Terms of Service — EvoCODE IA®

Last updated: September 1, 2026 · Version 2.1

These Terms of Service ("Terms") govern access to and use of the Kairo, TraceLog, and AgenteNOC platforms, as well as the related websites, panels, APIs, and services (collectively, the "Services"), provided by EvoCODE IA® Ltda ("EvoCODE", "we", "us"). By subscribing to or using the Services, you (the "Customer") agree to these Terms. Read them carefully — in particular Sections 6 (Acceptable Use and Messaging), 9 (Suspension and Termination), 13 (Warranties), 14 (Limitation of Liability), and 15 (Indemnification).

1. Definitions and parties

1.1. For the purposes of these Terms:

"EvoCODE", "we", "our": EvoCODE IA® Ltda, enrolled with the CNPJ (Brazilian corporate taxpayer registry) under No. 63.623.332/0001-42, with its registered office at Praça Nossa Senhora do Rosário, 44, Sala 02 — Centro, Piracaia/SP — CEP 12970-000 — Brasil, Brazil.
"Customer", "you": the legal entity or individual that subscribes to the Services and holds the account (tenant).
"User": any person authorized by the Customer to access the Services under the Customer's account (staff, administrators, operators).
"End User": a person who interacts with the Services through the Customer without being a User — for example, invitees of Kairo bookings, subscribers/end customers served by AgenteNOC agents, visitors to public booking pages.
"Customer Content": data, files, messages, configurations, contacts, device credentials, and other information that the Customer or its Users and End Users enter into or generate within the Services.
"AUP": EvoCODE's Acceptable Use Policy, incorporated into these Terms by reference.
"DPA": the Data Processing Agreement entered into between EvoCODE and the Customer, which governs the processing of personal data carried out by EvoCODE in the capacity of processor.
"Plan": the commercial arrangement subscribed to by the Customer (features, limits, retention periods, and fees), as described at the time of subscription.

1.2. Incorporated documents. The following are incorporated into these Terms by reference: (a) the AUP; (b) the Privacy Policy; (c) the Cookie Policy; (d) the DPA, where applicable; and (e) the product-specific Annexes (Annexes I to III). In the event of a conflict, the following order of precedence applies: DPA > Terms of Service > AUP > documentation and informational materials.

2. Acceptance and capacity

2.1. You accept these Terms by (a) checking the acceptance box at registration; (b) signing a proposal or order that references them; or (c) accessing or using any of the Services. We record the accepted version, the date, the IP address, and the browser user agent as evidence of acceptance.

2.2. You represent that you have full legal capacity and, if accepting on behalf of a legal entity, the authority to bind it. The Services are not directed at persons under 18 years of age.

2.3. If you do not agree to these Terms, do not use the Services.

3. Services

3.1. General description. EvoCODE provides, on a SaaS (software-as-a-service) model, scheduling, network observability, and artificial intelligence agent platforms, detailed in the product-specific Annexes:

Annex I — Kairo (kairo.evocode.ia.br): multi-tenant scheduling with WhatsApp-based customer service and AI agents;
Annex II — TraceLog: network observability (routes, latency, packet loss, SLA);
Annex III — AgenteNOC (agentenoc.evocode.ia.br): AI agents for NOCs/ISPs via WhatsApp, Telegram, and Discord.

3.2. Service evolution. We may improve, modify, or discontinue features, provided that there is no material reduction of the subscribed service during the current cycle without reasonable prior notice.

3.3. Dependency on third parties. Essential parts of the Services depend on third-party platforms and providers — including, without limitation, Meta/WhatsApp (via Evolution API), Telegram, Discord, Google, Microsoft, Zoom, Stripe, AI providers, and cloud providers. We do not control these third parties. The availability, pricing, policies, and technical rules of these channels may change at any time and affect the Services, without this constituting a breach by EvoCODE. Failures, blocks, bans, or changes imposed by third parties are handled in accordance with Sections 6, 12, and 13.

3.4. Betas and experimental features. Features identified as beta, preview, or experimental are provided without additional warranties and may be changed or removed at any time.

4. Registration, accounts, and credentials

4.1. Accuracy of registration. You undertake to provide true, complete, and up-to-date information at registration and to keep it up to date during the term. Registering with false information or with third parties' data without authorization is prohibited.

