Terms of Service

By creating an account or using the Service you agree to be bound by these Terms, our Personal Data Processing Policy and our Cookie Policy. If you disagree with any part, you may not use the Service. You contract the Service for the exercise of your professional activity or that of your firm, not as an end consumer; these Terms are therefore a professional business-to-business contract, without prejudice to the benefits we voluntarily grant in Section 3A and to the rules that admit no agreement to the contrary. Your acceptance is recorded with the version of these Terms you accepted, the date, the IP address and the user agent from which you gave it, in an immutable log you can consult at 'My account > Your privacy'. That record is a data message with evidentiary value under Colombia's Law 527 of 1999, Ecuador's Electronic Commerce, Electronic Signatures and Data Messages Law, Article 9 of the Dominican Republic's Ley núm. 126-02 on electronic commerce, documents and digital signatures — which gives them «la misma fuerza probatoria otorgada a los actos bajo firma privada» — and Article 4 of Costa Rica's Ley N° 8454, which gives electronic documents «fuerza probatoria en las mismas condiciones que a los documentos físicos».

When you create an account you must give us accurate, complete and current information, and keep it so. You are responsible for the confidentiality of your credentials and for all activities that occur under your account and under the accounts of the members your firm invites. You must notify us immediately of any unauthorized use. Failure to comply with this section is a breach of the Terms and may lead to suspension or termination of the account under Section 5.

The Service and its original content, features, functionality, source code, design and logos are and will remain the exclusive property of Custodio Legal and its licensors, protected by intellectual property laws and applicable international treaties. What you create with the Service — your matters, your documents, your notes and the drafts you generate — is yours, on the terms of Section 4.

Although you contract the Service for your professional activity and not as an end consumer, we voluntarily grant you the right to undo the purchase of a paid subscription bought through a non-presential transaction. What the term is, which rule of your country recognizes that right and what that rule gives as a minimum is stated by your country's annex, which in no case gives you less than the law of your country recognizes: in Colombia, in Costa Rica and in the Dominican Republic the term we grant is longer than the legal one, and in Ecuador the one in force is the legal one, which is the longest of the four.

What holds the same in all four countries, and is therefore here:

• To exercise it, notify us in writing before the deadline at [email protected] or from 'My practice > My plan'.
• We refund all the money paid, with no deductions or withholdings and through the same payment method, within fifteen (15) calendar days of your notice.
• In Colombia and in the Dominican Republic the right does not apply when the provision of the paid Service already began with your prior and express consent: if you activated the plan and already used features exclusive to it — for example, judicial surveillance of more matters than the free plan admits, or the Artificial Intelligence features above the free allowance — we consider that provision began. This is the exception those two annexes refer to, and it is legitimate because in those two countries the right is one we grant you above the legal one. In Ecuador it does not operate: there the right is given by Article 45 of the Ley Orgánica de Defensa del Consumidor, which does not contemplate it and which, for services, orders precisely that the contract cease immediately — a right the law gives is not one we cut down by contract. The Ecuadorian annex transcribes the whole article. In Costa Rica another exception applies, that of article 73 of the Reglamento to Ley N° 7472 (Decreto Ejecutivo N° 37899): starting to use the plan does not leave you without the right, but the refund reaches only the part of the Service that had not been provided to you before your notice, and you pay proportionally for the part you did receive. The Costa Rican annex transcribes it.

(a) Your content. You retain all rights to the content you upload to the Service. By uploading it you grant us a limited, non-exclusive and revocable license to process and display it, and to keep the text extracted from it and its provenance, to the extent necessary to provide you the Service. We do not keep the original file: it is processed transiently to extract its content and then deleted, as Section 10 of the Personal Data Processing Policy states. You are responsible for ensuring your content does not infringe third-party rights or violate applicable law.

(b) Roles. For the personal data of the platform's users — you and the members of your firm — Custodio Legal is the data controller, and that processing is governed by the Personal Data Processing Policy. For the personal data of third parties that live in the matters you manage — your clients, the opposing parties, witnesses, anyone with an interest in a proceeding — the Firm is the data controller and Custodio Legal is the processor, which processes them on your behalf and under your instructions. This section is the transmission contract required by Article 25 of Colombia's Decree 1377 of 2013 (Article 2.2.2.25.5.2 of Decree 1074 of 2015), by Article 47 of Ecuador's Organic Law on Personal Data Protection (LOPDP) and by Article 30 of the Reglamento to Costa Rica's Ley N° 8968 (Executive Decree N° 37554-JP), under which the processor «solo podrá intervenir en el tratamiento de las bases de datos personales, según lo establecido en el contrato celebrado con el responsable y sus indicaciones». The Dominican Republic's Ley núm. 172-13 defines the processor — whoever processes the data on the controller's behalf, Article 6, paragraph 12 — but does not require a contract between the two: in the Dominican Republic this section holds by agreement between you and us, and not because a rule imposes it.

(c) Subject matter and scope. The engagement covers the storage, text extraction, search, summary, analysis, assisted drafting, judicial surveillance and the other operations the Service performs on the data of your matters, for the sole purpose of providing you the Service, and lasts as long as this contract lasts.

(d) Instructions. We process those data only under your instructions, which are the Service features you and the members of your firm execute, and those you give us in writing at [email protected]. We do not use them for our own purposes, do not disclose them to third parties for purposes of their own, and do not train models with them. If an instruction of yours seems contrary to law, we tell you before executing it.

