Terms of Use

The Service is intended for legal entities and professionals, for business use. By signing up you declare that you are over 18, have full legal capacity and, if acting on behalf of a company, have authority to bind it to these Terms.

BrazID provides a REST API that, from a CPF number and a date of birth supplied by the Customer, returns the name, date of birth, registration status and, when available, other information (such as a deceased indicator).

Data comes from an official source of registration data and may be cached for up to 30 days to speed up the Service and reduce costs. BrazID is not the Brazilian Federal Revenue Service or any public body and does not provide legal advice.

• Provide true, complete and up-to-date information, and confirm your email to unlock API keys.
• Signing in with Google or GitHub is also subject to those providers' terms.
• Do not keep several free accounts to bypass limits. We use anti-fraud measures (such as IP and device identification) and may block suspicious sign-ups.
• You are responsible for everything that happens in your account. Keep your password and two-factor authentication safe and tell us immediately about any unauthorized use.

API keys are personal, non-transferable and confidential. Do not publish them in open source code, apps or public pages. The Customer is responsible for all lookups and consumption generated with its keys. We may revoke any key at any time if we suspect compromise or a breach of these Terms.

The Customer may use the Service only for a legitimate and specific purpose, disclosed to the data subject, in compliance with Brazilian Law No. 13,709/2018 (LGPD), such as fraud prevention, registration validation, and age or identity checks in sign-up flows. The following is prohibited:

• looking up CPFs without a legal basis or legitimate purpose, or for discriminatory purposes, stalking, harassment, surveillance or abusive debt collection;
• reselling, sublicensing or making the API or the data available as a lookup service to third parties (for example, a public "CPF lookup"), except under a written Corporate agreement;
• building, enriching or selling databases or lists from the responses, or scanning CPFs sequentially or randomly (enumeration);
• bypassing rate limits, credits, cache, authentication or any security mechanism;
• using the Service for unlawful activity or in breach of third-party rights;
• reverse engineering, or load or intrusion testing without prior written authorization;
• introducing malicious code or harming the availability of the Service.

Regarding the personal data of the individuals looked up, the Customer acts as controller and BrazID as processor, handling data under the Customer's lawful instructions (the lookup itself). When BrazID handles data for its own purposes (Customer account, security, billing) it acts as controller, as described in the Privacy Policy.

The Customer alone is responsible for:

• identifying and documenting the legal basis (art. 7 of the LGPD) and the purpose of each lookup;
• informing data subjects about the processing (transparency) and obtaining consent when that is the legal basis;
• complying with the principles of purpose, adequacy, necessity, data minimization and security, keeping the data obtained only as long as necessary and with proper technical and organizational measures;
• handling data subject requests (art. 18) and offering review of decisions made solely by automated means (art. 20);
• notifying us without delay of any security incident involving data obtained through the Service or its API keys.

To comply with the law or an authority's order, or to investigate abuse, BrazID may suspend access, preserve records and share information with the competent authorities.

• Plans and prices are on the Pricing page: Free (20 lookups per month), Pro (200, 1,000 or 5,000 credits per month) and Corporate (contract).
• Only a successful lookup (HTTP 200) uses 1 credit, even when served from cache. Error responses (4xx and 5xx) do not use credits.
• The allowance lasts for a 30-day cycle. Unused credits expire and do not roll over.
• On paid plans, lookups beyond the allowance are billed at the plan's overage rate at the end of the cycle. On the free plan, when credits run out the API answers 402 until the cycle renews.
• Payments are processed by Stripe. The Customer authorizes recurring charges to the payment method provided. Non-payment may lead to suspension. Amounts are in Brazilian reais and taxes may apply by law.
• Price changes will be notified at least 30 days in advance, by email or in the dashboard, and do not affect the current cycle.
• The Customer may cancel at any time, effective at the end of the paid cycle. There is no pro rata refund of the current cycle or of unused credits, unless required by law or contract.

We use reasonable efforts to keep the Service available, but we do not guarantee uninterrupted or error-free operation. The Service depends on third parties (the official data source and infrastructure providers) and may be subject to maintenance, rate limits and outages. When the official source is unstable, the API answers 503, free of charge. Service levels (SLA) exist only if stated in a Corporate agreement.

Information is provided "as is", as received from the official source, and may contain discrepancies, delays or be unavailable; cached data may reflect the situation up to 30 days earlier. We do not guarantee the accuracy, completeness or timeliness of the information. The Customer must assess the risks before making relevant decisions based on it (such as denying credit or an account) and give the data subject the possibility of review.

BrazID retains all rights in the software, brand, documentation and website. We grant the Customer a limited, non-exclusive, revocable and non-transferable license to use the Service in accordance with these Terms. The registration data looked up belongs to its sources and data subjects and is subject to applicable law.

• To the maximum extent permitted by law, BrazID is not liable for lost profits, loss of revenue, data or opportunities, indirect or consequential damages, or decisions made by the Customer based on the information obtained.
• We are also not liable for failures of third parties (the official source, infrastructure, payment or email providers), acts of God or force majeure.
• BrazID's total liability to the Customer is limited to the amount actually paid by the Customer to BrazID in the 12 months before the event that gave rise to the damage (or R$ 100.00 on the free plan).
• Nothing in these Terms excludes liability that cannot be excluded or limited by law.

The Customer will hold harmless and indemnify BrazID, its partners, officers and employees from losses, damages, fines, costs and attorneys' fees arising from: (a) use of the Service in breach of these Terms or the law, including the LGPD; (b) claims by data subjects or authorities relating to data processing carried out by the Customer; and (c) lookups made with its API keys. We will notify the Customer of the claim and reasonably cooperate in the defense.

BrazID may suspend or terminate access immediately, with or without prior notice depending on severity, in case of breach of these Terms, fraud, security risk, legal order or non-payment. The Customer may close its account at any time. Data will be deleted or anonymized as described in the Privacy Policy, subject to legal obligations. Clauses that by nature must remain in force (liability, indemnity, intellectual property and venue) survive termination.

We may update these Terms. Material changes will be notified by email or in the dashboard with reasonable notice. Using the Service after the new version takes effect means acceptance; if you disagree, cancel your account.

These Terms and the Privacy Policy are the entire agreement between the parties on the Service. If a provision is held invalid, the others remain valid. Tolerating a breach is not a waiver of rights. BrazID may assign these Terms in a corporate reorganization. Electronic communications are legally valid between the parties. These Terms do not create a partnership, agency or employment relationship.

These Terms are governed by the laws of the Federative Republic of Brazil. The courts of the district of [Cidade/UF do foro] are chosen, to the exclusion of any other, however privileged, except for consumer protection rules that set the venue of the consumer's domicile.

Questions about these Terms: comercial@brazid.com. Privacy and data protection matters: privacidade@brazid.com.