Terms of Use

The services will be provided in the following stages, in this order:

1. Stage 1 – Sign-up. The CLIENT sends the information requested for sign-up. Sending this information does not create any obligation to pay or any definitive contractual relationship.
2. Stage 2 – Sign-up approval and request for materials. Once the sign-up is approved, ARIA will request the initial materials needed to develop the website.
3. Stage 3 – Website presentation. Within 5 (five) business days from receipt of the initial materials, ARIA will present the CLIENT’s new website for review, in a temporary environment.
4. Stage 4 – Approval and issue of the first invoice. If the CLIENT approves the website presented, the first invoice, corresponding to the first monthly fee, will be issued.
5. Stage 5 – Final adjustments and domain. After payment of the first invoice, ARIA will make the final adjustments and migrate or register the main domain.

If the CLIENT does not approve the website presented, the first invoice will not be issued and no contractual relationship will be formed, with no charge whatsoever for the development, which remains a courtesy.

The CLIENT acknowledges that:

• Payment of the first invoice constitutes full and irrevocable electronic acceptance of these Terms of Use and of the service agreement;
• Electronic acceptance does not require a physical or digital signature, under applicable Brazilian law and the commercial practices adopted by recurring service platforms (SaaS);
• Continued use of the services, as well as payment of subsequent invoices, constitutes automatic renewal of the agreement while it is in force.

The client must keep their registration data up to date at all times. False or disputed information may lead to the services being blocked until the matter is clarified. For this purpose, the client must use an email address that does not belong to the domain hosted with ARIA, thus avoiding the risk of communication failures if the system is down. Watch for emails from ARIA being diverted to the JUNK or SPAM folder.

To perform the contracted services, if necessary, ARIA will use the registration data provided by the CLIENT at the time of contracting to register, configure or manage solutions with the applicable providers. For domain registration, the process will be carried out with Registro.br, and the CLIENT acknowledges the terms for domain registration (click here to view the Registro.br terms). For services in the Google ecosystem, such as Google Cloud Platform, Google Workspace or others, ARIA may implement and manage these tools, and the CLIENT will be subject to Google’s terms of use (click here to view Google’s terms). For Amazon Web Services (AWS) services, including Amazon EC2, S3, Lambda or other solutions, configuration will be done as needed, and the CLIENT acknowledges the AWS terms (click here to view the Amazon Web Services terms).

ARIA reserves the right to carry out registration checks before or after contracting, including, but not limited to:

• Verification of registration data;

• Review of the CNPJ (company registration number) and/or CPF (individual taxpayer number) of the person responsible;

• Assessment of risk, fraud, duplicate registration or misuse of the services.

ARIA may refuse, suspend or cancel the registration at any time, without the need for justification, if it identifies inconsistencies or operational, legal or commercial risks.

Refusal or cancellation of the registration does not create any obligation, compensation or contractual relationship between the parties.

All communication from the CLIENT must be made through the support email available to subscribers 24x7x365, or by phone during the business hours shown at https://www.ariaserv.com/en/contact/.

After approval of the website presented and payment of the first monthly fee, we will make the ARIA Platform available for use and will periodically send email notifications before the due date for renewal of the next period; if the CLIENT wishes to renew, they simply pay for the upcoming period. If the CLIENT wishes to cancel the services, they should not pay the invoice for the next period. If the invoice is not paid, the client will not be bound to any further charge or service provided by ARIA. The CLIENT may request cancellation of the services at any time. After cancellation, the data remains available for export for 30 (thirty) days, as set out in the DATA PORTABILITY AND EXPORT clause, after which the website, all content entered and the mailboxes are permanently deleted from ARIA’s systems, with no possibility of recovery. ARIA will notify the CLIENT by email before permanent deletion.

NOTE: The development/customization of the Website on the ARIA Platform is a COURTESY, and the day of the month on which recurring invoices fall due will be the same day of the month as the due date of the first invoice (contracting invoice).

