Terms of Use

1. Description of the service

Tangerin AI is a SaaS platform for Shadow AI Detection and AI Governance. The service allows corporate organizations to identify, monitor, classify and govern their employees' use of artificial intelligence tools, generating compliance evidence for regulatory frameworks such as LGPD, ISO 42001, NIST AI RMF and others.

The service comprises:

• Endpoint monitoring agent (software to be installed on workstations).
• Web management dashboard with dashboards, reports and settings.
• APIs for integration with corporate systems.
• Dynamic catalog of AI tools (currently with 6,500+ cataloged tools).
• Compliance module supporting up to 24 regulatory frameworks, according to the contracted plan.

2. Account and eligibility

To contract the service, the Customer must be a duly incorporated legal entity. The representative who creates the account declares that they have the authority to bind the organization to these Terms.

The Customer is responsible for keeping its access credentials confidential and for all actions performed in its account. Any unauthorized use must be reported immediately to suporte@tangerinai.com.

3. Trial period

• Tangerin AI offers a free trial period of 14 (fourteen) calendar days, counted from the approval of the sign-up. No credit card or any other means of payment is required.
• At the end of the trial, access to the console is blocked until the Customer subscribes to a paid plan. The trial is not automatically converted into a paid plan, and nothing is charged unless the Customer completes a purchase under Clause 5.
• While blocked, the Customer can still subscribe to a plan, request a trial extension, export its data and request its deletion. Installed agents keep sending data for up to 7 (seven) days after the end of the trial; after that, the data sent is no longer stored.
• If no plan is purchased within 90 (ninety) days after the end of the trial, the Customer's data is deleted, and only the organization's registration and commercial record is kept. Before that, administrators receive email notices at 30, 60 and 80 days of blocking.
• Tangerin AI may, at its discretion, extend the trial period upon the Customer's request.

4. Plans, prices and currency

• Paid plans: Starter, Business, Enterprise and Scale. Features, limits (monitored workstations and administrators) and prices are those described on the plans page at the time of purchase. The Scale plan is purchased by number of workstations, with a minimum of 2,000 and in packs of 500.
• The currency and the payment processor are defined by the country of the contracting organization: organizations in Brazil, identified by CNPJ, pay in Brazilian reais (BRL), processed by Asaas; organizations outside Brazil pay in United States dollars (USD), processed by Stripe. Dollar prices follow their own price list and are not an automatic conversion of the price in reais.
• Taxes: in Brazil, prices already include the applicable taxes, and the Asaas invoice is charged in full, with no withholding deducted from it. Abroad, local taxes and withholdings, if any, are the Customer's responsibility.
• Price changes: notified by email to administrators at least 30 (thirty) days in advance and applied only from the first renewal after that notice period; the period already paid is not affected. A Customer who does not agree may cancel before the renewal (Clause 7).

5. Purchase, payment and renewal

• The purchase is made in the console itself by a Customer administrator, who chooses the plan, the billing cycle and, for Scale, the number of workstations, and provides the billing details. Payment is always completed on the payment processor's page (Asaas or Stripe). The purchase can also be made with the sales team (vendas@tangerinai.com).
• Payment methods: in Brazil, credit card, Pix and bank slip (boleto); abroad, credit card.
• Tangerin AI does not receive, process or store card details, which are entered directly with the payment processor. Asaas and Stripe are independent third parties, and use of their pages is also subject to their own terms and privacy policies.
• Billing cycles: monthly, charged in advance each month; or annual, paid in advance for an amount equivalent to 11 (eleven) monthly fees of the plan.
• Activation: the plan is activated automatically when the payment processor confirms the first payment. By card and Pix, confirmation is usually immediate; by boleto, access is released after clearing, which may take up to 3 (three) business days.
• Automatic renewal: the subscription renews at the end of each period, on the same plan and cycle, until it is canceled (Clause 7). In Brazil, a new invoice is issued each period, payable by card, Pix or boleto by the due date; abroad, the amount is charged automatically to the card on file.
• On the annual plan, administrators receive an email notice at least 30 (thirty) days before the renewal, stating its date and amount.