(e) Authorization warranty. You declare that you hold the authorization of the data subjects, or another legal basis, to process the personal data you upload to your matters — including the sensitive data and the data of children and adolescents a case file may contain — under Articles 6, 7 and 9 of Law 1581 of 2012, Article 12 of Decree 1377 of 2013 and Articles 7 and 8 of the LOPDP. A judicial case file contains such data by the nature of the proceeding; it is the Firm, as controller, that must have obtained the authorization the law requires, and that answers to the data subjects and the authorities for it. We do not ask you for those data nor collect them on our own.

(f) Data subject rights. When a data subject exercises before us a right over data that live in a matter of yours, we inform them that the controller is your firm, forward the request to you within the following two (2) business days and give them your contact details. You answer within the deadlines of your country; we give you the Service's tools to rectify or delete what applies.

(g) Sub-processors. To provide the Service we use the following providers, which process data of your matters on our behalf: Nebius B.V. (the Netherlands; text generation for the Artificial Intelligence features, with Zero Data Retention enabled and with the European Union's adequacy decision in favour of Israel for the inference the provider runs in that country), Voyage AI (United States; vector representations of the text of your documents, with the no-training option enabled), Railway (United States; hosting of the application, the database and its backups), Resend (United States; transactional email), Polar (United States; payments and invoicing, which receives your account data and not the data of your matters), Sentry (United States; technical error monitoring, which receives the path where the error occurred and your internal user identifier; no email, no name and no IP address) and Cloudflare (United States; delivery network and protection of the public site and of access to our internal documentation). Each of those providers incorporates into its terms a data processing agreement that we accept when contracting it. Google is not on this list, and not by oversight: it does not process data of your matters on our behalf or under our instructions, but acts as an independent controller in the two uses the product makes of it -sign-in with your Google account and the public-site Ads tag- so we hold no processor agreement with it. Section 15 of the Personal Data Processing Policy explains it, naming the version of each instrument that governs that relationship. The Personal Data Processing Policy (Sections 9, 10 and 14) says, provider by provider, what is sent to it and under which safeguard. If we change the text generation provider or the jurisdiction the data are transferred to, we raise the version of that Policy and ask you for a new authorization before continuing; for any other new sub-processor we give you thirty (30) days' notice and you may terminate the contract without penalty if you disagree.

(h) Confidentiality. We treat the data of your matters as confidential information covered by your firm's professional secrecy. Our staff are bound by a duty of confidentiality and do not enter your account with your identity: what they can and cannot do to support you is set out in Section 9. This obligation survives termination of the contract.

(i) Security. We apply the technical, human and administrative measures described in Section 5 of the Personal Data Processing Policy and on the security and compliance page: encryption in transit, AES-256-GCM encryption of sensitive fields at rest, access control by role and by firm, audit logging, database backups and security monitoring.

(j) Incidents. If a security incident affecting personal data of your matters occurs, we notify you without delay and at the latest within the two (2) business days following our becoming aware of it, with what we know about its nature, the data affected, the likely consequences and the measures taken, so you can meet your own notification obligations. For the data we are controller of, we inform your country's supervisory authority, where your country has one to present it to, within the term that country's privacy annex states -which also says whether the term is set by a rule or adopted by our own decision-, and the data subject in any case without undue delay.

(k) On termination. When the contract ends, the data of your matters stop being available in the Service and are deleted or anonymized within the ninety (90) days following termination, unless a legal obligation requires keeping them, under Section 11 of the Personal Data Processing Policy, which is the retention policy in force. The records of authorization, audit and data subject requests are kept as proof of compliance. According to what that provider publishes, the data we have sent to the text generation provider are not stored by it after each request is processed, on the terms of Section 21 (h) -which also states what that declaration does not cover and from when it holds.

You may cancel your account at any time from 'My account', and your subscription from 'My practice > My plan' under Section 12. We may terminate or suspend your access to the Service for violation of these Terms with thirty (30) days' prior notice, except in cases of serious violation — illegal use, an attack on the platform or on another firm's data, prolonged non-payment — where suspension may be immediate. You have the right to request a copy of your account personal data under the portability right recognized by the data protection legislation of your country; you may exercise it at any time, even after terminating your account, through the channels of Sections 6 and 7 of our Personal Data Processing Policy. What happens to the data of your matters on termination is stated in Section 4 (k).

To the maximum extent permitted by law, Custodio Legal is not liable for indirect, incidental, special, consequential or punitive damages. Our total liability does not exceed the amount you paid in the preceding twelve (12) months. These limitations do not apply in cases of willful misconduct or gross negligence, or where applicable law expressly prohibits them.

CRITICAL DISCLAIMER – THIRD-PARTY JUDICIAL APIs: Custodio Legal acts as a technology intermediary that queries information systems operated by third parties, such as the Colombian Judicial Branch (Tyba, SAMAI), the Superior Council of the Judicature, the Ecuadorian Judicial Branch (eSATJE/Manticore) and the Poder Judicial de Costa Rica (Sistema de Gestión en Línea and Archivo Judicial). Those systems are operated by independent governmental entities. Custodio Legal does NOT and CANNOT guarantee:

• (i) The continuous availability of such governmental APIs;
• (ii) The accuracy, completeness or timeliness of information published by those entities;
• (iii) The response times of judicial systems;
• (iv) That judicial statuses and updates are reflected in real time.

Accordingly, Custodio Legal is NOT liable for:

• (a) Expiration of procedural deadlines due to failures or unavailability of third-party judicial systems;
• (b) Errors in official information published by governmental entities;
• (c) Changes in governmental API structures or interfaces that temporarily affect the Service.

