Início

Terms of Use

Version 2.0 — Updated June 4, 2026

Platform controller: Zihin AI Inc., 651 N Broad St, Suite 206, Middletown, DE 19709, USA.

1. Acceptance of the Terms

By creating a Zihin account, accessing the API, configuring a tenant, or using any platform feature, you ("Customer" or "Tenant") fully agree to these Terms of Use, the Privacy Policy, and the attached DPA (Data Processing Agreement), which together constitute the binding agreement between you and Zihin AI Inc. ("Zihin", "we").


If you act on behalf of a legal entity, you represent that you have the authority to bind that entity to these Terms.


If you do not agree with any provision of these Terms, you must not use the platform.

2. Description of the Service

Zihin is a multi-tenant SaaS platform for building, orchestrating, and operating autonomous artificial intelligence agents, offering:


  • Unified gateway for multiple LLM providers (OpenAI, Anthropic, Google, and others)
  • Declarative schemas for agent configuration
  • Triggers (HTTP webhooks, scheduled, external events)
  • Connections to third-party databases under the Customer's control
  • Integration with MCP (Model Context Protocol) servers, own or third-party
  • Integrations with external APIs (messaging, calendar, e-mail, CRM, and others)
  • Dashboard, analytics, cost tracking, and operational telemetry
  • Developer tools, including SDKs and n8n nodes

  • Zihin may update, modify, evolve, or discontinue features at any time, with reasonable prior notice to Customers in case of materially relevant changes.

    3. Commercial Model and Channel Model

    Zihin operates a three-layer channel model:


    3.1. Technology (SaaS subscription). The platform license is billed globally by Zihin AI Inc., in US dollars (USD), via Stripe, under the direct relationship between the Customer and Zihin AI Inc.


    3.2. Professional services in Brazil. Implementation, consulting, customization, integration, training, and advanced support services, when contracted by Customers in Brazil, may be provided and billed by Aionz Integração Serviços e Tecnologia Ltda (CNPJ 52.400.922/0001-90), Zihin's official integration partner in Brazil, in Brazilian reais (BRL), under a specific commercial agreement between Customer and Aionz.


    3.3. Professional services in other geographies and accredited partners. In other geographies, or alternatively in Brazil, professional services may be provided and billed by integration partners accredited by Zihin, under a specific commercial agreement between the Customer and the chosen integration partner. Zihin maintains a partner accreditation program and is not liable for services provided directly by partners to Customers, subject to its obligation of reasonable selection and supervision.


    3.4. Independence of relationships. The platform subscription (item 3.1) is independent from the contracting of professional services (items 3.2 and 3.3). The Customer may subscribe to the platform only and operate with its own team, or combine the platform with services from Aionz or accredited partners.

    4. Accounts, Tenants, and Authentication

    4.1. To use the platform, the Customer must create a tenant and provide:


  • Tenant administrator name
  • Valid corporate e-mail
  • Password (stored with cryptographic hash)
  • Billing information (via Stripe), where applicable

  • 4.2. The Customer is responsible for:


  • Keeping credentials secure and up to date
  • Activities carried out in its tenant, including those performed by secondary administrators, integrations, agents, and end users
  • Not sharing API keys with unauthorized third parties
  • Properly configuring schemas, triggers, connections, and integrations

  • 4.3. Zihin may suspend or terminate accounts in cases of abuse, fraud, violation of these Terms, or risk to platform security.

    5. API Usage, Limits, and Quotas

    5.1. The Customer agrees to:


  • Use its own API Key and not share it
  • Not attempt to circumvent usage limits or policies
  • Not perform direct reverse engineering of the proprietary routing algorithms
  • Not attack, overload, or compromise API stability
  • Use the service legally, ethically, and in accordance with these Terms

  • 5.2. Zihin may apply rate limits, credit limits, token quotas, or other restrictions according to the contracted plan.


    5.3. Token Quota. Each subscription plan includes a monthly token quota. Tokens reset at the beginning of each billing cycle, do not accumulate, and expire at the end of the cycle. Consumption is tracked in real time on the dashboard. Alerts are sent at 80% and 90% usage.

    6. Content and Data Processing

    6.1. When using the platform, the Customer submits texts, documents, instructions, structured data, database connections, integration configurations, and other content ("Customer Content") for processing.


    6.2. Permissions granted to Zihin. The Customer authorizes Zihin to:


  • Process Customer Content through the LLM providers and third-party services selected by the Customer
  • Temporarily store logs for security, debugging, analytics, and support
  • Use aggregated and anonymized data to improve routing algorithms and service quality

  • 6.3. Use for AI training. Zihin does not use Customer Content to train its own AI models. When routing requests to third-party providers, Zihin uses, whenever available, the API settings that opt out of training by those providers. Each provider has its own data policies, which the Customer should review directly.