6. Late payment and suspension

• A payment not confirmed by the due date triggers an email notice to administrators with the payment link. For boleto, the first notice is sent only 3 (three) business days after the due date, because of bank clearing. A reminder is sent 2 (two) days before suspension.
• No interest, penalty or any other late charge is applied, and Tangerin AI does not protest the debt or report the Customer to credit bureaus for a mere delay.
• If payment is not settled within 7 (seven) full calendar days after the due date, access to the console is suspended from 00:00 (Brasília time) on the 8th (eighth) day. During suspension, data is kept, agents keep sending data normally and the Customer can still pay the open invoice, export its data and request its deletion.
• Once payment is confirmed, access is restored automatically.
• While a payment is overdue, the subscription cannot be canceled or changed in the console; the Customer must first settle the payment or contact vendas@tangerinai.com.
• If access remains suspended for non-payment for 90 (ninety) days, administrators receive a termination notice by email, with 30 (thirty) days to settle the payment.
• Without settlement, at 120 (one hundred and twenty) days of suspension, and never earlier than 30 (thirty) days after the notice, the contract is terminated: the subscription is canceled with the payment processor and administrators are notified by email. For 30 (thirty) more days, the Customer can still export its data and exercise its data protection rights on the suspended-access screen.
• At 150 (one hundred and fifty) days of suspension, and never earlier than 30 (thirty) days after the termination, the Customer's data is deleted, keeping only the organization's registration and commercial record and the billing records (Clause 12). If the payment is settled before the termination, access comes back with everything as it was; after the termination and before the deletion, the Customer can subscribe again, and nothing is deleted.

7. Cancellation by the Customer

• The Customer may cancel the subscription at any time, without penalty, in the console (Settings › Plans), through an administrator.
• Cancellation takes effect at the end of the period already paid (month or year). Until then, the Customer keeps full access to the plan and no new charge is generated.
• There is no pro-rata refund of the period already paid, including on the annual plan, except as provided in Clause 10.
• The Customer can undo the cancellation in the console before the end of the paid period; the subscription continues on the same plan, cycle and renewal date. Canceling also undoes any scheduled plan downgrade.
• At the end of the paid period, access to the console is blocked and the Customer can subscribe again at any time.
• Data is kept for 12 (twelve) months after the end of the contract and then deleted automatically, keeping only the organization's registration and commercial record and the billing records (Clause 12). Administrators receive an email notice 30 (thirty) and 7 (seven) days before the deletion. Until then, the Customer may export the data or request early deletion, in the console or at privacidade@tangerinai.com, and, if it subscribes again, nothing is deleted. Details in the Privacy Policy.

8. Plan changes

• Upgrade (including more workstations on Scale): takes effect once the difference is paid, calculated in proportion to the time remaining in the period: the price of the new plan for the remaining time, minus a credit for the unused time of the current plan, calculated on the amount actually paid for the period.
• In Brazil, the difference is charged on a separate invoice due the next day; if it expires unpaid, the request lapses and the current plan is kept. Differences below R$ 5.00, the payment processor's minimum charge, are waived. Abroad, the difference is charged immediately to the card on file; if the card is declined, nothing changes. From the next renewal on, the full price of the new plan is charged.
• Downgrade: takes effect from the next cycle, at the end of the period already paid, with no refund or credit for the current period. It is not allowed if current usage (workstations or administrators) exceeds the limits of the intended plan. A scheduled downgrade can be undone before it takes effect.
• Switching from the monthly to the annual cycle is treated as an upgrade. Switching from annual to monthly is not offered in the console and must be requested at vendas@tangerinai.com.