4.2. Personal and non-transferable credentials. Access credentials (login, password, tokens, API keys) are personal and non-transferable. It is prohibited to share credentials between individuals, maintain shared accounts ("account pooling"), or adopt any practice intended to circumvent per-User licensing or Plan limits.

4.3. Responsibility for use. You are responsible for all activity carried out under your credentials and under your Users' credentials, whether authorized or not, until you notify us of the compromise. Treat credentials as confidential information.

4.4. Duty to notify. You must notify us immediately, via sac@evocode.ia.br or the support channels, of any unauthorized use, leak, or suspected compromise of credentials, so that we may adopt containment measures.

4.5. MFA. We may require multi-factor authentication (MFA) to be enabled for accounts or profiles with access to sensitive functions, as a condition of access.

4.6. Anti-fraud. We conduct security and anti-fraud monitoring of account usage (access patterns, indications of credential sharing, billing manipulation, circumvention of limits), based on our legitimate interest, as described in the Privacy Policy. Where fraud is found — including registration falsehood, unauthorized use of third parties' data, billing manipulation, or circumvention of Plan limits — we may suspend or terminate the account pursuant to Section 9, without prejudice to the applicable legal measures.

5. License and restrictions

5.1. License. We grant you, during the term and conditioned on payment, a limited, non-exclusive, non-transferable, non-sublicensable, and revocable license to access and use the Services, exclusively for your internal operations and in accordance with the subscribed Plan, these Terms, and the AUP.

5.2. Restrictions. Except with EvoCODE's express written authorization, you may not (and shall not permit third parties to):

a) copy, modify, translate, or create derivative works of the Services; b) reverse engineer, decompile, or disassemble the Services, except in the cases expressly permitted by Article 6 of Law No. 9,609/98 (Brazilian Software Law); c) resell, sublicense, rent, assign, or make the Services available to third parties as a service bureau, except under a formally contracted reseller/partnership arrangement; d) use the Services to develop, train, or improve a competing product or service; e) publicly disclose test results or benchmarks of the Services without our prior written consent; f) remove or obscure proprietary notices, trademarks, or credits; g) circumvent technical limits, licensing mechanisms, usage metering, or security controls.

6. Acceptable use and messaging rules (WhatsApp/Meta, Telegram, Discord)

6.1. AUP. Use of the Services is subject to the Acceptable Use Policy (AUP), incorporated into these Terms by reference and applicable to the Customer, its Users, and End Users. You are responsible for ensuring that your Users and End Users comply with the AUP; violations committed by them are deemed your violations.

6.2. Meta and other platform policies. When using WhatsApp features, you undertake to fully comply with the applicable Meta/WhatsApp policies — including the WhatsApp Business Terms of Service, the Commerce Policy, and the WhatsApp Messaging Policy — incorporated into these Terms by reference, in the current versions published by Meta. An equivalent rule applies to the Telegram and Discord terms when those channels are used.

6.3. Opt-in and opt-out. You may only send messages via WhatsApp (or equivalent channels) to recipients who have given prior and verifiable consent (opt-in) to receive communications from you. You must:

a) keep records capable of proving each recipient's opt-in and produce them upon request; b) offer a functional and immediate opt-out mechanism, honoring unsubscribe requests; c) not send unsolicited messages (spam), nor use purchased, rented, scraped lists or lists of unverifiable origin.

6.4. Immediate channel suspension. In the event of a violation of the rules of this Section or of Meta's policies, or of a risk to the integrity of the platform (ours or a third party's) — including spam signals, recipient complaints, anomalous block rates, or notification from Meta — we may immediately suspend, without prior notice and without any compensation, the sending of messages, the number, the connection instance, or the account involved, to the extent necessary to eliminate the risk.

6.5. Specific messaging indemnification. You shall indemnify and hold us harmless from any losses arising from your use of the messaging channels in violation of these Terms or of the platforms' policies, including fines and penalties imposed by Meta, defense costs, and damages arising from the banning or restriction of WhatsApp Business accounts (WABA), numbers, or integrations.

6.6. Channel availability. The operation of the messaging channels depends on third parties (Meta, Evolution API, Telegram, Discord, carriers). We do not warrant the availability, continuity, or immunity from blocks of these channels, and their failures do not give rise to any right to SLA credits, pursuant to Section 12.