ARIA may cancel at any time the services of any CLIENT who breaches one or more items of this Agreement.

The CLIENT will pay for the rental of the ARIA Platform the price agreed at the time of contracting.

ARIA will notify the CLIENT in advance, by email, of any adjustments to the prices of its services. ARIA reserves the right to change its service prices at any time.

The CLIENT will pay for the period they are going to use; renewal takes place through email notices and payment of the new invoice for the same billing period previously contracted.

Payment will be made through the online payment system defined by ARIA, for the security of transactions and the confidentiality of the CLIENT’s information.

Payment must be made through the client area located at www.yourdomain/painel or through the notification email, when that email contains a link to pay the invoice.

ARIA will send 3 (three) billing notices to the CLIENT by email (account holder’s registration), the first 7 (seven) calendar days before the due date, the second 1 (one) calendar day before the due date, the third 3 (three) calendar days after the due date, and finally a notice 7 (seven) calendar days after the due date warning that the services will no longer be available. Officially, the Website service will become unavailable on the seventh calendar day after the due date and the Hosting (Email) service will become unavailable on the fifteenth calendar day after the due date. ARIA will allow 15 (fifteen) days after the due date for proof of payment, which corresponds to the continuation of the agreement. After 15 (fifteen) calendar days from the due date, if the CLIENT has not shown proof of payment, the agreement will be terminated and the website, all content entered and emails will be suspended, and the agreement may be renewed if the outstanding invoice is paid. After 1 (one) month, if the CLIENT has still not responded regarding payment of the outstanding invoice, the website, all content entered and the mailboxes will be permanently deleted from ARIA’s systems, with no possibility of recovery. Before permanent deletion, ARIA will notify the CLIENT by email, and the right to export provided for in the DATA PORTABILITY AND EXPORT clause is guaranteed.

ARIA treats the CLIENT’s data — registration data, business information entered into the system, website content and email content — as confidential, does not sell it and does not disclose it to third parties, except exclusively in the following cases:

1. service providers required to perform the agreement (hosting, email delivery, backup storage and artificial intelligence tools), listed in the SUBPROCESSORS AND INTERNATIONAL DATA TRANSFER clause, which act under ARIA’s instructions and a contractual obligation of confidentiality;
2. ARIA’s own team, strictly as needed to provide the service and support;
3. compliance with a legal or regulatory obligation, or with an order from a competent authority.

In the event of compliance with a legal or regulatory obligation, or with an order from a competent authority, ARIA will provide only the data requested and, unless expressly prohibited by law, will notify the CLIENT.

ARIA accesses the admin panel of the CLIENT’s website to carry out development, support and maintenance. This access is logged, limited to the website concerned and ended at the end of each session.

The confidentiality obligation remains in force after termination, expiry of the agreement and cancellation of the services.

ARIA uses third-party artificial intelligence tools to support the creation, maintenance and support of the contracted websites and services. The CLIENT acknowledges and agrees to the conditions below.

