Terms of Service

1. Who we are and what these terms cover

Obelinf is operated by André Ribeiro, an individual entrepreneur established in Brazil, trading as Obelinf. In these terms, "Obelinf", "we", "us", and "our" refer to that operator. "Service" means the Obelinf web application, API, MCP server, documentation, and website.

These terms form a binding agreement between you, or the organization you represent, and Obelinf. If you accept them on behalf of an organization, you confirm that you have authority to bind that organization. If you do not agree, do not use the Service.

2. Accounts

You must provide accurate account information and keep it current. You are responsible for activity under your account and for keeping your credentials and API keys confidential. Notify us immediately at [email protected] if you believe your credentials have been compromised.

Accounts are for business use. You must be at least 16 years old. We may refuse, suspend, or close an account where there is a reasonable, documented security, legal, or abuse concern.

3. Plans and limits

Each plan carries resource limits and feature entitlements, published on our pricing page and enforced in the application. Limits are measured as described in the product. If you exceed a limit we may ask you to upgrade or to remove data, and if usage continues we may restrict the affected resources.

We may change limits for a plan with at least 30 days' notice. Changes do not apply retroactively to a paid term you have already committed to.

If you downgrade to a plan whose limits are below your current usage, the records that exceed the new limits become read-only. We will tell you which records are affected. If the excess is not removed within 30 days, we may delete it.

4. Fees, taxes, and billing

Paid plans are billed monthly or annually in advance in US dollars, through Stripe. Fees exclude taxes, which you are responsible for except where we are required to collect them. If you are a business customer in the European Union and the reverse charge applies, you are responsible for accounting for VAT and for giving us a valid VAT number.

Subscriptions renew automatically until canceled. You can cancel at any time from the billing settings in the application, and access continues until the end of the paid period. Except where required by law or expressly stated, fees are non-refundable. We will give at least 30 days' notice before increasing the price of a plan.

If a payment fails, we may retry it and may suspend paid features after reasonable notice. If payment remains outstanding for 90 days, we may delete your data.

5. Free plans and trials

Free plans and trials are provided as they are, with the limits and support level described on the pricing page. We may change or end a free plan with reasonable notice. Data you store on a trial remains yours and can be exported.

6. Acceptable use

You agree not to:

• access accounts, organizations, or data you are not authorized to access;
• probe, scan, or test the vulnerability of the Service except under our written authorization;
• interfere with the Service, bypass rate limits, or place unreasonable load on it;
• resell, sublicense, or provide the Service to third parties as a service of your own without our written consent;
• reverse engineer or copy the Service except where the law says you may;
• upload malware, or use the Service to store or distribute unlawful content;
• use the Service in a way that infringes the rights of others, including privacy and data protection rights.

You are responsible for the content your organization stores and for having a lawful basis to store it.

7. Your content

You keep all rights to the data you put into the Service. You grant us a limited license to host, process, transmit, and back up that data solely to provide and support the Service, and to comply with law. We do not use your content to train machine learning models and we do not sell it.

You are responsible for the accuracy of your infrastructure records. The Service documents what you tell it. It does not discover or verify your network, and it should not be used as the only record for safety-critical operations.

8. Data protection

Our Privacy Policy explains how we handle personal data as a controller. Where we process personal data on your behalf in order to provide the Service, you remain the controller and we act as your processor. We process that data only to provide and secure the Service, on your documented instructions, and we do not use it for our own purposes.

Each party will comply with the data protection laws that apply to it, including the GDPR, the UK GDPR, and the LGPD where relevant. If you need a specific contractual instrument for international transfers, contact [email protected] and we will tell you what is available.

We engage the third parties listed in Schedule 1 to host and operate the Service. We will update Schedule 1 before a change takes effect and notify the account contact, except where an urgent security or availability issue requires an immediate change, in which case we will notify you as soon as practicable afterwards. If you object on reasonable data protection grounds and we cannot accommodate the objection, you may terminate the affected part of the Service and receive a pro rata refund of prepaid fees for the unused term.

9. Confidentiality

Each party may receive information that the other treats as confidential. The receiving party will use it only to perform this agreement, protect it with reasonable care, and disclose it only to personnel and advisers who need it and are bound by confidentiality. This does not apply to information that is public, independently developed, or required to be disclosed by law, provided the disclosing party is notified where lawful.