9. Partner coupons

• Coupons from accredited partners and influencers are linked to the organization at sign-up and applied automatically at purchase. The coupon discount is limited to 7%, and the annual-plan discount plus the coupon never exceeds 15% of the list price.
• Duration: on the monthly cycle, the first 12 (twelve) monthly fees paid, including the first, returning to the list price from the 13th; on the annual cycle, only the year paid at purchase.
• Coupons are not cumulative, are non-transferable, cannot be exchanged for cash and do not apply to the difference charged on a plan change. Tangerin AI may end the program at any time, without affecting discounts already granted, and may cancel the discount in case of fraud or abuse.

10. Refunds and disputes

• There is no pro-rata refund for cancellation, downgrade or non-use of the service, except where required by law.
• Charges made in error (for example, duplicate charges or an amount different from the one purchased) are refunded, after verification, through the same payment method. Other requests are reviewed via vendas@tangerinai.com. Refunds of Pix or boleto payments may require the Customer to provide bank details to the payment processor.
• Before disputing a charge with the card issuer (chargeback), the Customer agrees to contact Tangerin AI to seek a solution. In the event of a dispute, Tangerin AI may provide the payment processor with evidence of the purchase and use of the service.
• Access is not suspended while the dispute is ongoing, nor if it ends in favor of Tangerin AI. If the dispute ends with the amount returned to the cardholder, the corresponding period is considered unpaid: access is suspended, as with an overdue charge, until the matter is settled with vendas@tangerinai.com, and the termination and deletion periods of Clause 6 apply, counted from the date of the return.
• Fees charged by the payment processor because of a dispute are never passed on to the Customer.

11. Invoices

• In Brazil, an electronic service invoice (NFS-e) is issued for each confirmed payment, in the name of the contracting organization (legal name and CNPJ provided at purchase).
• For organizations abroad, Stripe issues an invoice and a receipt for each payment.
• The Customer is responsible for the accuracy of the data provided for tax documents; correcting the legal name, CNPJ or address on the purchase screen generates a new charge with the correct details.

12. Billing data

• At purchase, the Customer provides its legal name, CNPJ (in Brazil) or tax identifier (abroad, optional), billing address and billing email. In Brazil, a mobile phone number with area code is also required by the payment processor.
• Tangerin AI stores the organization's legal name, CNPJ and address and the subscription and payment history (plan, cycle, amounts, dates, status, payment method and charge identifiers). The billing email, the mobile phone, the foreign tax identifier and the payment method details stay only with the payment processor.
• To change the billing email or mobile phone after purchase, the Customer must send a request to contato@tangerinai.com.
• Subscription and payment records are kept for 5 (five) years counted from the end of the year of the payment (for example, a payment made in October 2026 is kept until December 31, 2031) to meet tax obligations, including after the end of the contract or the deletion of the other data, and are then deleted. The other rules are in the Privacy Policy.
• Deleting the Customer's data, on request or automatically, does not delete its registration with Asaas or Stripe, which keep it under their own legal obligations; the Customer may exercise its rights directly with them.

13. Use of the agent and Customer responsibilities

The Tangerin AI agent must be installed on the organization's workstations exclusively in a corporate environment and with the knowledge of the monitored employees, in compliance with the applicable labor and data protection legislation, including the LGPD.

The Customer undertakes to:

• Inform its employees about the installation and purpose of the agent, as required by the LGPD and the CLT (Brazilian Labor Code).
• Use the platform exclusively to monitor corporate assets that it owns or controls.
• Not use the service to surveil individuals outside the corporate employment context.
• Keep the organization's registration data up to date.
• Appoint at least one administrator responsible for the use of the platform.

14. Prohibited uses

The Customer is expressly prohibited from:

• Using the service for unlawful or abusive purposes or purposes that violate third-party rights.
• Reverse engineering, decompiling or attempting to extract the source code of the platform or the agent.
• Reselling, sublicensing or transferring access to the service to third parties without the express authorization of Tangerin AI.
• Installing the agent on equipment without the owner's authorization or outside a corporate environment.
• Using the platform to monitor the content of private communications (emails, messages), which is outside the technical scope of Tangerin AI and prohibited by law.
• Interfering with or harming the infrastructure, servers or networks of Tangerin AI.