7. Customer obligations as data controller (data protection)

7.1. Roles. In the processing of personal data: (a) EvoCODE acts as controller of account, registration, billing, security log, and Services usage telemetry data; (b) EvoCODE acts as processor of the personal data that you process through the platform — such as Kairo invitee data, the content of WhatsApp/Telegram/Discord conversations, and personal data possibly present in TraceLog logs and telemetry — with you being the controller of such data.

7.2. DPA. The processing carried out by EvoCODE as processor is governed by the DPA, which prevails over these Terms in data protection matters.

7.3. Your obligations. As controller, you are responsible for: (a) having an adequate legal basis for the processing (LGPD (Lei Geral de Proteção de Dados — Brazilian General Data Protection Law, Law No. 13,709/2018), Art. 7); (b) providing data subjects with the information required by law; (c) fulfilling data subjects' rights (LGPD, Art. 18) with respect to the data under your control; (d) providing lawful instructions to EvoCODE; and (e) not entering into the Services personal data whose processing is unlawful.

7.4. Redirection of data subjects. Data subject requests (invitees, end customers, contacts) received by EvoCODE and relating to data controlled by you will be redirected to you, with us providing the assistance set out in the DPA.

8. Plans, pricing, billing, and default

8.1. Pricing. The fees, billing cycles, limits, and features are those of the Plan subscribed to at the time of signup, as presented at contracting or in a commercial proposal. Applicable taxes are added where due.

8.2. Billing and renewal. Unless otherwise provided at contracting, Plans are billed in advance and renew automatically for equal periods, and the Customer may cancel the renewal at any time with effect at the end of the current cycle. Payment processing is carried out by third-party providers (such as Stripe).

8.3. Adjustment and price changes. Price changes will be communicated in advance and will take effect as of the following renewal cycle. If you do not agree, you may cancel before the renewal.

8.4. Excess usage. Consumption beyond the Plan limits (Users, messages, probes, retention, volume) may be blocked or charged in accordance with the Plan conditions.

8.5. Default. In the event of non-payment, we will notify you and grant a cure period of 10 (ten) to 15 (fifteen) days. If the default persists after the cure period, we may suspend access to the Services (Section 9) and, if the default continues, terminate the agreement. We may use lawful collection and credit protection measures.

8.6. No refunds. Except as otherwise provided by law or contract, amounts paid are non-refundable in the event of voluntary cancellation during the course of the cycle, without prejudice to the statutory right of withdrawal where applicable.

9. Term, suspension, and termination

9.1. Term. These Terms remain in force for as long as you maintain an active account or use the Services.

9.2. Immediate suspension. We may suspend, in whole or in part, access to the Services, to features, or to specific channels, immediately and upon concurrent or subsequent notice, when: (a) necessary to protect the security, integrity, or availability of the Services, of other customers, or of third parties; (b) there is a violation of the AUP or of the Meta/messaging platform policies (Section 6); (c) there is a default not cured within the cure period of Section 8.5; (d) there is an order from a competent authority; or (e) there are serious indications of fraud (Section 4.6). The suspension will be proportionate and limited to what is necessary, and we will restore access when the cause ceases.

9.3. Termination for cause. Either party may terminate these Terms if the other breaches a material obligation and fails to cure the breach within 30 (thirty) days of notice. We may terminate immediately in the event of a serious and incurable breach (such as fraud, illegality, or a material risk to third parties).

9.4. Termination without cause. You may close your account at any time; EvoCODE may terminate free Plans or discontinue Services upon reasonable prior notice.

9.5. Effects of termination and accounts without an active Plan. Upon termination of the agreement, for any reason, or in the case of an account without an active Plan — including an account that never subscribed to a Plan: (a) the licenses granted cease, except for the access strictly necessary to exercise item (b); (b) you may export the Customer Content for 60 (sixty) days, through the means made available on the platform or upon request to support, counted from the termination of the agreement or, for an account without an active Plan — where there is no termination from which to count the period —, calculated per data item, from its respective collection or generation; (c) after that period, we will delete the Customer Content through a periodic automated routine (Annex II.3), subject to retention required by law (such as records under the Marco Civil da Internet (Brazilian Internet Civil Framework, Law No. 12,965/2014) and tax obligations) and backup copies within their purge cycle; and (d) the processing carried out during that window is based on the performance of the contract and of steps taken, at the data subject's request, prior to entering into it (LGPD, Art. 7, V; GDPR, Art. 6(1)(b)) — which covers the account that never subscribed to a Plan, whose registration and use during evaluation constitute those preliminary steps —, ceasing at the end of the period. You may request early deletion at any time through the channels of Section 18.7.