You are responsible for verifying critical procedural information directly with official sources and for meeting the procedural deadlines established by law. Do not rely exclusively on the system's automated notifications for the computation of legal deadlines.

The Service is offered in Colombia, in Costa Rica, in Ecuador and in the Dominican Republic. These Terms are governed by the law of the country where the Firm is domiciled, and that country's annex declares it by name, together with the personal data protection legislation that applies to it and that country's consumer protection rule. This is a professional contract: those consumer rules apply insofar as they admit no agreement to the contrary and insofar as these Terms expressly grant them to you, such as the right in Section 3A.

The Service is designed for law firms and legal professionals. By using it you declare that you are at least eighteen (18) years old or the age of majority in your country and have the capacity to contract. We do not open accounts for minors. The data of children and adolescents a case file may contain reach the platform inside the matter your firm manages, and are processed under Section 4 (e): it is the Firm, as controller, that must hold the authorization the law requires for them.

Custodio Legal is a legal practice management platform: management of judicial and extrajudicial matters, parties, documents with extracted text, notes, agenda and deadlines, surveillance of the judicial records and the judicial publications of your country according to the plan, Artificial Intelligence features under Section 21, and access through the API and through MCP clients on the plans that include it, under Section 22. The originals you upload are processed transiently to extract their content; we keep the extracted text and the matter's metadata, not the file. We reserve the right to modify, suspend or discontinue features with thirty (30) days' prior notice.

Confidentiality of the case file. We know that what you manage in the Service is covered by the attorney's professional secrecy: Article 28, paragraph 9, of Colombia's Law 1123 of 2007; the Código Orgánico de la Función Judicial in Ecuador; Article 19 of the Code of Ethics of the Bar Association of the Dominican Republic, ratified by Decree núm. 1290 of 1983, which extends professional secrecy to matters known «por intermedio de empleados o dependientes»; and Article 41 of Costa Rica's Código de Deberes Jurídicos, Morales y Éticos del Profesional en Derecho, which requires the attorney to warn «a su personal de apoyo de la confidencialidad de los asuntos» and of the «deber de reserva que los cobija». All our staff are bound to confidentiality over the content of your matters, and access to the Service is separated by firm: no firm sees another's data.

Support access. Our staff do not enter your account or your case files with your identity. The Service has no feature that lets them sign in as you, see your screens as if they were you, or act on your behalf. Support is provided with the information you share with us —what you write to us, the screenshots you send, what we reproduce in our own environment— and with operational logs that contain none of the content of your matters.

What we can do, and we would rather state it precisely: at your firm's request, or to serve a portability request, we can generate a copy of your firm's data —the account, the users, the matters and their sources— and hand it to you. That act is recorded in your own firm's audit log, with who performed it and when, and is visible to you inside the Service.

Availability. We work toward a monthly availability target of 99.5%. It is a service target, not a guarantee: we publish the Service's status and the incidents that affect it, and we give advance notice of scheduled maintenance, which falls outside that calculation. We agree to no credit, discount or liquidated compensation for missing that figure. None of this curtails the rights the law grants you in the event of serious breach, nor does it affect what Sections 6 and 14 expressly preserve in cases of wilful misconduct or gross negligence, nor the claims channel of Section 19.

The processing of your personal data as a user is governed by our Personal Data Processing Policy; by accepting these Terms you also accept it and grant the authorization it describes. The processing of third parties' personal data that live in your matters is governed by Section 4. We comply with the data protection legislation of the four countries where we offer the Service: Law 1581 of 2012 and Decree 1377 of 2013 in Colombia, Ley N° 8968 and its Reglamento (Decreto Ejecutivo N° 37554-JP) in Costa Rica, the LOPDP and its Regulation in Ecuador, and Ley núm. 172-13 in the Dominican Republic.

You agree to:

• (a) Provide truthful and updated information.
• (b) Not use the Service for illegal or unauthorized purposes.
• (c) Not attempt to access systems or data of other firms without authorization.
• (d) Not reproduce, duplicate, copy, sell or resell the Service without written authorization.
• (e) Keep the confidentiality of your access credentials and notify us immediately of any unauthorized use.
• (f) Hold the authorization of the data subjects whose data you upload to your matters, under Section 4 (e).
• (g) Answer for the members you invite to your firm and for the MCP clients you authorize, under Section 22.

Subscriptions are billed in advance, for monthly periods, according to the selected plan. Each plan is billed in the currency your country's annex declares and the pricing page publishes for it; absent an annex, in United States dollars. The price of each plan is the one published on that page and the one you see on the payment screen before confirming the purchase. The subscription renews automatically at the end of each period for an equal period and at the price in force, unless you cancel it before. You may cancel it at any time from 'My practice > My plan', which takes you to our payment provider's portal; the cancellation takes effect at the end of the period already paid and until then you keep access to the plan. Apart from the withdrawal right of Section 3A there is no refund of the current period. Prices may change with thirty (30) days' prior notice; the new price applies from the next billing period, and if you disagree you may cancel before it takes effect. Non-payment may lead to suspension of the Service after a ten (10) day grace period. You have the right to an electronic invoice under the tax legislation of your country.

We provide the Service with reasonable diligence. Apart from the express warranties in these Terms, the Service is provided 'as is', without implied warranties of merchantability or fitness for a particular purpose, to the extent the law admits. We do not guarantee that the Service will be uninterrupted or error-free. These exclusions do not affect the rights the law grants you without admitting agreement to the contrary.