1. Purpose. AI tools are used to: write and review website copy; organize and fit to the layout the material sent by the CLIENT; diagnose technical problems; prepare draft replies to maintenance requests; and support the internal documentation of the service. The final decision and the publication of any content remain subject to human review by ARIA, with the CLIENT’s approval where applicable.
2. Data that may be processed. The following may be submitted to AI tools: the material sent by the CLIENT to produce the website (texts, images, documents and files); the content published on the website; the history of requests and messages exchanged with support; and project identification data (company name, domain, contact email address).
3. What is NOT submitted. ARIA does not submit to AI tools: passwords and access credentials; payment data; or the content of the CLIENT’s mailboxes, except for messages that the CLIENT forwards to the support channel as part of a request.
4. Providers. The AI tools used are provided by Anthropic, PBC and by xAI Corp., both based in the United States of America. The list of providers is kept up to date in the SUBPROCESSORS AND INTERNATIONAL DATA TRANSFER clause, and any change to it follows the provisions of that clause.
5. International transfer. Processing by these tools involves an international transfer of data, under art. 33 of Law No. 13,709/2018 (LGPD, the Brazilian General Data Protection Law), carried out to perform the agreement entered into with the CLIENT and subject to contractual security and confidentiality commitments made by the providers.
6. Model training. ARIA does not sell or assign CLIENT data for training artificial intelligence models. The CLIENT acknowledges that the contracted AI providers may, under their own policies, retain and use the submitted content to improve their models, and that ARIA uses the available settings to restrict such use. A CLIENT who does not agree with this processing may exercise the right to object provided for in the Right to object item below.
7. Right to object. The CLIENT may, at any time and at no cost, object to the use of AI tools in the processing of their data, by written request to suporte@ariaserv.com. The objection will be handled within 10 (ten) business days and will apply to subsequent services, not to processing already carried out. In that case, the services remain fully available and are performed without AI support, and the service and maintenance times set out in this instrument may be extended, which does not constitute a breach by ARIA nor entitles the CLIENT to a price reduction.
8. Responsibility for content. Content generated with AI support is reviewed by ARIA before publication. Under the ABOUT THE CONTENT clause, the CLIENT remains ultimately responsible for the accuracy and appropriateness of the content published on their website, and must inform ARIA of any error identified.

To provide the contracted services, ARIA uses service providers (subprocessors) that may process CLIENT data, always under ARIA’s instructions and limited to the purpose of the agreement:

• Hosting of websites, email and databases — Leaseweb Canada Inc. (Canada);
• Encrypted off-site backups — Backblaze, Inc. (United States);
• Transactional email delivery — Postmark / ActiveCampaign (United States);
• Artificial intelligence tools — Anthropic, PBC (United States);
• Artificial intelligence tools — xAI Corp. (United States);
• .br domain registration — NIC.br / Registro.br (Brazil).

ARIA may replace or add providers at any time. The current list is always the one published in this clause: these Terms of Use may be updated periodically and the version in force is the one published on this page, with the date of last update shown at the end.

Because this is a prepaid service, and under the ACCOUNT ACTIVATION clause, payment of each invoice constitutes acceptance of the Terms of Use in force on the payment date, including the list of providers above. A CLIENT who does not agree with the addition or replacement of a provider may choose not to pay the next invoice, in which case the agreement is not renewed, or may request cancellation of the services at any time. In any case, the right to export their data under the DATA PORTABILITY AND EXPORT clause is guaranteed.

The CLIENT acknowledges that ARIA’s hosting infrastructure is located in Canada and that the other providers above are based outside Brazil, so there is an international transfer of data under art. 33 of Law No. 13,709/2018, carried out to perform this agreement and subject to contractual security and confidentiality commitments.

The processing of personal data under this agreement complies with Law No. 13,709/2018 (LGPD, the Brazilian General Data Protection Law), as follows:

1. Roles. With regard to the CLIENT’s registration and billing data, ARIA acts as controller. With regard to the personal data of third parties that the CLIENT enters or receives through the website and mailboxes (customers, contacts, forms), the CLIENT is the controller and ARIA acts as processor, processing the data only according to the CLIENT’s instructions and this agreement.
2. Legal bases and purposes. The processing carried out by ARIA is based on the performance of the agreement and on compliance with legal and regulatory obligations (art. 7, items II and V, of the LGPD) and, as regards fraud prevention and the security of the environment, on legitimate interest (art. 7, IX). The purposes are: to provide and maintain the contracted services; to provide support and maintenance; to bill; to prevent fraud and misuse; and to comply with legal obligations.
3. Retention. Data is kept while the agreement is in force. After termination: website and mailbox data are deleted within 30 (thirty) days, subject to the right to export; backups expire within 30 (thirty) days; registration and tax data are kept for the applicable legal periods.
4. Data subject rights. The CLIENT and data subjects may request confirmation of processing, access, correction, anonymization, portability, deletion and information about data sharing, by email to suporte@ariaserv.com, with a reply within 15 (fifteen) days.
5. Security incidents. If a security incident occurs that may cause significant risk or harm to data subjects, ARIA will notify the CLIENT within 48 (forty-eight) hours of becoming aware of it, stating the nature of the data affected, the data subjects involved, the measures taken and the mitigation recommendations, and will provide the CLIENT with the support needed to notify the ANPD (Brazilian Data Protection Authority) and the data subjects, under art. 48 of the LGPD.
6. CLIENT obligations. The CLIENT is responsible for lawfully processing the personal data it enters or collects through the website, maintaining an appropriate legal basis, publishing its own privacy policy where applicable and handling requests from data subjects for whom it is the controller.