9.6. Survival. The clauses that by their nature should survive shall survive termination, including Sections 4.3, 5.2, 6.5, 10, 11, 13, 14, 15, and 18.

10. Intellectual property

10.1. Our property. The Services, the software, the infrastructure, the design, the documentation, the templates and flows, and the trademarks EvoCODE IA®, Kairo, TraceLog, and AgenteNOC are owned by EvoCODE or its licensors and remain reserved. Nothing in these Terms transfers to you any intellectual property right in the Services.

10.2. Your content. You retain ownership of the Customer Content. You grant us a limited, worldwide, non-exclusive license to host, process, transmit, and display the Customer Content to the extent necessary to operate, protect, and improve the Services and to perform these Terms.

10.3. Feedback. Suggestions and feedback submitted by you may be freely used by EvoCODE, without compensation or obligation of attribution.

10.4. Aggregated data. We may generate and use aggregated and anonymized data, which does not identify you or any data subject, for statistics, security, and improvement of the Services.

11. Confidentiality

11.1. Each party shall protect the other's confidential information with the same care it devotes to its own (never less than reasonable care), using it only to perform these Terms and disclosing it only to those who need to know it and are bound by an equivalent duty of confidentiality.

11.2. Information is not confidential if it: is or becomes public without breach; was already lawfully known to the receiving party; is independently developed; or must be disclosed by law or by order of an authority — in which case, where permitted, the receiving party will notify the other in advance.

11.3. The duty of confidentiality remains in force for 5 (five) years after termination, and indefinitely with respect to personal data and trade secrets.

12. Service levels (SLA) and support

12.1. SLA. We will use commercially reasonable efforts to maintain a monthly availability of the Services of 99.5% (ninety-nine point five percent), measured per calendar month over the platform under our control.

12.2. Credits. If the monthly availability falls below the commitment, you may request service credits, in accordance with the criteria of the subscribed Plan. Service credits are the sole and exclusive remedy for unavailability covered by the SLA.

12.3. SLA exclusions. The following do not count as unavailability: (a) scheduled maintenance windows communicated in advance; (b) failures of third parties beyond our control (Meta/WhatsApp, Telegram, Discord, cloud providers, AI providers, payment gateways, DNS, carriers); (c) failures in the Customer's connectivity, infrastructure, or equipment (including probes and monitored devices); (d) suspensions provided for in these Terms; (e) force majeure or acts of God.

12.4. Support. Support is provided through the official channels — sac@evocode.ia.br and WhatsApp +55 51 2191-0021 — during the hours and at the levels set out in the subscribed Plan.

13. Warranties and disclaimers

13.1. We warrant that we will provide the Services with professional diligence and in compliance with applicable law.

13.2. Except as provided above and to the maximum extent permitted by applicable law, the Services are provided "as is" and "as available". We do not promise uninterrupted or error-free operation, nor that the Services will meet each and every specific requirement of the Customer. The availability commitment is limited to the SLA in Section 12.

13.3. We do not warrant business results (such as booking attendance rates, service conversion, detection of each and every network incident, or the absence of false positives/negatives in monitoring and diagnostics).

13.4. Nothing in these Terms excludes warranties that cannot be excluded by law, including the public-order rules of the Código de Defesa do Consumidor (Brazilian Consumer Protection Code) where applicable to the specific relationship.

14. Limitation of liability

14.1. The parties acknowledge that the Plan prices were set based on the allocation of risks in this Section, which constitutes an essential element of the bargain.