This clause does not apply to security research conducted in good faith and within the scope of our Responsible Vulnerability Disclosure Policy.

15. Use of the Customer's name and logo

16. Intellectual property

The Tangerin AI platform, including the agent software, source code, design, APIs, the catalog of AI tools and all documentation, is the exclusive property of Tangerin AI and protected by Brazilian and international intellectual property laws.

The data generated by the Customer's organization within the platform (including detection events, settings and reports) belongs to the Customer itself. Tangerin AI does not claim ownership of this data and undertakes to return or delete it upon request, subject to the periods set forth in the Privacy Policy.

17. Availability and SLA

Tangerin AI will use commercially reasonable efforts to keep the platform available. The service is provided on an "as is" basis, without an express guarantee of uninterrupted availability. Scheduled maintenance will be communicated at least 24 hours in advance.

Enterprise plan customers are entitled to a specific contractual SLA, as defined in the respective contractual addendum.

18. Limitation of liability

To the maximum extent permitted by law, Tangerin AI will not be liable for:

• Indirect, incidental, special or punitive damages arising from the use of or inability to use the service.
• Losses arising from improper use of the platform by the Customer or its employees.
• Compliance, security or governance decisions made based on the platform's data, whose final validation is the Customer's responsibility.
• Failures of third-party services (Supabase, Vercel, internet providers and payment processors such as Asaas and Stripe).
• Failure to identify AI tools absent from the catalog on the date of a collection, including newly launched tools, niche solutions, locally run models or any uncataloged AI software, regardless of the reason for the absence.
• Cyberattacks, fraud or any unlawful financial gain obtained by third parties by exploiting a security vulnerability of the platform or the agent, except when it is proven that Tangerin AI was aware of the specific vulnerability used and failed to fix it within a reasonable period, considering its severity, in which case the limitation of liability in this Section remains fully applicable.

In any event, the total liability of Tangerin AI is limited to the amount paid by the Customer in the last 3 months of service.

19. Confidentiality

Each party undertakes to keep the other party's confidential information secret, not disclosing it to third parties without prior written consent, except when required by law or court order. The confidentiality obligations survive the termination of these Terms for a period of 3 years.

20. Term and termination

These Terms take effect on the date the account is created and remain valid while the Customer is in the trial period or maintains an active subscription and, after that, for as long as needed to fulfill the obligations that by their nature must survive (such as confidentiality and tax record keeping).

The Customer may end the subscription at any time under Clause 7. Tangerin AI may terminate the agreement without cause by giving 30 days' notice; in that case, it refunds pro rata the amount paid for the period after the termination.

Tangerin AI may suspend or terminate access immediately, without prior notice, in the event of a breach of these Terms, unlawful use or risk to the security of other customers. Suspension and termination for non-payment follow Clause 6.

After termination, the Customer's data remains available for export and may be deleted on request; without a request, it is deleted automatically, with prior email notice, within the periods of Clause 6 (termination for non-payment) or Clause 7 (other terminations: 12 months after the end of the contract), as set out in the Privacy Policy. The organization's registration and commercial record and the records kept by legal obligation (Clause 12) are excepted.

21. Changes to the Terms and communications

Tangerin AI may modify these Terms at any time. Material changes will be communicated at least 30 days in advance by email to the registered administrators. Continued use of the service after that date implies acceptance of the new conditions; a Customer who does not agree may cancel the subscription under Clause 7.

Communications about purchase, billing, payment failure, suspension, termination, cancellation, renewal and data deletion are sent by email to the administrators registered in the console, who are responsible for keeping them up to date.

22. Governing law and jurisdiction

These Terms are governed by the laws of the Federative Republic of Brazil. The courts of the Judicial District of São Paulo, State of São Paulo, are elected to settle any disputes arising from this instrument, with express waiver of any other, however privileged it may be.

23. Language

These Terms are written in Portuguese and also made available in English and Spanish. Versions in other languages are translations; in case of discrepancy, the Portuguese version prevails.

24. Contact