You agree to indemnify and hold harmless Custodio Legal from any claim arising from:

• (a) Your use of the Service in violation of these Terms.
• (b) Content you upload that infringes third-party rights.
• (c) Illegal activities conducted through your account.
• (d) The processing of third parties' personal data in your matters without the authorization or legal basis Section 4 (e) requires of you.

This obligation does not apply in cases of our willful misconduct or gross negligence, nor does it limit the rights the law grants you without admitting agreement to the contrary.

We may modify these Terms. We notify you of substantial changes by email and/or through a prominent notice on the platform at least thirty (30) days in advance. Continued use of the Service after the effective date constitutes acceptance of the modified Terms. If you do not accept the changes, you may cancel your account before they take effect. The version of these Terms in force is 0.0.11, effective September 10, 2026. Version 0.0.11 corrects four clauses that claimed more about us than the Service does, and none of the four widens what you grant. Section 4 (a) no longer asks you for a license to store your content: it asks for the one that matches what actually happens -to process it, display it and keep the extracted text and its provenance- because the original file is not kept, which is what Section 10 of the Personal Data Processing Policy and the security page already said. Section 4 (g) takes Google out of the sub-processor list: it does not process data of your matters on our behalf and we hold no processor agreement with it, as version 0.0.7 of that Policy corrected a day ago, and refers to its Section 15; in the same list, Sentry stops being described as «without personal data» and says what it receives: the path of the error and your internal user identifier, with no email, name or IP address. Section 4 (k) stops asserting as a fact of our own that the text generation provider does not store what we send it, and attributes it to what that provider publishes, on the terms of Section 21 (h). And Section 21 (f) narrows the Standard Contractual Clauses to the text generation provider, the only one whose agreement incorporates them, and names the destination as the Policy names it: the European Union, Israel or the United States. No right of yours shrinks and no annex moves. It replaces 0.0.10, of September 10, 2026. Version 0.0.10 completes with the Dominican and Costa Rican rules four lines that enumerated only two countries from before there was a third: Section 1 names Article 9 of Ley núm. 126-02 and Article 4 of Ley N° 8454 for the evidentiary value of your acceptance; Section 4 (b) names Article 30 of the Reglamento to Ley N° 8968 and says that Ley núm. 172-13 defines the processor but does not require the contract, so in that country this section holds by agreement between the parties; Section 9 names Article 19 of the Dominican Code of Ethics and Article 41 of the Costa Rican Código de Deberes; and Section 15 adds the two arbitration venues of those countries. No right of yours and no obligation of ours changes, in any of the four countries, and no annex moves. It replaces 0.0.9, of 10 September 2026. Version 0.0.9 adds Costa Rica: the Service is now offered in four countries, Section 7 and Section 10 also name Ley N° 8968 and its Reglamento, the disclaimer of Section 6 and the force majeure of Section 14 name the two Costa Rican judicial sources —the Sistema de Gestión en Línea and the Archivo Judicial of the Poder Judicial de Costa Rica— and Section 3A notes the exception to withdrawal that applies there, article 73 of the Reglamento to Ley N° 7472. No right of yours and no obligation of ours changes in the other three countries, and no annex moves. It replaces 0.0.8, of 9 September 2026. Version 0.0.8 changes no right of yours and no obligation of ours: it splits the same text between this trunk and your country's annex. The withdrawal right of Section 3A, the governing law of Section 7, the incident notice term of Section 4 (j) and the transfer safeguard of Section 21 (f) were stated twice, once here with the rules of two countries —the Dominican Republic appeared only in its annex— and once in each country's annex. The trunk now states what held the same in the three countries offered at the time and refers to the annex, and the annex states your country's term, rule and legal minimum. The fifteen (15) calendar days to withdraw and the fifteen for us to refund you are still the same. It replaces 0.0.7, of 9 September 2026, which took the currencies out of the trunk: the general rule of Section 12 no longer says that Colombia pays in pesos and everyone else in dollars -which stopped being true when the Dominican Republic began billing in Dominican pesos- but that each plan is billed in the currency your country's annex declares, and in United States dollars where there is no annex. For the same reason Section 22 (c) no longer quotes per-country top-up figures: the minimum amount and how many AI credits each unit of your currency buys are published on the pricing page and shown on the top-up screen before you pay. Neither the currency you are charged in nor your plan's price changes with this version. It replaces 0.0.6, of September 2026, 0.0.5, 0.0.4 and 0.0.3, of September 2026, 0.0.2, of August 2026, and 0.0.1, of February 2026. Version 0.0.6 withdrew support access through an impersonation session —our staff can no longer enter your account with your identity, because that feature no longer exists in the Service—, states precisely the only support act that reaches the content of your matters (the copy of your firm's data, audited under your own firm and visible to you), and declares the 99.5% monthly availability as a service target rather than a guarantee, with no credit or liquidated compensation and without curtailing the rights the law grants you. Version 0.0.5 declared the professional nature of the contract, identified the party, granted the withdrawal right, incorporated the processing-on-behalf conditions of Section 4, corrected the allowances and prices, left arbitration to your choice and withdrew the one-year period to claim. Each version applies until the next one replaces it, and the one you accepted is recorded under Section 1.