14.2. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW: (A) EVOCODE'S TOTAL AND AGGREGATE LIABILITY, FOR ALL EVENTS AND CAUSES OF ACTION RELATED TO THESE TERMS OR TO THE SERVICES, IS LIMITED TO THE TOTAL AMOUNT ACTUALLY PAID BY THE CUSTOMER TO EVOCODE IN THE 12 (TWELVE) MONTHS PRECEDING THE EVENT GIVING RISE TO THE LIABILITY; AND (B) EVOCODE SHALL NOT BE LIABLE FOR INDIRECT DAMAGES, LOSS OF PROFITS, LOSS OF OPPORTUNITY, LOSS OF REVENUE, LOSS OF DATA (SUBJECT TO THE SECURITY OBLIGATIONS PROVIDED BY LAW AND IN THE DPA), REPUTATIONAL DAMAGE, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

14.3. The limitations in this Section do not apply in the event of willful misconduct or gross negligence by EvoCODE, nor in cases where the law prohibits the limitation of liability (including indemnification obligations arising from public-order rules).

14.4. Where the specific relationship is subject to the Código de Defesa do Consumidor (Brazilian Consumer Protection Code) and the Customer is a legal entity, the parties acknowledge that the limitation provided in this Section is justified and proportionate, pursuant to Article 51, I, final part, of the CDC, given the business nature of the service and the risk allocation reflected in the price.

15. Indemnification by the Customer

15.1. You shall defend, indemnify, and hold harmless EvoCODE, its affiliates, partners, officers, and staff from any third-party claims, losses, damages, fines, penalties, and expenses (including reasonable attorneys' fees) arising from:

a) violation, by you, your Users, or End Users, of these Terms, the AUP, or the messaging platforms' policies (including Meta/WhatsApp — Section 6.5); b) Customer Content, including allegations that it violates third-party rights or the law; c) your failure to comply with your obligations as controller of personal data (LGPD and other applicable rules); d) claims, demands, or sanctions brought by your end customers, invitees, or message recipients by reason of your use of the Services.

15.2. We will promptly notify you of the claim and allow you to assume the defense, cooperating at your expense; we may participate in the defense with our own counsel.

16. Artificial intelligence

16.1. Probabilistic nature. The Services incorporate generative AI features (customer service agents, diagnostics, automated responses, synthesized voice notes). AI outputs are probabilistic and may contain errors, inaccuracies, or omissions. We do not warrant the accuracy, completeness, or suitability of AI outputs, which do not replace professional human judgment. You must review critical information before acting on it.

16.2. Identification as AI. The AI agents identify themselves as virtual assistants to their interlocutors, and synthetic content (such as audio generated by artificial voice) is marked as such, in line with applicable regulatory practices (including Article 50 of the EU AI Act, where applicable). You may not disable, hide, or mask the AI identification.

16.3. No use for training. We do not use Customer Content or the data processed in our capacity as processor to train general-purpose AI models, except with your express and specific consent to the contrary.

16.4. Automated decision-making. Where the processing involves decisions made solely on the basis of automated processing that affect data subjects' interests, the safeguards of Article 20 of the LGPD apply, including the right to request review, through the channels indicated in the Privacy Policy.

16.5. Configuration responsibility. You are responsible for the instructions, prompts, knowledge bases, and automations you configure in the agents, as well as for your use of the AI outputs vis-à-vis your end customers.

17. Changes to these Terms

17.1. We may amend these Terms and the incorporated documents. Material changes will be communicated with reasonable advance notice, by e-mail and/or notice on the platform, indicating the effective date.

17.2. If you do not agree to a material change, you may terminate the agreement without charge before the change takes effect, with a pro-rata refund of amounts paid in advance for the unused period.

17.3. Continued use of the Services after the change takes effect constitutes acceptance of the new version. We keep a history of dated versions in the legal hub.

18. General provisions

18.1. Governing law. These Terms are governed by the laws of the Federative Republic of Brazil.

18.2. Venue. The courts of the judicial district of Piracaia/SP are hereby elected (or, in the absence of jurisdiction there, the competent judicial district of Bragança Paulista/SP), with waiver of any other, subject to the venue of the consumer's domicile where the relationship is subject to the Código de Defesa do Consumidor (Brazilian Consumer Protection Code). For international customers, Brazilian law and Brazilian jurisdiction remain applicable, and the parties may agree to arbitration in a separate instrument.

18.3. Precedence. In the event of a conflict between documents, the following order applies: DPA > Terms of Service > AUP > documentation.

18.4. Assignment. You may not assign these Terms without our prior written consent. We may assign them in corporate transactions (merger, acquisition, reorganization), with the guarantees to the Customer maintained.

18.5. Severability. The invalidity of one provision does not affect the others; the invalid provision will be replaced by a valid one that preserves the original intent.

