Terms of Use

By accessing or using Curupira (the Service), operated by DW Corp LTDA (CNPJ 38.501.143/0001-50), you agree to these Terms of Use. If you use the Service on behalf of an organization, you accept these terms on its behalf. If you do not agree, do not use the Service.

Curupira is an OAuth2 / OpenID Connect identity and access management platform that lets organizations manage tenants, applications, users, roles, role groups, API keys and audit logs. The Service may evolve over time as features are added, changed or removed.

You are responsible for the credentials and API keys issued to you, for all activity under your account, and for keeping those credentials confidential. Notify us at privacy@dwcorp.com.br of any suspected unauthorized use. We may suspend or restrict accounts that appear compromised or in breach of these terms.

You agree not to:

• use the Service unlawfully or in a way that infringes the rights of others;
• attempt to breach, probe or circumvent authentication, authorization or tenant-isolation boundaries except under an authorized security test;
• disrupt, overload or interfere with the Service or its infrastructure;
• reverse engineer, copy or resell the Service except to the extent permitted by law or a written agreement;
• use the Service to store or transmit malicious code or unlawful content.

When you enable sign-in through a third-party identity provider (for example Google, GitHub, Discord, Meta or Microsoft), your use of that provider remains subject to that provider's own terms and policies. Where Curupira integrates with such platforms, you and we agree to comply with the applicable platform requirements — including the Meta Platform Terms and Developer Policies and the Google API Services User Data Policy — and Curupira uses data obtained through those integrations solely to authenticate and identify the user, as described in the Privacy Policy.

Curupira is a multi-tenant service. An organization (customer) that configures a tenant is responsible for its own applications, users and access decisions. For end users who authenticate to a customer's application through Curupira, the customer is the data controller and DW Corp acts as its data processor under a data-processing agreement (DPA); the customer is responsible for having a lawful basis and appropriate notices for those end users. DW Corp is the controller for its own account holders and for operating the platform.

The Service, including its software, design and trademarks, remains the property of DW Corp LTDA and its licensors. These terms grant you a limited, non-exclusive, non-transferable right to use the Service; no other rights are granted. Content and data you provide remain yours.

To the maximum extent permitted by law, the Service is provided on an as-is and as-available basis, without warranties of any kind, including any implied warranty of fitness for a particular purpose or of uninterrupted, secure or error-free operation.

To the maximum extent permitted by law, DW Corp LTDA is not liable for any indirect, incidental, special or consequential damages, or for loss of data, profits or revenue, arising from or related to your use of the Service.

We may update these terms from time to time. We will notify material changes through the Service or by other reasonable means, and the updated effective date will be shown on this page. Continued use of the Service after changes take effect constitutes acceptance.

These terms are governed by the laws of Brazil, and any dispute is subject to the courts of Brasília, Distrito Federal, without prejudice to any mandatory consumer protections that may apply to you.

Questions about these terms can be sent to DW Corp LTDA (CNPJ 38.501.143/0001-50), SHN Quadra 1 Bloco A Conj. A Salas 1413, Asa Norte, Brasília/DF, CEP 70701-000, Brazil, or privacy@dwcorp.com.br.