We first try to resolve any dispute directly, within thirty (30) days after one party communicates it in writing to the other. If we do not succeed, you choose between going to the ordinary courts of your domicile or submitting the dispute to arbitration: in Colombia, before the Arbitration and Conciliation Center of the Bogotá Chamber of Commerce, under Law 1563 of 2012; in Ecuador, before the Mediation and Arbitration Center of the Quito Chamber of Commerce, under the Arbitration and Mediation Law; in the Dominican Republic, before the Corte de Arbitraje y Resolución Alternativa de Conflictos (CRC) of the Cámara de Comercio y Producción de Santo Domingo, under Ley núm. 489-08 on commercial arbitration, whose Article 2 admits arbitration of disputes «sobre materias de libre disposición y transacción»; in Costa Rica, before the Centro de Conciliación y Arbitraje of the Cámara de Comercio de Costa Rica, under Ley N° 8937, the Ley de Arbitraje, and Article 2 of Ley N° 7727, which recognises the right to resort to arbitration for «diferencias patrimoniales de naturaleza disponible». Arbitration is never mandatory for you. None of this limits your right to file complaints with the Superintendence of Industry and Commerce (SIC) in Colombia, with the People's Ombudsman or the Personal Data Protection Superintendency (SPDP) in Ecuador, or with the competent authority of your country.

Custodio Legal is a software platform designed to automate administrative and document management tasks in law firms. The use of the platform, its judicial tracking features, document generation, synchronization with governmental APIs, deadline computation or any other feature does NOT constitute, under any circumstances, legal advice, legal representation, professional attorney counsel or an attorney-client relationship. Procedural, substantive and strategic decisions are the exclusive responsibility of the legal professional using the platform. Custodio Legal assumes no fiduciary duty and no liability arising from your legal decisions. No automation of the platform replaces the attorney's professional judgment.

Custodio Legal is not liable for failures or delays in the provision of the Service caused by circumstances beyond its reasonable control, including without limitation:

• (a) Failures, interruptions, unscheduled maintenance or unilateral changes in the technology systems of governmental entities (including the Colombian Judicial Branch, SAMAI, Tyba, Ecuador's Judicial Branch, SATJE/Manticore, and the Poder Judicial de Costa Rica, Sistema de Gestión en Línea and Archivo Judicial);
• (b) Natural disasters, pandemics, acts of terrorism or war;
• (c) Power, internet or telecommunications infrastructure failures affecting cloud service providers;
• (d) Changes in legislation or regulation requiring technical modifications to the platform;
• (e) Cyberattacks by third parties on our providers' infrastructure.

If a force majeure event lasts more than thirty (30) calendar days, you may suspend your subscription without penalty until the Service is restored.

You may submit any claim about the Service or these Terms to [email protected]. We answer within the following fifteen (15) business days. The time limits for bringing legal actions are those set by applicable law; these Terms do not shorten them.

If any provision of these Terms is found invalid or unenforceable, the remaining provisions remain in effect with the minimum adjustments necessary to preserve the intent of the parties. These Terms, together with the Personal Data Processing Policy and the Cookie Policy, are the entire agreement between the parties regarding the Service and supersede any prior agreement, oral or written. Failure to exercise a right does not imply its waiver. No oral representation by employees or agents of Custodio Legal constitutes a warranty or a condition of the contract. These Terms are executed in Spanish; the English version is published for your convenience and, in case of conflict, the Spanish version prevails. For inquiries: [email protected].

Custodio Legal includes Artificial Intelligence features (currently: matter summary, deep analysis, document drafting and questions with citations over your documents), optional and subject to the following conditions:

• (a) NATURE OF OUTPUT: AI-generated results are administrative support material. They are NOT, under any circumstances, legal advice, professional opinion or a substitute for the attorney's judgment (reinforcing Section 17).
• (b) VERIFICATION OBLIGATION: You are responsible for reviewing, validating and verifying every AI output before using it in any professional, contractual or procedural action. AI may produce errors, omissions, inaccuracies or incorrect statements ('hallucinations').
• (c) MONTHLY AI CREDIT ALLOWANCE: AI features are consumed against a monthly allowance of AI credits included in your plan: 750,000 on Free, 5,250,000 on Solo, 12,000,000 on Pro, 22,500,000 on Max and 12,000,000 per seat on Teams, which is contracted from two (2) seats. One AI credit equals one (1) equivalent token of the provider, which is the unit the Service measures consumption in and the one you see on the pricing page and in the application. The equivalent token is not the provider's raw token: an operation executed on a more expensive model draws it down in proportion to that model's public rate, so the same allowance goes further on lighter models than on heavier ones. The allowance renews with each calendar month, and what you do not consume in one month does not roll over to the next. Once it runs out, AI stops: there is no automatic overage charge and no consumption beyond the allowance. To keep using AI within the same month you may buy a pay-what-you-want top-up, charged in the same currency your subscription is billed in (Section 12). The minimum amount and how many AI credits each unit of that currency buys are published on the pricing page, currency by currency, and you see them on the top-up screen with the total in AI credits before paying; that is the rate in force. Purchased AI credits do not expire and carry over from one month to the next until they are spent. AI credits consumed by already-executed operations are non-refundable, except for a verified failure attributable to Custodio Legal.
• (d) LIMITS AND RATE LIMITING: We may apply reasonable usage limits to prevent abuse, protect the stability of the Service and control infrastructure costs. Those limits are communicated on the pricing page or in the AI settings.
• (e) PROHIBITED USES: You agree NOT to use the AI features to: (i) generate illegal, defamatory, discriminatory content or content that infringes third-party rights; (ii) process third parties' personal data without valid authorization from the data subject or an applicable legal basis; (iii) attempt to extract, re-identify or reverse-engineer information about other firms or the model; (iv) automate mass submissions, scraping or evasion of usage limits; (v) generate documents intended to deceive judicial or administrative authorities. Non-compliance may result in immediate suspension of AI access and, in serious cases, termination of the account under Section 5.
• (f) DATA SENT TO PROVIDER: By executing an AI operation, you expressly authorize the international transfer of the necessary data to our AI providers under the conditions described in the Personal Data Processing Policy (Sections 9, 10 and 14). Today text generation is provided by Nebius B.V., a company domiciled in Schiphol, the Netherlands, which operates the Nebius Token Factory service; embeddings are provided by Voyage AI, in the United States; and Anthropic (United States) and JINGSHENG HENGXING TECHNOLOGY PTE. LTD. (Singapore, the z.ai service) are registered as alternate text generation providers that receive none of your data today. The provider declares that it runs inference in the European Union, in Israel or in the United States depending on the model; which safeguard backs each of those destinations under your own law is stated by your country's privacy annex. Towards the text generation provider, and only towards it, the transfer further relies on the Standard Contractual Clauses its data processing agreement incorporates and on this authorization of yours; the other destinations of Section 4 (g) rely on whatever your country's annex declares, which for two of them says expressly that the Clauses are not the basis. If we change the text generation provider or the jurisdiction your data are transferred to, we raise the version of the Personal Data Processing Policy and ask you for a new authorization before continuing. For the summary, the analysis and the drafting we do not send file attachments; for the questions with citations (Q&A) we do send the content of the documents of the selected matter. We never send data from matters other than the selected one.
• (g) AVAILABILITY: AI features depend on third-party services. Custodio Legal does not guarantee uninterrupted availability and is not liable for outages, model changes or price changes by such providers that temporarily impact the Service. In case of extended unavailability (more than 72 continuous hours), we grant AI credits for the portion of the monthly allowance the outage prevented you from using.
• (h) NO-RETRAINING CLAUSE: We have Zero Data Retention enabled on our organization with the text generation provider as of 4 September 2026. According to what it publishes, with that option your inputs and outputs are not stored after each request is processed, are not used for speculative decoding, and are not used to train, fine-tune or improve any model. It is a statement published by the provider and not a control we have audited; it operates going forward and not over submissions made before that date, to which the default processing of its terms of service applied; and its published documents do not say whether it reaches abuse-detection records or responses delivered as a stream. The embeddings provider applies the opt-out we have active, which prevents it from using your content to train future models. The Personal Data Processing Policy (Section 14 (iii) and (iv)) says so in the same detail, and with the same caveat: we hold no separately signed contract today and no certifications audited by us, only the instruments the provider itself publishes and incorporates into its terms.
• (i) FEATURE EVOLUTION: AI features may change, expand or be retired. We notify material changes at least thirty (30) days in advance.
• (j) WARRANTY EXCLUSION: To the maximum extent permitted by law, AI features are provided 'as is', without warranty of accuracy, fitness or freedom from errors. Responsibility for using the outputs lies solely with the Firm.

On the plans that include it, your firm may authorize an Artificial Intelligence client compatible with the MCP protocol to connect to the Service through OAuth 2.1, with the consent an authorized member of the firm grants on the authorization screen. The conditions are these: (a) the client only reads information and prepares actions; every action that modifies your firm's data requires a person to approve it within the Service session, and no tool can write without that approval; (b) the Firm answers for the clients it authorizes, for what that client does with the data it reads, and for the model providers that client uses, which are not sub-processors of ours; (c) the client may revoke its credentials at any time through the protocol's revocation endpoint, and you may ask us in writing at [email protected] to revoke the authorization of any client, which we attend without delay; (d) Sections 17 and 21 apply to everything an MCP client produces with data from the Service.

For firms domiciled in Colombia, these Terms are governed by Colombian law, including the personal data protection legislation: Law 1581 of 2012 and Decree 1377 of 2013. This is a professional contract; the consumer protection rules of Law 1480 of 2011 apply insofar as they admit no agreement to the contrary and insofar as these Terms expressly grant them to you.

Firms domiciled in Colombia pay in United States dollars (USD): that is the currency the pricing page publishes this country's plans in and the currency the checkout charges. This is the currency the billing Section of the Terms refers to this annex: the trunk names none, and what is declared here is what makes it concrete for Colombia. The published price is the total price: it is what gets charged, with no charges of ours added afterwards.

The pricing page may show, below the dollar price, an approximate reference in Colombian pesos. That reference is informative and is not the price: it is there so you can size the cost, not to set what you are charged. The price is the dollar figure, and it is the only one that binds you. The pricing page states the rate and the date the reference was computed with.

The charge is made by the payment processor in dollars. The conversion into pesos is made by your bank or your card issuer, on the day of the charge, at the rate that issuer applies that day and with whatever charges it levies for an international transaction. Neither that rate nor those charges are ours, we do not set them and we cannot anticipate them: what you see on your statement may differ from the reference the pricing page showed. We promise you no exchange rate.

AI credit top-ups are charged in that same currency, with the minimum amount and the AI-credits-per-dollar rate published on the pricing page and shown on the top-up screen before you pay.

Although you contract the Service for your professional activity and not as an end consumer, we voluntarily grant you the withdrawal right that Article 47 of Law 1480 of 2011 recognizes for consumers, and we grant it to you for a longer term than the legal one.

If you purchased a paid subscription through a non-presential transaction, you may withdraw within fifteen (15) calendar days from the formation of the contract. The term of Article 47 is five (5) business days counted from the formation of the contract when a service is provided: ours is longer, and that is why it is ours and not a transcription of the rule.