18.6. No waiver. Tolerance of non-compliance does not imply waiver or novation.

18.7. Notices. Official communications will be made to the registered e-mail addresses and through the platform channels. Our contacts: contato@evocode.ia.br (legal), sac@evocode.ia.br and WhatsApp +55 51 2191-0021 (support), dpo@evocode.ia.br (personal data).

18.8. Force majeure. Neither party is liable for non-compliance caused by acts of God or force majeure, including widespread internet infrastructure failures, acts of authority, and events beyond reasonable control.

18.9. Entire agreement. These Terms, together with the incorporated documents, constitute the entire agreement between the parties on their subject matter, superseding prior understandings.

Annex I — Kairo-specific conditions

I.1. Description. Kairo (kairo.evocode.ia.br) is a multi-tenant scheduling SaaS that allows the Customer to publish booking pages and links, manage event types, availability, and teams, receive and serve invitees via WhatsApp with the support of AI agents, and integrate calendars and video conferencing.

I.2. Invitees. The data of the invitees who book with you — name, e-mail, phone, form responses, time zone, and booking history — is controlled by you; EvoCODE acts as processor (Section 7 and DPA). You are responsible for informing your invitees about the processing and for fulfilling their rights; requests received by us will be redirected to you.

I.3. WhatsApp and AI agents. Customer service and notifications via WhatsApp (including confirmations, reminders, and conversations with AI agents) are fully subject to Section 6 (verifiable opt-in, functional opt-out, Meta policies) and Section 16 (identification as AI, no warranty of accuracy). The sending of reminders and notifications presupposes that the invitee consented when providing their number in the booking flow; it is your responsibility to ensure the lawfulness of that collection.

I.4. Calendar and conferencing integrations. Kairo integrates with third-party services upon authorization by you or your Users (Google Calendar, Microsoft Outlook/Teams, Zoom, among others). By connecting an integration, you authorize the strictly necessary exchange of data (reading/writing of events, generation of meeting links) and acknowledge that the integration is subject to the terms and availability of the respective third party. Revoking the authorization with the third party may interrupt dependent features.

I.5. Public pages and embeds. Public booking pages and embedded widgets (embed/iframe) display information that you configured; you are responsible for the content published on those pages.

I.6. Payments. Kairo Plan charges are processed by a third-party payment provider (Stripe), subject to its own terms.

Annex II — TraceLog-specific conditions

II.1. Description. TraceLog is a network observability SaaS: monitoring of routes, latency, packet loss, and SLA measurement, with collection by probes and visualization in dashboards.

II.2. Network telemetry. You acknowledge that the telemetry collected (IP addresses, routes, hops, latency and loss metrics) may contain personal data (such as third-party IPs). With respect to such data, you are the controller and EvoCODE the processor (Section 7 and DPA). You represent that you have authorization to monitor the networks, assets, and addresses that you register on the platform; monitoring third-party networks or assets without authorization is prohibited (see AUP).

II.3. Retention per Plan. Network telemetry is retained according to the subscribed Plan: 7, 30, 90, or 365 days, counted from collection, subject to a minimum technical period of 40 (forty) days for raw measurements (latency and route history). This minimum results from the monthly SLA report, which covers the immediately preceding closed calendar month and is made available on all Plans. Accordingly, on Plans whose subscribed window is shorter than 40 days, raw measurements are purged once they reach 40 days, and not once they reach the Plan's window. Aggregated data (hourly rollups) is kept for up to twice the Plan's window. Accounts without an active Plan have their telemetry retained for 60 (sixty) days, aligned with the export window of Section 9.5, which expressly covers an account without an active Plan, including one that never subscribed to a Plan. Once these periods have elapsed, the data is purged by a periodic automated routine and is not recoverable. Plan changes to a shorter window entail the purge of the excess data on the routine's next run, subject to the 40-day technical minimum. It is your responsibility to export data you need before the purge or the termination of the agreement (Section 9.5).

II.4. Probes. Probes and collectors installed on your infrastructure or your customers' infrastructure are your responsibility as regards installation, connectivity, environment security, and authorization of use. The unavailability of a probe for a cause attributable to the Customer's environment does not count as unavailability of the Service (Section 12.3).

