Terms of Service — Abrasel NDP

These Terms of Service govern the use of the Abrasel NDP platform, a Brazilian cloud solution for the administrative management of an Abrasel regional or sectional unit (association of bars and restaurants), offered as a SaaS (software as a service) model. The Abrasel platform brings together, in a single environment, modules for finance (reimbursements, mileage, expenses with reconciliation and corporate card), institutional documents, registrations, meetings with minutes signed digitally, and an artificial intelligence assistant, organizing the operation through approval workflows, granular permissions and an audit trail. By registering for, subscribing to or using the platform, the Client declares that they have read, understood and agree to these Terms.

The platform is operated by Jéssica Naiara dos Santos, registered under CNPJ No. 42.182.370/0001-37, headquartered in Londrina/PR, Brazil. Questions, requests and contact can be made through the email [email protected].

1. Introduction and Acceptance

The Abrasel platform provides technological tools to organize the administrative operation of a regional unit, control reimbursements and expenses, generate institutional documents, manage meetings and minutes, and support management through artificial intelligence features. These Terms form a contract between the Client and the platform operator.

Using the platform, registering or subscribing to any plan means full acceptance of these Terms.
If the Client does not agree with any condition set out here, they must not use the platform.
These Terms may be complemented by specific policies, such as the Privacy Policy and the Data Backup and Retention Policy.

2. Definitions

To make reading easier, some terms have the following meaning:

Client: the Abrasel regional or sectional unit (legal entity) that subscribes to and uses the platform.
User: any person who accesses the platform under the Client’s account (directors, administrative staff and other authorized members).
Account Administrator: the user responsible for managing the account, creating users, defining permissions and configuring the operation, generally linked to the “Presidency” group with super-administrator profile.
Platform: the Abrasel NDP system, including the panel, modules, resources, integrations and features.
Modules: the functional areas of the platform (Finance, Documents, Registrations, Meetings and Minutes, AI Assistant, Integrations, System and Administration), which may be enabled or disabled per unit.
Third-party services: external services used by the platform, such as Microsoft 365 / Teams, email, digital signature (Gov.br / ITI), WhatsApp and the artificial intelligence gateway.
Client Data: information, documents, files and content entered or generated on the platform by the Client and its Users.
Personal Data: information relating to an identified or identifiable natural person, as defined by applicable law.
Content: texts, images, audio, video, documents and other materials transmitted or stored on the platform.
Subscribed plan: the set of resources, limits and commercial conditions chosen by the Client.

3. Purpose of the Service

The Abrasel platform provides tools to organize the administrative management of a regional unit, including: a financial module for reimbursements, mileage, expenses with reconciliation and corporate card, following a controlled approval workflow; generation of institutional documents (official letters, receipts, forms); registrations of service providers, vehicles, cards and persons; management of meetings and minutes integrated with Microsoft 365 / Teams, with minutes generated by AI and digital signature; an artificial intelligence assistant; and administration resources with granular permissions and an audit trail.

The platform works on computer and mobile devices, so directors can record expenses on their own device.
The storage of documents, files, images and other content occurs according to the subscribed plan.
Integrations may occur with third-party services, such as Microsoft 365 / Teams, email, digital signature and the AI gateway.

About results: the platform operator does not guarantee any specific administrative, financial or institutional result. The platform provides technological tools, but the results depend on the organization, processes, team and use carried out by the Client.

4. Registration and Administrator Responsibility

Registration must be carried out with truthful, complete and up-to-date data. The Account Administrator is primarily responsible for the operation carried out in the account.

The Administrator is responsible for the users created, the permissions granted and the use made by the Users.
The Administrator is responsible for the records, documents and configurations made in the account.
The Administrator must keep their credentials secure and not share them improperly.
The Administrator must ensure compliance with the Brazilian General Data Protection Law (LGPD) and other applicable laws.
The Client declares that its representatives are over 18 years old or duly represented, with the legal capacity to contract.

5. Acceptable Use

When using the platform, the Client and its Users agree not to engage in, among other conduct:

Inserting illegal, discriminatory, defamatory content or content that violates third-party rights.
Using the platform for purposes unrelated to the administrative management of the regional unit.
Distributing viruses, malware or malicious links.
Practices that violate the rules of the third-party services used (such as Microsoft 365, the digital signature providers or the AI gateway).
Use that harms, overloads or compromises the platform’s infrastructure.
Reverse engineering, decompiling or attempting to access the platform’s source code.

The Client is solely responsible for the content it enters and for the practices it adopts when using the platform.

6. Suspension and Cancellation for Violation

The platform operator may suspend, limit or cancel account access in the following situations:

Violation of these Terms or applicable policies.
Abusive use of the platform or its resources.
Generation of technical, legal or reputational risk.
Non-compliance with the policies of third-party services.

Whenever possible and reasonable, the operator may give prior notice of the measure adopted, but may act immediately when there is relevant risk.

7. Integrations with Third-Party Services

The Abrasel platform is an independent platform and is not Microsoft, Gov.br / ITI or any other third-party service provider, nor does it have any controlling relationship with these entities.

The functioning of the integrations depends on the services and decisions of these third parties.
Third parties may change their rules, APIs, limits, prices, availability and permissions at any time.
The operator does not control and cannot prevent outages, blocks or instability of these services.
The Client is responsible for complying with the policies and rules of each third-party service it uses (for example, the conditions of its own Microsoft 365 tenant).

8. Microsoft 365, Digital Signature and Other Integrations

Connection to integrated services may occur through official interfaces (APIs) provided by the respective third parties.