To exercise it, notify us in writing before the deadline at [email protected] or from 'My practice > My plan'. We refund all the money paid, with no discounts or withholdings and through the same payment method, within fifteen (15) calendar days of your notice; Article 47 allows up to thirty (30) calendar days for that refund, and here too the term we impose on ourselves is half of it.

This right does not apply when the provision of the paid Service already began with your prior and express consent, which is the exception in paragraph 1 of Article 47 of the same law.

For firms domiciled in Costa Rica, these Terms are governed by Costa Rican law, including Ley N° 8968 on the protection of the person with regard to the processing of their personal data and its Reglamento, Decreto Ejecutivo N° 37554-JP. This is a professional contract between a firm and its software provider; the consumer protection rules of Ley N° 7472, on competition promotion and effective consumer defence, apply to whatever does not admit agreement to the contrary and to whatever these Terms expressly grant you, such as the right of withdrawal below.

Disputes arising from these Terms are submitted to the Costa Rican courts.

What concerns your personal data has its own route as well. Ley N° 8968 created the Agencia de Protección de Datos de los Habitantes (PRODHAB) as the supervisory authority -its article 15 creates it as a body of maximum deconcentration attached to the Ministerio de Justicia y Paz-, and its Reglamento shows it resolving between data subject and controller: when we disagree about whether a request of yours is abusive, article 21 requires us to raise the matter with PRODHAB, which resolves it definitively within the following ten business days.

How a complaint before PRODHAB works, now with the articles in front of it. Article 24 of Ley N° 8968 gives the complaint to "cualquier persona que ostente un derecho subjetivo o un interés legítimo" who considers that a database, public or private, is acting against the rules or the principles of that law. Article 25 sets the procedure: once the complaint is received we are given three business days to state whether the charges are true and to file our evidence, under oath, and failing to file that report means "se tengan por ciertos los hechos acusados"; PRODHAB may require any information it needs, inspect our databases on site and order interim measures, and must issue the final decision no later than one month after the complaint was filed. Against that decision there is a request for reconsideration within the third day, resolved within the eight days following its receipt. Article 26 states what is ordered if you are right -the immediate deletion, rectification, addition or clarification of the data, or barring its transfer or disclosure-, and article 27 lets the Agency open a sanctioning procedure of its own motion under the ordinary procedure of the Ley General de la Administración Pública. Articles 58 to 72 of the Reglamento develop that same rights protection procedure with the same numbers: service of charges within three business days (article 67), final decision within one month from when the admission of the complaint becomes final (article 69), and reconsideration within the third business day, resolved within the eight business days that follow (articles 71 and 72).

Complaining to PRODHAB does not take away the Costa Rican judicial route, nor the other way round.

Firms domiciled in Costa Rica pay in United States dollars (USD), which is the currency in which the pricing page publishes this country's plans and the currency the checkout charges. This is the currency the Billing Section of the Terms refers to this annex: the trunk names none, and what is declared here is what makes it concrete for Costa Rica.

Costa Rica is not dollarised and the colón is its legal tender: what this annex says is which currency you pay us the subscription in, not which one you invoice your own clients in. A Costa Rican firm never pays in another currency, and while there is no published dollar price for this country's plan, the purchase is not offered rather than charged in another currency. The AI credit top-up is charged in that same currency, with the minimum amount and the rate the pricing page publishes and that you see on the top-up screen before you pay.

On taxes, this is what we can tell you with certainty and nothing more. Costa Rica levies 13% VAT on cross-border digital services, and resolución N° MH-DGT-RES-0036-2025 of the Dirección General de Tributación puts that collection on your card issuer: its article 17 requires it to apply the tax when the transaction's description contains one of the words on a list of providers the Ministerio de Hacienda publishes on its website, and which the Tax Administration may change without issuing a new resolution, giving the banks three business days' notice.

If that were to happen with this subscription, the charge is made by your issuer, appears on your statement and not on our invoice, and the dollar price you see published does not include it. We assert neither that it applies nor that it does not: it depends on that list, and as of the date of this review we could not consult it, because Hacienda's site does not answer requests originating outside Costa Rica. We would rather tell you that than assume it one way or the other.

Costa Rica recognises a right of withdrawal, and both texts that make it up are worth reading. Article 40 of Ley N° 7472 grants it in door-to-door sales -those made outside the merchant's premises- for "un plazo de ocho días contados a partir de su perfeccionamiento". What brings electronic commerce inside is the Reglamento to that law, Decreto Ejecutivo N° 37899: its article 75 says that "a las transacciones realizadas mediante comercio electrónico les aplicará lo dispuesto en el artículo 40 de la Ley 7472 y el presente reglamento", that withdrawal is exercised through the same medium by which you accepted, and that the refund goes through the same means of payment. Its article 72 sets the term at eight business days from the completion of the sale, and its article 75 gives us eight calendar days to return your money, from the day after your notice.

And one limitation that is the rule's own and not ours: article 73 of the same Reglamento says that "en la venta de servicios, el retracto sólo procederá en el tanto éstos no se hubieren prestado efectivamente", and that where services were agreed in instalments "el retracto sólo alcanzará la parte no realizada antes del recibo del aviso de rescisión, debiendo el comprador pagar proporcionalmente por la parte recibida". A subscription you already used during the period is withdrawn as to the unconsumed part, and you pay pro rata for what you did use.