    6.4. Connections to Customer databases and systems. When the Customer configures a connection to its own database or to third-party systems under its control, Zihin acts exclusively as Processor of such data, as detailed in the attached DPA. The Customer is the Controller of the data accessed or processed through those connections.

    7. Responsibility for Autonomous Agents

    7.1. General principle. Zihin provides the technical platform for building and orchestrating autonomous agents. The Customer is fully responsible for the schemas, triggers, MCP servers, database connections, external API integrations, and other configurations established in its tenant, as well as for the actions performed by the agents in third-party systems as a result of those configurations.


    7.2. Non-exhaustive examples of Customer responsibility. The Customer's responsibility includes:


  • Messages sent by agents via communication channels (WhatsApp, e-mail, SMS, chats, etc.)
  • Events created in connected calendars (cal.com, Google Calendar, and others)
  • Records created, updated, or deleted in connected databases or CRMs
  • Payments, purchases, or financial transactions executed via connected APIs
  • Automated decisions made by agents based on prompts and schemas configured by the Customer
  • Communications with the Customer's end users

  • 7.3. Zihin's responsibility. Zihin is responsible exclusively for the technical operation of the orchestration platform, subject to the SLA (item 11) and the limitation of liability (item 14). Zihin is not liable for errors, omissions, inadequate decisions, or losses arising from the Customer's configurations or from actions performed by agents in third-party systems.

    8. Specific Limitations Regarding Artificial Intelligence

    8.1. Inherent limitations. The Customer acknowledges that AI systems have inherent limitations, including the possibility of inaccurate, outdated, biased, hallucinated, or contextually inappropriate outputs. Zihin does not guarantee the accuracy, completeness, or suitability of outputs generated by AI models routed through the platform.


    8.2. Sensitive decisions. The Customer is responsible for ensuring adequate human oversight for AI decisions with potential material impact, especially in medical, legal, financial, tax, human resources, security, or legal-compliance contexts. Zihin does not recommend or authorize the use of AI outputs as the sole basis for decisions in such contexts.


    8.3. End-user transparency. When the Customer's agents interact with natural persons (end users), the Customer must clearly and noticeably inform that the interaction is with an AI system, in compliance with applicable transparency requirements (including, where applicable, Art. 50 of the EU AI Act and analogous regulations).

    9. Acceptable Use

    9.1. The Customer may not use Zihin to:


  • Generate harmful, illegal, fraudulent, discriminatory content or content that violates third-party rights
  • Commit fraud, identity falsification, or malicious automation
  • Process personal data without an adequate legal basis
  • Perform direct reverse engineering of the proprietary routing algorithms
  • Build datasets to train AI models that directly compete with Zihin
  • Abuse free trial period limits through automation or multiple accounts
  • Share API keys with unauthorized third parties
  • Operate AI systems classified as "high-risk" under the EU AI Act or analogous regulations, except under a specific express agreement with Zihin

  • 9.2. Violations may result in immediate account suspension, without prejudice to other applicable consequences.

    10. Payments, Refunds, and Cancellations

    10.1. Platform subscription. Charges are processed via Stripe by Zihin AI Inc. By subscribing, the Customer authorizes recurring charges, automatic renewal, and processing via the provided payment method. Prices and limits may change upon 14 days' notice.


    10.2. Professional services. Services provided by Aionz (item 3.2) or accredited partners (item 3.3) are governed by specific commercial agreements entered into directly between the Customer and the respective provider.


    10.3. Cancellation. The Customer may cancel the subscription at any time. Cancellation takes effect at the end of the current billing period. There is no partial refund for unused time within a cycle.


    10.4. Tokens. Unused tokens expire at the end of each 30-day cycle and are neither refundable nor transferable.


    10.5. Refunds. Refunds may be granted, at Zihin's discretion, for:


  • Duplicate charges, within 7 days of occurrence
  • Unauthorized payments, subject to verification
  • Extended service unavailability exceeding 24 consecutive hours

  • 10.6. Addons. Additional token packages (addons) are non-refundable after purchase.

    11. Service Level Agreement (SLA)

    11.1. Zihin targets 99% (ninety-nine percent) uptime for the API gateway, calculated monthly, excluding:


  • Scheduled maintenance windows, communicated with reasonable notice
  • Unavailability of third-party providers (LLMs, external APIs, MCP servers)
  • Force majeure events

  • 11.2. Zihin does not guarantee the availability of LLM providers or third-party services routed through the platform.