Microsoft 365 / Teams: the calendar, recording and transcription functions depend on the Client’s tenant, on the permissions granted (such as Graph access policies) and on Microsoft’s rules and availability.
Digital signature (Gov.br / ITI): the legal validity of signatures (PAdES, bilateral counter-signature) depends on the certificates, the conditions and the availability of the official services of Gov.br and the ITI (National Institute of Information Technology).
AI gateway and other services: are subject to the rules, limits and availability defined by the respective providers.

9. Artificial Intelligence

The platform offers an artificial intelligence assistant to support the administrative management of the regional unit.

The AI assistant reads data from the modules and executes actions only upon confirmation: it always proposes what it will do and only acts after the User approves; it never acts on its own.
AI responses may contain errors, inaccuracies or incomplete information.
It is the Client’s responsibility to review, validate and confirm the actions proposed by the AI before they are carried out.
The operator is not responsible for decisions made solely on the basis of automated responses.
The Client should avoid entering sensitive or excessive data into prompts and knowledge bases, except where there is an adequate legal basis.
The operator may use third-party artificial intelligence providers, as described in the Privacy Policy.
Client Data is not used for the public training of third-party models, except with express authorization or contractual provision.

10. Storage, History and Backup

The operator adopts technical resources to store records, documents and files according to the subscribed plan, but does not guarantee the absolute preservation of data in the event of third-party failures, infrastructure failures, attacks, force majeure, deletion by the Client itself, external unavailability or events beyond the operator’s reasonable control.

Storage limits vary according to the subscribed plan.
The data retention period also varies according to the subscribed plan.
After cancellation, data may be kept for a defined period and then deleted.
When an export feature is available, the Client must request the export before closing the account.
The operator may delete data after the retention period or after the account is closed.

Additional details may be set out in the Data Backup and Retention Policy.

11. Plans, Payments and Cancellation

The platform offers plans with monthly, semiannual or annual billing, according to the conditions in force, and may include a one-off implementation (setup) fee per unit.

Billing is recurring and automatic renewal may occur at the end of each period.
Non-payment may result in suspension of access until the situation is resolved.
Cancellation stops future charges but does not generate a proportional refund of the period already paid, except where the law provides otherwise.
For the first subscription made online, where applicable, the Client may exercise the right of withdrawal within 7 (seven) days, under the terms of Article 49 of the Brazilian Consumer Protection Code.
Resources, limits, storage, modules and the number of users vary according to the subscribed plan.

12. Price Adjustments

The operator may adjust plan prices with prior notice, due to factors such as operating costs, infrastructure, suppliers, third-party services, artificial intelligence resources, exchange rates, storage or changes in the services.

13. Fair Use

Use of the platform must respect reasonable limits, compatible with the subscribed plan.

Occasional usage peaks are tolerated within reason.
Excessive, abusive use or use incompatible with the plan — including AI usage above the fair-use limit — may require a plan upgrade, technical limitation or commercial negotiation.
The operator may adopt measures to preserve the stability and security of the service for all Clients.

14. SLA and Support

The operator’s SLA is one of analysis and planning, not resolution. The timeframe set out in the subscribed plan (from 2 to 48 hours, according to the plan table in force) refers to the start of the analysis, the identification of the cause and the planning of the solution.

The resolution of an incident may depend on third parties and external factors.
Incidents caused by Microsoft 365, Gov.br / ITI, the AI gateway, APIs, hosting, the internet, devices or actions of the Client itself are not the sole responsibility of the operator.

15. Security

The operator adopts reasonable technical and organizational security measures, but no system is completely immune to failures, attacks, unavailability or external events. The Client is also responsible for adopting good practices, such as securely safeguarding credentials and controlling the permissions of its Users.

16. Confidentiality

The parties agree to keep confidential the technical, commercial and operational information, credentials, data and other information accessed as a result of this relationship, using it only for the purposes of the service.

17. Intellectual Property

The operator holds all rights to the brand, interface, software, code, workflows, design, features and documentation of the platform.

The Client retains ownership of its own data and content.
By using the platform, the Client grants the operator a limited license to host, process, transmit, organize and display this data, exclusively for the provision of the service.

18. Third-Party and Open Source Licenses

The platform may use third-party and open source libraries, components, frameworks or software, respecting their respective licenses. Such components remain under the ownership and conditions of their respective authors.

19. Limitation of Liability

To the extent permitted by applicable law, the operator is not responsible for:

Lost profits, loss of revenue or loss of opportunity.
Indirect damages of any nature.
Outages or unavailability of third-party services.
Failures of the internet, devices or external services.
Improper use of the platform or configurations made by the Client.
Records, documents or actions confirmed by Users, or poorly configured automations.

Under no circumstances will the operator’s total liability exceed the amount actually paid by the Client in the last 12 (twelve) months, except where applicable law provides otherwise.

20. Force Majeure

The operator is not liable for failures or interruptions resulting from events beyond its reasonable control, such as cyberattacks, hosting failures, supplier failures (such as Cloudflare, AWS, Google, Microsoft and others), power outages, natural events, strikes, war, government orders, legal or regulatory changes and massive internet failures.

21. Account Closure and Export

The Client may request cancellation of the account at any time.

Access remains available until the end of the period already paid, except in the case of a violation of these Terms.
After closure, data may remain available for a limited period and is then permanently deleted.
Where an export feature exists, the Client must request it within the applicable timeframe.

22. Changes to the Platform and the Terms

The operator may modify, remove, replace or improve features, integrations, screens, resources, workflows, modules, artificial intelligence features and third-party services, aiming at improvement, security, stability or technical and legal adequacy.

Relevant changes to these Terms will be communicated by email or by notice in the platform panel.
Continued use of the platform after such communication represents acceptance of the new conditions.

23. Jurisdiction and Applicable Law

These Terms are governed by the laws of Brazil. The Courts of the District of Londrina/PR, Brazil are elected to resolve any matters arising from these Terms, waiving any other, however privileged it may be.