ARIA maintains its own routine of encrypted backups of websites and mailboxes, with 30 (thirty) days of retention, intended for the operational recovery of the services. This routine is a business continuity measure of ARIA and does not replace the CLIENT’s own copies: the CLIENT is advised to keep its own copies of any material it considers essential. ARIA is not responsible for loss of content resulting from any act, omission or deletion by the CLIENT or by anyone who accesses the panel with the CLIENT’s credentials.

The CLIENT has continuous access to its data throughout the term of the agreement and may export it at any time, by its own means, without having to request it:

• Email. Mailboxes are accessible via IMAP. The CLIENT can download, copy or migrate its messages at any time, using the email program of its choice.
• Website content. The published texts and images are available in the media library and in the website admin panel, to which the CLIENT has access.
• Registration data. Upon request to suporte@ariaserv.com, ARIA will provide the CLIENT’s registration data in a readable format, free of charge and within 10 (ten) business days.

ARIA does not provide a copy of the database, source code, theme or infrastructure components of the website: these are elements of ARIA’s platform, not licensed to the CLIENT, and would be of no use outside it.

The CLIENT is advised to keep its own copies of any material it considers essential, especially before cancelling the services.

The content sent or entered by the CLIENT — texts, images, logos, trademarks and documents — remains the exclusive property of the CLIENT. The CLIENT grants ARIA a non-exclusive license, limited to the term of the agreement, to host, reproduce, adapt to the layout and publish this content on the website, and to submit it to the tools described in the USE OF ARTIFICIAL INTELLIGENCE clause, solely to perform the contracted services.

The platform, theme, layout components and source code used are owned by ARIA and are made available to the CLIENT under a license of use during the term of the agreement, with no right to assign, sublicense or move them to another provider.

Any account used to send SPAM will be closed, with or without prior notice.

Domains that advertise through SPAM (spamvertised) or that are listed by ROKSO (www.spamhaus.org) may not be hosted on our servers.

We limit email sending to 40 messages per hour, so that we can maintain the reputation of our IPs.

For the proper operation of the servers and the system, ARIA may:

• Move hosted websites between servers internally, without prior notice, with the resulting change of the IP address of the server hosting the website;
• Change the IP address of any server, without any notice;
• Block domains whose emails are considered SPAM;
• Change/update features or the look of the current website;
• Not provide the Client with FTP access or the source code of the platform, which must always be hosted exclusively with Aria.

The CLIENT must manage the storage limit for messages in its email inboxes. If the limit is exceeded, the excess emails will be lost with no possibility of recovery, and ARIA will not be liable for the loss of the emails.

At ARIA, we are committed to ensuring the security and protection of our clients’ data, in compliance with the provisions of the LGPD (Brazilian General Data Protection Law) and other applicable regulations. ARIA adopts technical and administrative security measures appropriate to the nature of the service, including:

• access control with individual credentials, a password policy and access granted on the principle of least privilege;
• encryption in transit (SSL/TLS) for all access to websites, webmail, the panel and email sending;
• encrypted backups, also kept at a location separate from the production server;
• continuous monitoring, intrusion detection, malware scanning and review of access logs;
• regular application of security updates and patches to the operating systems and software used.

