Terms of Use

Last updated: May 2026

These Terms of Use (“Terms”) govern access to and use of the OODA Intelligence platform (“Platform”, “Service”) by contracting organizations and their authorized users. By accessing or using the Service, you declare that you have read, understood and fully agreed to these Terms and to our Privacy Policy.

If you do not agree with any provision, do not use the Platform.

1. Definitions

2. Acceptance and eligibility

To use the Service, you must:

• Have the legal capacity to enter into a contract (minimum age of 18).
• Represent a contracting organization with a commercial agreement in force.
• Accept these Terms and the Privacy Policy in full.
• Comply with the laws applicable in your jurisdiction.

OODA Intelligence may, at its sole discretion, refuse registrations or suspend accounts that do not meet these requirements.

3. Registration and account security

3.1 Accuracy

The User undertakes to provide truthful, complete and up-to-date information at registration. False or out-of-date information may result in immediate suspension.

3.2 Personal, non-transferable account

Each account is tied to an individual User and may not be shared. Registering the same User in more than one account at the same time is prohibited without express authorization.

3.3 Credentials and MFA

• The User is responsible for keeping their credentials (login, password, tokens) confidential.
• Multi-Factor Authentication (MFA) is mandatory for every User.
• Report any unauthorized access immediately to security@oodaintel.com.

3.4 Provisioning

Workspaces are provisioned once a commercial agreement has been signed between OODA Intelligence and the Customer. Every workspace has cryptographic data isolation.

4. Acceptable use

The Platform is intended exclusively for legitimate cybersecurity activities. The following are expressly prohibited:

• Using the Platform for illegal or fraudulent purposes, or in breach of these Terms.
• Attempting to access data, workspaces or accounts belonging to other organizations.
• Reverse engineering, decompiling or otherwise attempting to extract source code.
• Sharing access credentials with unauthorized third parties.
• Exceeding the contracted API usage limits (rate limits, quotas).
• Uploading malicious content, malware or copyright-protected material without authorization.
• Using the Platform to attack third parties or to conduct unauthorized offensive operations.
• Collecting personal data belonging to other users of the Platform.

OODA Intelligence reserves the right to suspend or terminate immediately any account that breaches this clause, without prejudice to any applicable legal remedies.

5. Description of the Service

OODA Intelligence is a Cyber Threat Intelligence (CTI) platform that offers, among other things:

• Continuous threat monitoring (OSINT, dark web, deep web).
• Detection and correlation of data leaks.
• Incident management (SIEM/MDR) with automated workflows.
• Analysis of suspicious URLs and files in an isolated sandbox.
• Auditing, compliance and reporting for the LGPD/GDPR.
• 30+ integrated modules, as listed in the module catalogue.

Which modules and features are actually available is defined in each Customer’s commercial agreement and contracted plan.

6. Intellectual property

6.1 Ownership of the Platform

The Platform — including its source code, design, brand, logos, content, documentation and data structures — is the exclusive property of OODA Intelligence and is protected by Brazilian and international intellectual property law.

This licence grants the Customer a non-exclusive, non-transferable, revocable and limited right of use, as contracted, without any transfer of ownership.

6.2 Customer Content

All data entered, imported, generated or stored by the Customer on the Platform remains the exclusive property of the Customer. OODA Intelligence acts solely as the operator of that data, as set out in the Privacy Policy.

6.3 Brand and visual identity

Reproducing OODA Intelligence logos, trademarks, taglines or visual identity without prior written authorization is prohibited.

7. Availability and SLA

• Scheduled maintenance is announced by e-mail at least 48 hours in advance.
• Emergency maintenance (fixing critical vulnerabilities) may take place without prior notice, with a communication afterwards.

Credits for an SLA that is not met are defined in each Customer’s specific commercial agreement.

8. Limitation of liability

To the extent permitted by Brazilian law, OODA Intelligence is not liable for:

• Indirect, incidental or consequential damages, lost profits or loss of opportunity.
• Losses arising from improper use or use that does not comply with these Terms.
• Unavailability caused by force majeure, fortuitous events or third-party failures (internet providers, external infrastructure).
• Failures arising from third-party integrations outside the control of OODA Intelligence.
• Operational decisions taken by the Customer on the basis of Platform output — OODA Intelligence provides intelligence, but the action is the Customer’s responsibility.

In any event, the total liability of OODA Intelligence is limited to the amount actually paid by the Customer in the 12 months preceding the event that gave rise to the liability, except in cases of proven wilful misconduct or gross negligence.

9. Confidentiality

Both parties undertake to keep confidential the information exchanged during the term of the agreement, including:

• Customer Content (data, queries, configurations).
• Technical details of the Platform that are not publicly available.
• The commercial terms of the agreement.
• The results of investigations conducted by the Customer.

The confidentiality obligation survives termination of the agreement for 5 (five) years, and is perpetual for trade secrets and personal data.

10. Payment and billing

• Amounts are defined in the commercial agreement and may be billed monthly or annually.
• Delays of more than 30 days may result in suspension of access, without prejudice to the enforceability of the debt.
• Price adjustments follow the contracted index (IPCA, IGP-M or another agreed Brazilian inflation index), with at least 60 days’ prior notice.
• Responsibility for the applicable Brazilian taxes (ICMS, ISS, PIS/COFINS) is defined in the agreement.

11. Termination

11.1 By either party

Either party may terminate the agreement on 30 (thirty) days’ prior notice, unless specific contractual provisions state otherwise.

11.2 For breach

OODA Intelligence may terminate the agreement immediately — with no right to a refund of amounts already paid — in the event of:

• A serious breach of these Terms.
• Illegal or fraudulent use of the Platform.
• Payment default of more than 60 days.
• Conduct that compromises the security of the Platform or of other Customers.

11.3 Data export after termination

Once the agreement ends, the Customer has 30 days to export their data in a structured format (JSON/CSV). After that period, all data is deleted in line with the retention policy, except for data retained under a legal obligation.

12. Changes to these Terms

OODA Intelligence may update these Terms to reflect regulatory, technical or operational changes. Substantial changes are announced at least 30 days in advance, by e-mail and through a banner on the Platform.

Continued use after a new version takes effect constitutes acceptance. If the Customer disagrees, they may terminate under clause 11.

Current version: 2026.05

13. Governing law and jurisdiction

These Terms are governed by the laws of the Federative Republic of Brazil, in particular:

• The General Data Protection Law (LGPD — Law 13,709/2018)
• The Brazilian Internet Civil Rights Framework (Marco Civil da Internet — Law 12,965/2014)
• The Consumer Protection Code (Código de Defesa do Consumidor), where applicable
• The Brazilian Civil Code

The courts of the judicial district of São Paulo/SP, Brazil are elected to settle any dispute arising from these Terms, to the exclusion of any other, however privileged.

For commercial disputes between companies, the parties may opt for arbitration under a specific clause in the commercial agreement.

14. General provisions

• Severability: the invalidity of any clause does not affect the remaining ones.
• Waiver: one party’s tolerance of the other’s non-compliance does not constitute a waiver of the rights provided for here.
• Assignment: the Customer may not assign these Terms without written authorization from OODA Intelligence.
• Entire agreement: these Terms, together with the specific commercial agreement and the Privacy Policy, constitute the entire agreement between the parties.

15. Contact

For questions, support or notices relating to these Terms:

See also:

• Privacy Policy
• Cookie Policy
• LGPD Compliance
• Data Protection Officer (DPO)
• Data Subject Rights