    11.3. In case of materially relevant SLA breach, Zihin may, at its discretion, offer credits or compensation in the following cycle, evaluated case by case.

    12. Support

    12.1. Channels. Support is provided primarily via e-mail (contact@zihin.ai). Enterprise-plan Customers may have access to additional support channels and SLAs under a specific agreement.


    12.2. Window. Support is provided during Brazilian business hours (UTC-3), Monday through Friday, except Brazilian and US national holidays.

    13. Intellectual Property

    13.1. The Zihin platform, including its proprietary routing algorithms, APIs, source code, documentation, trademarks, and other assets, is the exclusive property of Zihin AI Inc.


    13.2. The Customer fully retains ownership of its Customer Content. Nothing in these Terms transfers the Customer's intellectual property rights to Zihin.


    13.3. AI-generated outputs are provided without warranty of originality or novelty. The Customer is responsible for verifying compliance with intellectual property laws applicable to its use.

    14. Limitation of Liability

    14.1. To the maximum extent permitted by law, Zihin is not liable for:


  • Indirect damages, lost profits, or loss of business opportunity
  • Data loss, except in cases of Zihin's exclusive fault under the DPA
  • Damages resulting from decisions made based on AI outputs
  • Damages resulting from actions performed by agents in third-party systems
  • Unavailability of LLM providers or third-party services
  • Configuration errors made by the Customer

  • 14.2. Zihin's total aggregate liability to the Customer, in any event, shall not exceed the amount actually paid by the Customer in the 12 (twelve) months preceding the event giving rise to the claim.

    15. Indemnification

    The Customer agrees to indemnify and hold Zihin harmless from any claims, losses, damages, and costs (including reasonable attorneys' fees) arising from:


  • The Customer's violation of these Terms
  • Use of the platform in violation of applicable laws
  • Actions of agents configured by the Customer in third-party systems
  • Claims from the Customer's end users
  • 16. Termination

    16.1. The Customer may terminate its account at any time. Zihin may terminate accounts in cases of abuse, fraud, violation of these Terms, default, or illegal use.


    16.2. After termination, data is handled in accordance with the Privacy Policy and the DPA, including minimum retention required by law.

    17. Changes to the Terms

    Zihin may modify these Terms at any time. Material changes will be communicated via e-mail or dashboard notification at least 14 days in advance. Continued use of the platform after the changes take effect constitutes acceptance.

    18. Governing Law and Jurisdiction

    18.1. Global terms (Zihin AI Inc.). These Terms, in the direct relationship between Customer and Zihin AI Inc., are governed by the laws of the State of Delaware, USA. Disputes shall be submitted to the competent courts of Delaware, unless the law applicable to the Customer requires a different forum.


    18.2. Brazilian customers via Aionz. For professional services provided in Brazil by Aionz (item 3.2), Brazilian law (including LGPD, the Brazilian Internet Civil Framework, and the Consumer Protection Code, where applicable) prevails, with the courts of the Judicial District of Anápolis, State of Goiás, as the elected forum.


    18.3. Customers via accredited partners. For services provided by accredited partners (item 3.3), the applicable law and forum are defined in the respective commercial agreement between Customer and partner.

    19. General Provisions

    19.1. These Terms, together with the Privacy Policy and the attached DPA, constitute the entire agreement between the parties regarding their subject matter.


    19.2. The invalidity of any provision does not affect the remaining provisions.


    19.3. One party's tolerance of the other party's non-compliance with any obligation does not imply waiver of the right to demand future compliance.

    20. Contact

    Legal and general inquiries: contact@zihin.ai

    Technical support: contact@zihin.ai

    Address: Zihin AI Inc., 651 N Broad St, Suite 206, Middletown, DE 19709, USA

    Annex — Data Processing Agreement (DPA) — V1.0

    This Data Processing Agreement ("DPA") is an integral part of the Terms of Use entered into between the Customer ("Controller") and Zihin AI Inc. ("Processor"), applying whenever the Processor processes personal data on behalf of and under the direction of the Controller.

    DPA 1. Definitions

    The terms "Personal Data", "Data Subject", "Processing", "Controller", "Processor", "Sub-processor", and "Security Incident" have the meanings assigned by the LGPD (Law No. 13.709/2018), GDPR (Regulation (EU) 2016/679), and applicable analogous regulations.

    DPA 2. Subject Matter and Duration

    2.1. This DPA governs the Processing of Personal Data by the Processor on behalf of the Controller, within the scope of the services provided via the Zihin platform.


    2.2. The duration coincides with the validity of the Terms of Use, with the obligations of confidentiality, return/deletion of data, and cooperation in incidents surviving termination.