II.5. Informational nature. TraceLog metrics, alerts, and SLA measurements are informational in nature and depend on collection conditions; we do not warrant detection of all incidents or the absence of false positives/negatives (Section 13.3). TraceLog's SLA measurement of the monitored networks is not to be confused with the platform SLA (Section 12).

Annex III — AgenteNOC-specific conditions

III.1. Description. AgenteNOC (agentenoc.evocode.ia.br, with an administrative panel) provides AI agents for NOCs and internet service providers (ISPs), which serve, monitor, and diagnose networks via WhatsApp, Telegram, and Discord.

III.2. Conversation content. The conversations processed by the agents — user messages, agent responses, sender identifiers, audio, and interaction records — are controlled by you; EvoCODE acts as processor (Section 7 and DPA). You are responsible for informing your end users and subscribers about the automated service and the data processing, including in groups, whose participants have identifiers and messages processed when the agent is triggered.

III.3. Network device credentials. AgenteNOC may store access credentials for network devices (routers, OLTs, switches, etc.) for diagnostics. These credentials are stored encrypted. You represent that you have authorization to grant such access, must use credentials with the least privilege necessary, and are responsible for the actions executed on your devices through commands and diagnostics that you configure or request. Rotate compromised credentials and revoke access upon termination of the agreement.

III.4. Third-party channels. WhatsApp, Telegram, and Discord are third-party platforms: Section 3.3, Section 6 (including opt-in/opt-out and immediate channel suspension), and the SLA exclusion of Section 12.3 apply. Blocks or bans imposed by the platforms by reason of your use are your responsibility (Section 6.5).

III.5. AI identification and diagnostic limits. The agents identify themselves as virtual assistants (Section 16.2) and their diagnostics and recommendations are operational support, not replacing the assessment of a professional; critical actions on the network must be validated by a human operator. Sections 13.3 and 16.1 apply.

III.6. Course content. Videos and training materials made available in the panel (including via a third-party DRM player) are intended for the Customer's internal use, and their reproduction or redistribution is prohibited.

Version history

Below we record the material changes to this document. The current version and the other pieces of the legal corpus are published in the legal hub at https://evocode.ia.br/legal.

Version 2.1 — September 1, 2026

TraceLog telemetry retention (Annex II.3). The window for the TraceLog Pro Plan changed from 180 (one hundred eighty) to 90 (ninety) days — Plans are now 7, 30, 90, or 365 days. A minimum technical period of 40 (forty) days for raw measurements (latency and route history) was added, necessary to produce the monthly SLA report for the immediately preceding closed calendar month: on Plans with a window shorter than 40 days, raw measurements are deleted once they reach 40 days, and not once they reach the Plan's window. Aggregated data (hourly rollups) is now stated as retained for up to twice the Plan's window, and telemetry of an account without an active Plan, for 60 (sixty) days counted from collection.
Export window (Section 9.5). The export period for Customer Content, previously expressed as a range of "30 (thirty) to 60 (sixty) days," was fixed at 60 (sixty) days — the upper limit of the previous range. Section 9.5 now expressly covers an account without an active Plan, including one that never subscribed to a Plan, with an indication of the basis for the processing carried out during that window.
Removal of the Laravel Nightwatch subprocessor. The service is no longer used and was removed from the corpus. The change does not modify the text of these Terms: it appears in the Privacy Policy (Section 5.2) and in the Public List of Subprocessors.
Version history. This section was created, so that the record of changes now appears within the document itself, and not only in the legal hub.

Version 2.0 — July 22, 2026

Original text of this document, published in the consolidation of EvoCODE IA®'s legal corpus (Terms of Service, Acceptable Use Policy, Privacy Policy, Cookie Policy, Data Processing Agreement, Public List of Subprocessors, and Legal Notice).

EvoCODE IA® Ltda · CNPJ 63.623.332/0001-42 Praça Nossa Senhora do Rosário, 44, Sala 02 — Centro, Piracaia/SP — CEP 12970-000 — Brasil, Brazil Website: https://evocode.ia.br · Legal: contato@evocode.ia.br · Support / Customer service: sac@evocode.ia.br · WhatsApp: +55 51 2191-0021 (https://wa.me/555121910021) Data Protection Officer (DPO): Elizandro Pacheco de Almeida — dpo@evocode.ia.br

Terms of Service — Version 2.1 — Last updated: September 1, 2026.