ARIA does not claim to hold ISO 27001 or equivalent certification. We are committed to maintaining and continuously improving our security measures to ensure compliance with data protection regulations and the protection of our clients’ data.

Credentials to access the website panel and the mailboxes are personal and non-transferable.

1. Safekeeping of credentials. The CLIENT is solely responsible for keeping its passwords safe and confidential, as well as for the security of the equipment, browser and software it uses to access the services, including protection against malicious software. The CLIENT is likewise responsible for the access it grants to its employees, contractors or third parties.
2. Misuse. Use of the services with the CLIENT’s credentials is presumed to have been made by the CLIENT. The CLIENT is liable for misuse resulting from compromised credentials — including the sending of unsolicited messages from its account — and for any resulting damages, including to third parties, subject to the ANTI-SPAM POLICY clause.
3. ARIA’s protective measures. ARIA runs automatic routines that check the sending volume of email accounts. If atypical behavior consistent with compromised credentials is identified, ARIA may, without prior notice, change the account password and suspend message sending, notifying the CLIENT afterwards. This measure protects the infrastructure and the other hosted clients, whose email service would be harmed by the loss of reputation of the sending servers, and does not constitute a contractual breach by ARIA nor entitles the CLIENT to a price reduction.
4. Duty to report. The CLIENT must notify ARIA immediately, by email to suporte@ariaserv.com, upon identifying or suspecting the loss, theft, leak or unauthorized use of its credentials, and must change the compromised password.
5. Relationship with ARIA’s obligations. This clause covers the CLIENT’s obligations regarding its own credentials and equipment and does not remove or reduce ARIA’s security obligations set out in the SYSTEM PROTECTION AND SECURITY clause.

Monthly traffic is unlimited for the CLIENT, with no maximum transfer limits per month.

For Website services, we will provide all the technical infrastructure, including the Platform for customization and Hosting. The CLIENT has sole responsibility for the accuracy, copyright and licensing of all content (texts, images, logos and data) published on the website through the admin panel.

Note: The contractor may use illustrative (“sample”) content and images on a temporary basis during the creation phase. The website will be presented in a temporary environment for the CLIENT’s review. Publication on the main domain, with migration or registration, will only take place after approval of the website and payment of the first invoice, at which point the CLIENT confirms that all content displayed is correct and authorized for commercial use.

For Business Email services, we will provide all the infrastructure for our clients, including the Platform for email management, Email Hosting and Webmail, and the CLIENT is responsible for any configuration of alternative email management software.

It is expressly forbidden to use our services in any way that may infringe copyright and/or violate any law in force. The sale and/or promotion of any illegal product or service will result in the immediate cancellation of the account.

Examples of unacceptable material on our plans:

• Web proxy and/or anonymous browsing scripts (anonymizers);
• Unlicensed (pirated) or fraudulent software;
• Websites and forums that distribute or promote cracks/cheats/warez;
• Mirrors (copies of other websites);
• Data repositories, download links and/or file sharing (Shares);
• Affiliate servers;
• Topsites scripts;
• Escrow (financial activities involving deposits held in trust);
• AutoSurf (traffic exchange systems);
• Gambling websites;
• Websites that encourage racism/hatred/fanaticism/pedophilia or that promote pornographic material;
• Websites related to “hacking”;
• Malicious scripts and any kind of website that promotes/advertises illegal activities;

ARIA reserves the right to refuse its services to any individual. Any material we deem incompatible with our terms of use will be removed from our servers, with or without prior notice.

Failing to reply within 48 hours to an email sent by the abuse department may result in the suspension or cancellation of the account.

The CLIENT must manage the storage limit for images and files on its website. If the limit is reached, new uploads will not be allowed. If you need more space, just contact the support team and we will review your needs according to your plan.

To settle any dispute arising from this agreement, the parties choose the Central Court of the judicial district closest to Aria’s domicile, to the exclusion of any other, however privileged it may be.