OORT Labs
OORT Flows/Terms of Use
OORT Flows

Terms of Use

Conditions governing access and use of OORT Flows, OORT Labs' workflow automation platform.

Last updated: April 22, 2026Version: 1.0
Notice

This document is a technical template drafted to reflect the product's current operation. It does not replace legal review. Before publication, submit it to OORT Labs' legal department for adequacy with applicable laws (LGPD, GDPR, CCPA, Brazilian Internet Act, Consumer Protection Code) and the company's commercial strategy.

1.Acceptance of Terms

By accessing or using OORT Flows ("Service", "Platform"), you ("User") declare that you have read, understood and fully agreed to these Terms of Use ("Terms") and the Privacy Policy.

OORT Flows is operated by OORT Labs ("OORT", "we"), headquartered at [full address], registered under CNPJ No. [00.000.000/0001-00].

If you do not agree with any provision of these Terms, do not use the Service.

If you are accepting these Terms on behalf of a legal entity ("Organization"), you declare that you have the authority to bind such entity, and any reference to "User" applies both to you individually and to the Organization.

2.Service Description

OORT Flows is a workflow automation platform that allows you to:

  • Create, edit and run automation flows through a visual editor or natural language;
  • Integrate third-party services (Google Workspace, Slack, Jira, Zendesk, Microsoft Dynamics, Microsoft Teams, DocuSign, Notion, among others);
  • Process data through AI models provided by third parties (OpenAI, Anthropic, Google Gemini, AWS Bedrock, Cohere, Groq, among others);
  • Schedule and run automations recurrently.

OORT Flows is a product integrated with OORT Hub, responsible for identity, authentication and tenant management. Access to the Service requires a valid OORT Hub account.

3.Registration and Account

3.1.Accounts via OORT Hub

Access to OORT Flows is granted exclusively through authentication issued by OORT Hub. OORT Flows does not create or maintain its own login credentials.

By using OORT Flows, you are also subject to the OORT Hub Terms of Use, which govern registration, credentials, access recovery and tenant management.

3.2.Account Responsibility

You are responsible for:

  • Maintaining the confidentiality of your OORT Hub access credentials;
  • All activities performed under your account and within the tenant you belong to;
  • Notifying OORT immediately in case of unauthorized use or suspected security breach.

3.3.Roles and Permissions

Certain functionalities (such as changing credit limits and tenant settings) require the tenant_admin role. OORT reserves the right to validate roles via claims present in the JWT issued by the Hub.

4.Acceptable Use

By using the Service, you agree not to:

  1. Violate any law, regulation or third-party right;
  2. Use the Service to send spam, phishing, malicious content or to attack third parties;
  3. Attempt to circumvent authentication mechanisms, rate limits, credit limits or tenant isolation;
  4. Reverse-engineer, decompile or extract the Service's source code, except when expressly authorized by law;
  5. Use the Service to store or process sensitive data (health data, regulated financial data, minors' data, LGPD/GDPR special categories) without a specific written agreement with OORT Labs;
  6. Automate disproportionate volumes of requests, compromising the stability of the Platform or integrated third-party services;
  7. Use the Service to make automated decisions with significant legal effect on third parties without adequate human oversight, as required by LGPD and GDPR;
  8. Exploit integration credentials of other tenants, attempt to access data from another tenant, or conduct any cross-tenant access attempt.

Violation of these rules may result in immediate suspension or termination of access, without prejudice to other applicable measures.

5.User Content

5.1.Ownership

You retain all rights over the flows, data, files, integration credentials and other content that you or your Organization submit to the Platform ("User Content").

5.2.License Necessary for Operation

You grant OORT Labs a non-exclusive, worldwide, royalty-free and limited license to store, process, display and transmit the User Content strictly for the purposes of:

  • Executing the flows you request;
  • Enabling the integrations with third-party services you connect;
  • Generating execution logs, usage metrics and auditing;
  • Submitting data to the AI providers selected during execution.

This license ends when you remove the User Content or terminate your account, except for legal retention obligations described in the Privacy Policy.

5.3.Responsibility for Content

You represent and warrant that you hold all necessary rights over the User Content, including, where applicable, legal bases for processing personal data of third parties under LGPD and GDPR.

6.Third-Party Integrations

6.1.Authorization

OORT Flows allows you to connect third-party services via OAuth protocols. By authorizing an integration, you:

  • Grant OORT Labs the right to store, in encrypted form (Fernet / AES), the tokens necessary to perform operations on your behalf;
  • Authorize OORT Flows to make calls to third-party services, within the scopes granted, only when triggered by the flows or agents you configure.

6.2.Provider Responsibility

Third-party services (Google, Microsoft, Atlassian, Slack, Zendesk, DocuSign, Notion, AI providers, among others) have their own terms and policies. OORT Labs is not responsible for the availability, behavior, API changes or commercial policies of these services.

6.3.Revocation

You may revoke an integration at any time through the Platform interface or directly in the third-party service. Revocation prevents new calls but does not reverse actions already executed.

7.Artificial Intelligence

7.1.Probabilistic Nature

OORT Flows' AI features (including the "Ortis" assistant, the Flow Builder, specialized agents and direct inferences) use third-party language models. Their outputs are probabilistic and may contain errors, hallucinations, biases or outdated information.