10. Intellectual property

We own the Service, including its software, documentation, design, and trademarks. Nothing in these terms transfers that ownership to you. You may not use our name or marks without our written permission, except to refer to the Service factually.

11. Third-party services

The Service interoperates with third parties such as identity providers, Stripe, and AI assistants you connect through MCP. Those services are governed by their own terms and privacy policies. We are not responsible for them, but we choose our subprocessors carefully and list them in Schedule 1 of these terms.

12. Availability and changes

We work to keep the Service available and to give notice of planned maintenance. We do not offer a service level agreement unless one is signed separately. We may add, change, or remove features. If we discontinue a material feature, we will give reasonable notice and a way to export affected data.

13. Suspension and termination

You may stop using the Service and delete your organization at any time. We may suspend or terminate access for material breach that is not cured within 14 days of notice, for non-payment after notice, or where required by law. Where the breach is severe, such as an attack on the Service or unlawful content, we may suspend immediately.

On termination we keep your data for 30 days so you can export it, then delete it, except for records we must keep for tax or legal reasons. Export is available from the application throughout the account's life.

14. Warranties

We warrant that we will provide the Service with reasonable skill and care and in line with these terms. Otherwise, and to the extent permitted by law, the Service is provided "as is" and we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted or error free.

Nothing in these terms limits rights you have under mandatory consumer law.

15. Limitation of liability

To the extent permitted by law, neither party is liable for indirect, incidental, special, or consequential loss, or for loss of profit, revenue, goodwill, or anticipated savings. Each party's total aggregate liability arising out of or in connection with this agreement is limited to the greater of the fees you paid us in the 12 months before the event giving rise to the claim, or USD 100.

These limits do not apply to your payment obligations, to either party's breach of confidentiality, to liability for death or personal injury caused by negligence, to fraud, or to anything else that cannot be limited by law.

16. Indemnification

You will defend and indemnify us against third-party claims arising from content your organization stores in the Service or from your breach of section 6, provided we notify you promptly and let you control the defense. We will defend and indemnify you against third-party claims that the Service itself infringes their intellectual property, provided you notify us promptly and let us control the defense. If such a claim is upheld, we may modify the Service or terminate the agreement and refund prepaid fees for the unused term.

17. Force majeure

Neither party is liable for delay or failure caused by events beyond its reasonable control, including natural disasters, war, civil unrest, labour disputes, internet or utility failures, and failures of upstream providers, provided the affected party takes reasonable steps to mitigate and resumes performance promptly.

18. Governing law and jurisdiction

These terms are governed by the laws of the Federative Republic of Brazil, without regard to conflict of law rules. The parties submit to the exclusive jurisdiction of the courts of Brazil, except that either party may seek urgent injunctive relief in any court with jurisdiction over the other party.

If you are established in the European Union, the United Kingdom, or another jurisdiction whose law gives you mandatory protections that cannot be waived by contract, nothing in this section removes those protections or your right to bring a claim in your local courts where the law allows it.

Before starting proceedings, the parties will try in good faith to resolve the dispute through written notice and a discussion within 30 days.

19. Changes to these terms

We may update these terms as the Service changes. For material changes we will give at least 30 days' notice by email or in the application. If you do not agree, you may stop using the Service before the change takes effect. Changes do not apply retroactively to a paid term you have already committed to.

20. General

You may not assign this agreement without our written consent, except to a successor in a merger or sale of substantially all your assets. We may assign it to a successor of the business. If a provision is found unenforceable, the rest remains in force. A failure to enforce a provision is not a waiver. Notices must be in writing and are valid when sent by email to the address on your account or to [email protected]. This agreement is the entire agreement between the parties on its subject and replaces prior discussions, except for a signed order form or a signed service level agreement, which prevail where they conflict. The English version controls.

21. Contact

Questions about these terms: [email protected]. Operator details are on the Legal Notice page.

Schedule 1. Subprocessors

These are the third parties that can access customer data while we provide the Service. Each one is bound by written data protection terms with us. Self-hosted components, including our analytics instance, run on the hosting provider below and are not separate subprocessors.

Customer data is hosted on a tier-1 cloud infrastructure provider in the United States. When you choose to sign in with GitHub, Google, LinkedIn, or Microsoft, or when you connect an AI assistant through our MCP server, those providers process your data under their own terms as separate controllers. They are not acting on our instructions.

Changes to this schedule are made as described in section 8. To receive change notices at a specific address, or to ask a question about a provider, email [email protected].