product. The contracting party is a company, and the users are people authorized by it. Where the company has a signed agreement with us, that agreement prevails over these terms in case of conflict, and these terms cover what the agreement does not address.

Anyone accepting these terms on behalf of a company represents that they have authority to do so.

02What the platform does, and what it is not

anonimiza.ai acts on documents that remain in the customer repository, in Google Drive, SharePoint, OneDrive or a file server, and offers three capabilities over the same document:

• Encryption: the document stays encrypted at rest, inside the customer own repository.
• Redaction: sensitive fields are masked according to the group of the person reading, following the visibility matrix the customer configures.
• Watermarking: a traceability mark that allows a leak to be attributed to the reader and to the moment of reading.

Two things the platform is not, stated plainly:

• It is not legal advice. The governance screens help the customer record and demonstrate what it does with personal data, but the customer remains the controller answering under applicable data protection law.
• Automatic classification of sensitive fields is assistive and not infallible. The customer remains responsible for the visibility policy it configures and for reviewing results in workflows where an error would have relevant consequences.

03Accounts and credentials

Access is nominal. Each person uses their own account, and the customer is responsible for keeping the user list current, removing those who leave the company or change roles.

Credentials are personal and non-transferable. Suspected misuse must be reported to us immediately.

Whoever opens a document is identified by the identity provider, and that identity is what decides what stays visible. Sharing credentials is therefore not merely a rule violation: it hands someone else the visibility granted to you.

04Connecting Google Workspace and other repositories

To connect a repository, the customer administrator authorizes the platform at the provider: in Google Workspace, through the Google consent screen; at Microsoft, through tenant administrator consent.

By connecting, the customer represents that it has authority over that repository and over the data it contains, and that using the platform on those documents rests on an adequate legal basis.

The platform acts only on the customer instructions and within the authorized scopes. The scopes we request, what each one allows and why the product needs it are described in the Privacy Policy.

Use of the integrations is also subject to the terms of the corresponding provider, including the Google Terms of Service. The connection can be revoked by the customer at any time, and revoking it stops automatic protection of that repository.

05Acceptable use

By using the platform, you agree not to:

• Connect or process a repository over which you have no authority.
• Attempt to remove, tamper with or circumvent redaction, encryption or the traceability watermark, or attempt to recover a field the customer policy made invisible to your group.
• Reverse engineer, decompile or attempt to extract the models, code or secrets of the platform, except to the extent expressly permitted by law.
• Probe, scan or overload the infrastructure, or use the platform in a way that degrades the service for other customers.
• Use the platform for unlawful activity, to process content you are not allowed to process, or to infringe third party rights.
• Resell, sublicense or grant third party access beyond what the agreement provides.

Material breach authorizes suspension of access, with notice to the customer as soon as it can safely be given.

06Intellectual property and customer data

The platform, its code, models, brand and documentation are ours. The customer receives a limited, non-exclusive and non-transferable license to use them for the term of the engagement.

Customer documents and data remain the customer property. We acquire no rights over them and do not use them for any purpose other than performing the service, as set out in the Privacy Policy. In particular, we do not use customer document content to train generalized artificial intelligence models.

07Availability, support and changes to the service

We work to keep the platform available and sound, and interruptions may occur due to maintenance, vendor failure or causes beyond our reasonable control. Service level commitments, where they exist, are set out in the agreement.

The platform evolves. Features may be added, changed or discontinued; a change that materially reduces a contracted function is communicated to the customer with reasonable advance notice.

Support is provided through the channels agreed in the contract and at [email protected].

08Fees and payment

Pricing, metering and payment terms are those of the proposal or of the agreement signed with the customer. Material delay authorizes suspension of access, after notice.

09Privacy and data protection

Personal data processing is described in the Privacy Policy, which forms part of these terms.

With respect to customer document content, we act as processor and the customer as controller. The customer is responsible for defining the legal basis, informing data subjects and configuring the visibility policy the platform enforces.

10Termination and what happens to the data

The customer may end use as provided in the agreement, and may revoke connections at any time. We may terminate in case of material breach or uncured non-payment.

Once the relationship ends, connections are revoked, tokens stop working and stored data is deleted within the periods stated in the Privacy Policy, except for what the law requires us to keep.

Customer documents do not depend on us to keep existing: they live in the customer own repository. Documents encrypted by the platform must be decrypted before termination, and that is an exit step the customer should request while the agreement is still in force.

11Warranties and limitation of liability

The platform is provided as described in the documentation and in the proposal. To the extent permitted by law, we do not warrant that the service will be uninterrupted or error free, or that automatic classification will identify every sensitive field in every document.

To the extent permitted by law, we are not liable for indirect damages, lost profits or loss of opportunity, and our total liability, across all claims combined, is limited to the amount paid by the customer in the 12 months preceding the event giving rise to the claim.

Nothing here excludes liability for willful misconduct, gross negligence, or any liability the law declares non-excludable.

12Governing law and venue

These terms are governed by the laws of Brazil. The parties elect the courts of Rio de Janeiro, Brazil to settle anything not resolved in good faith between them, waiving any other venue however privileged.

13Changes to these terms

When these terms change, the effective date at the top changes with them. Material changes are communicated to customer companies before they take effect. Continuing to use the platform afterwards means accepting the new version.

14Contact

Questions about these terms, contractual requests and support: [email protected].