    DPA 3. Nature and Purpose of Processing

    3.1. Nature. Collection, temporary storage, transmission, processing by AI models selected by the Controller, integration with systems connected by the Controller, and other operations inherent to the operation of the platform.


    3.2. Purpose. Provision of the contracted services, as determined by the Controller via tenant configuration, schemas, triggers, connections, and integrations.


    3.3. Types of data. As determined by the Controller in its use of the platform, which may include: identification, contact, communication, professional, and transactional data, among others, with the Controller responsible for the legal basis and purpose.


    3.4. Data subjects. Natural persons whose data is processed by the Controller via the platform, including end customers, contacts, employees, and others under the Controller's responsibility.

    DPA 4. Processor Obligations

    4.1. The Processor undertakes to:


  • Process Personal Data exclusively in accordance with the Controller's documented instructions
  • Ensure confidentiality by its authorized personnel
  • Adopt reasonable technical and organizational measures for data security (item 7)
  • Cooperate with the Controller in responding to data subject requests
  • Notify security incidents in accordance with item 8
  • Support the Controller in data protection impact assessments (DPIA), where applicable
  • Return or delete Personal Data at the end of processing, in accordance with item 10
  • DPA 5. Controller Obligations

    5.1. The Controller undertakes to:


  • Have an adequate legal basis for processing the data it submits via the platform
  • Comply with transparency obligations towards data subjects
  • Ensure that its configurations (schemas, triggers, connections, integrations) comply with applicable law
  • Respond primarily to data subject requests under its control
  • Not submit sensitive data to the platform without a specific legal basis and additional protective measures
  • DPA 6. Sub-processors

    6.1. General authorization. The Controller authorizes the Processor to engage Sub-processors for the provision of the services, including:


  • LLM providers (OpenAI, Anthropic, Google, and others selected by the Controller via schema configuration)
  • Infrastructure providers (Vercel, Supabase, hosting providers)
  • Payment processor (Stripe)
  • Accredited integration partners, when contracted by the Controller

  • 6.2. Cascaded obligations. The Processor requires from its Sub-processors obligations substantially equivalent to those of this DPA regarding the protection of Personal Data.


    6.3. Changes of Sub-processors. The Processor will communicate materially relevant changes to the Sub-processor list with reasonable notice, allowing the Controller to raise a substantiated objection.

    DPA 7. Technical and Organizational Measures

    The Processor maintains, at a minimum:


  • Encryption in transit (TLS 1.2+) for all communications
  • Encryption at rest for sensitive data and credentials
  • Password hashing with current algorithms
  • Logical multi-tenant segregation
  • Role-based access control (RBAC)
  • Audit logs of relevant operations
  • Security monitoring and anomaly detection
  • Regular backups with defined retention
  • Incident response plan
  • Staff training in data protection
  • DPA 8. Security Incidents

    8.1. Notification. The Processor will notify the Controller, without undue delay and within a reasonable period after becoming aware, of security incidents involving Personal Data under processing.


    8.2. Notification content. The notification will include, to the extent known: nature of the incident, categories and approximate number of affected data subjects, likely consequences, and measures taken or proposed to mitigate effects.


    8.3. Cooperation. The Processor will cooperate with the Controller in investigations and communications to regulatory authorities and data subjects, as required by applicable law.

    DPA 9. Audit

    9.1. The Processor makes available to the Controller, upon reasonable request and subject to confidentiality, the information necessary to demonstrate compliance with this DPA.


    9.2. The Controller may request an audit upon reasonable prior notice, during business hours, without disrupting operations. For enterprise customers, specific audit conditions may be agreed separately.

    DPA 10. Return and Deletion

    10.1. Upon termination of the services, the Processor, at the Controller's request:


  • Returns the Personal Data in a structured format, or
  • Permanently deletes the Personal Data

  • except for minimum retention required by law, in accordance with the periods detailed in the Privacy Policy.

    DPA 11. International Transfers

    11.1. Data may be transferred to jurisdictions with an adequate level of protection or under legal safeguards (standard contractual clauses, adequacy decisions, equivalent mechanisms).

    DPA 12. Liability

    12.1. Each party is responsible for its obligations under this DPA. The Processor's total liability is subject to the limits set out in the Terms of Use.

    DPA 13. Conflicts

    In case of conflict between this DPA and the Terms of Use, this DPA prevails with respect to personal data protection matters.

    DPA 14. Governing Law

    This DPA is governed by the law applicable to the Terms of Use, subject to local data protection requirements (LGPD for processing involving data subjects in Brazil; GDPR for data subjects in the EU; and other applicable territorial regulations).