You are responsible for reviewing, validating and approving any sensitive action suggested or performed by AI agents, especially those that produce effects on third parties (sending emails, creating tickets, changes in CRMs, document signatures, etc.).

7.2.Sending Data to AI Providers

When executing a flow with AI components, the relevant content is transmitted to the selected AI providers for processing. See the Privacy Policy for the list of providers, purposes and applicable legal bases.

7.3.Automated Decisions

For corporate use involving decisions that affect third-party rights, maintain adequate human oversight and document processes as required by articles 20 of the LGPD and 22 of the GDPR.

8.Limits, Credits and Fees

8.1.Usage Limits

The Platform applies rate limits (per minute and per hour) and monthly credit limits per tenant, configurable by the tenant_admin via /api/tenant/settings. These limits may be adjusted by OORT to preserve the stability of the Service.

8.2.Costs

Commercial conditions (plans, included credits, overage prices) are governed by the Commercial Agreement or Order Form entered into between the Organization and OORT Labs, or, in the absence thereof, by the current price list published by OORT.

8.3.Taxes

All amounts are expressed in the currency specified in the contract, plus applicable taxes in the User's jurisdiction.

9.Availability and Support

9.1.Reasonable Commercial Effort

OORT will make reasonable commercial effort to keep the Service available, without however guaranteeing uninterrupted or error-free availability, except where a specific SLA is provided in the contract.

9.2.Maintenance

Scheduled maintenance windows will be communicated with reasonable advance notice where possible. Emergency maintenance may occur without prior notice.

9.3.Support

Support channels and levels follow the contracted plan. Standard support is offered via [support channel / email].

10.Intellectual Property

10.1.OORT's Ownership

The Platform, its source code, trademarks, logos, proprietary agents, architecture, documentation and improvements are the exclusive property of OORT Labs or its licensors. Nothing in these Terms transfers such rights to the User.

10.2.Feedback

Suggestions, criticism or feature requests submitted by the User may be freely used by OORT, with no obligation of compensation.

11.Confidentiality

OORT applies technical and organizational controls described in the product README and in the Privacy Policy, aligned with CASA Tier 2 / OWASP ASVS Level 2, including:

  • Encryption in transit (TLS) and at rest (Fernet/AES for integration credentials);
  • Isolation by tenant_id in every query, with automated isolation tests;
  • Role-based access control via JWT issued by the Hub;
  • Audit logs for sensitive events (login, logout, integration connect/disconnect, configuration changes);
  • PII masking in logs.

12.Limitation of Liability

To the maximum extent permitted by law:

  1. The Service is provided "as is" and "as available", without express or implied warranties, except those expressly set forth herein or in a specific commercial contract.
  2. OORT is not responsible for indirect losses, loss of profits, data loss caused by the User's own action, interruptions caused by third-party providers, or decisions made based on AI outputs without human review.
  3. Where permitted by law, OORT's total aggregate liability is limited to the amount effectively paid by the User to OORT in the 12 (twelve) months prior to the event giving rise to the liability.
  4. The above limitations do not apply in cases of willful misconduct, fraud or violation of rights provided for in the Consumer Protection Code, where applicable.

13.Suspension and Termination

13.1.By OORT

OORT may suspend or terminate the User's access, with or without notice, in cases of:

  • Violation of these Terms or the Acceptable Use Policy;
  • Risk to the security, stability or integrity of the Platform or third parties;
  • Contractual default;
  • Legal or regulatory determination;
  • Service discontinuation, with reasonable prior notice whenever possible.

13.2.By the User

The User may terminate use at any time by disconnecting integrations and requesting, through official channels, the deletion of data under the Privacy Policy.

13.3.Effects of Termination

Upon termination:

  • Access to the Platform is interrupted;
  • Data is retained, anonymized or deleted in accordance with the Privacy Policy and any legal retention obligations;
  • Obligations regarding confidentiality, intellectual property and limitation of liability survive termination.

14.Changes to these Terms

OORT may update these Terms periodically. Material changes will be communicated through the Platform, email or OORT Hub, with reasonable advance notice where required by law.

Continued use of the Service after a new version takes effect constitutes acceptance of the new Terms. If you disagree, you must cease use of the Service.

15.Governing Law and Jurisdiction

These Terms are governed by the laws of the Federative Republic of Brazil.

The Court of the District of [city/state] is hereby elected to settle any controversy, with express waiver of any other, however privileged, unless otherwise required by law.

For Users based outside Brazil, local consumer protection laws and mandatory privacy regimes (GDPR, CCPA) may apply, with the provisions most protective of the data subject prevailing.

16.General Provisions

  • Severability: if any provision is held invalid, the remaining provisions shall remain in full force.
  • No waiver: tolerance of non-compliance does not constitute a waiver of rights.
  • Assignment: the User may not assign these Terms without prior authorization from OORT. OORT may assign these Terms in the event of a corporate reorganization.
  • Entirety: these Terms, together with the Privacy Policy and the applicable commercial contract, constitute the entire agreement between the parties regarding the subject matter.

17.Contact

Questions about these Terms may be sent to:

  • Email: [legal@oortlabs.com]
  • Address: [OORT Labs full address]
  • Data Protection Officer (DPO): [DPO name / email]
OORT Labs — All rights reserved.