On top of that, what we grant you by contract is the right in Section 3A of the trunk, the same we give in every other country: fifteen (15) calendar days from the purchase to undo a paid subscription acquired remotely. That term is wider than the Costa Rican statutory one and that is why we keep it; where the Costa Rican rule is more favourable to you -the refund through the same means of payment, and its eight calendar days to make it- the rule prevails. To exercise it, tell us in writing before the term expires at [email protected] or from 'My practice > My plan'. The exception that governs here is the one in Costa Rican article 73, not the one Section 3A of the trunk describes for Colombia and for the Dominican Republic: starting to use the plan does not leave you without the right; what it does is limit the refund to the part of the service that had not been rendered to you before your notice, and you pay pro rata for the part that had.

The trunk's disclaimer about third party judicial APIs also covers the Costa Rican sources: the Sistema de Gestión en Línea and the Archivo Judicial of the Poder Judicial de Costa Rica, which are the ones Custodio Legal queries to follow a case file by its number.

And it also covers a third source that is not the Judiciary's: La Gaceta, the official gazette the Imprenta Nacional prints and publishes, and where the Boletín Judicial lives — the place the Judiciary publishes its edicts since Acuerdo 18-2023 folded it in.

Five warnings specific to these sources, and that is why they are here and not in the trunk.

The first: the Sistema de Gestión en Línea services are an internal portal interface, with no published contract and no committed version. They may change shape or address without prior notice, and that is not a failure of ours. Reading the status of a case file takes two chained calls, and if the second changes, what you will see is the file without its detail until we adjust.

The second: the Poder Judicial de Costa Rica publishes neither terms of use nor a robots.txt for these services. We measured that on September 10, 2026 and we say it as it is: there is no written permission to invoke and no written prohibition we are breaching. We query as a person queries, at a volume bounded by your plan.

The third: the search by party name is not of the live docket but of the Archivo Judicial, which returns case files already transferred to the archive. It is a historical search and must be read as such: that a firm or a person does not appear there does not mean they have no active proceedings.

The fourth: Boletín Judicial edicts are matched by case file number. The Service downloads La Gaceta's daily issue, isolates the notices and keeps only those printing the number of a case file you already watch, with the issue's date and link. A notice that prints no case file number is matched against nothing, and one printing somebody else's is not kept: La Gaceta publishes third parties' personal data by legal mandate, and the Service neither archives the issue nor indexes other people's notices.

The fifth: La Gaceta is published not by the Judiciary but by the Imprenta Nacional, another institution with its own site and its own availability. The judicial portal answering does not mean the day's issue is published, and La Gaceta does not come out on Saturdays, Sundays or public holidays: that is why the Service also looks at the previous day's issue.

What the Service shows of a Costa Rican case file is what those sources publish, when they publish it. Valid service of process remains what the court performs through the means Costa Rican law establishes, and not a Custodio Legal alert.

For firms domiciled in the Dominican Republic, these Terms are governed by Dominican law, including Ley núm. 172-13 on the comprehensive protection of personal data. This is a professional contract; the consumer protection rules of Ley núm. 358-05 apply to the extent they do not admit agreement to the contrary and to the extent these Terms expressly grant them to you.

Disputes arising from these Terms are submitted to the Dominican courts. For the hábeas data action, Ley núm. 172-13 itself sets jurisdiction in its article 20: the judge of the defendant's domicile.

Firms domiciled in the Dominican Republic pay in United States dollars (USD): that is the currency the pricing page publishes this country's plans in and the currency the checkout charges. This is the currency the billing Section of the Terms refers to this annex: the trunk names none, and what is declared here is what makes it concrete for the Dominican Republic. The published price is the total price: it is what gets charged, with no charges of ours added afterwards, and it is the same whatever means of payment you use.

The pricing page may show, below the dollar price, an approximate reference in Dominican pesos. That reference is informative and is not the price: it is there so you can size the cost, not to set what you are charged. The price is the dollar figure, and it is the only one that binds you. That reference is computed with the spot market reference exchange rate published by the Banco Central de la República Dominicana, on the date the pricing page itself states.

The charge is made by the payment processor in dollars. The conversion into Dominican pesos is made by your bank or your card issuer, on the day of the charge, at the rate that issuer applies that day and with whatever charges it levies for an international transaction. Neither that rate nor those charges are ours, we do not set them and we cannot anticipate them: what you see on your statement may differ from the reference the pricing page showed. We promise you no exchange rate.

AI credit top-ups are charged in that same currency, with the minimum amount and the AI-credits-per-dollar rate published on the pricing page and shown on the top-up screen before you pay.

Ley núm. 358-05, the General Consumer Protection Law, grants no single-term withdrawal right for distance contracting. What its article 62 -"Ventas indirectas y a domicilio", which reaches contracting done outside the provider's establishment or by telephone, email, digital medium, internet or any analogous medium- requires the provider to allow are two minimum periods: a reflection period of at least three (3) business days before delivery of the good or performance of the service (letter f), and a trial period of at least seven (7) business days before return of the good or suspension of the service contract (letter g). We grant you by contract a right broader than both, the same one we give in the other countries: if you bought a paid subscription remotely, you may undo it within the fifteen (15) calendar days following the purchase. To exercise it, tell us in writing before the deadline at [email protected] or from 'My practice > My plan'. We return all money paid, by the same means of payment, within the fifteen (15) calendar days following your notice. As in the other countries, this right does not apply where performance of the paid Service already began with your prior and express consent -if you activated the plan and already used features exclusive to it-, which is the exception the trunk's Section 3A describes.

The trunk's disclaimer about third-party judicial APIs also reaches the Dominican sources: the public Consulta Pública de Casos and hearing roll services of the Poder Judicial de la República Dominicana, which are the ones Custodio Legal queries to follow a case file by its Número Único de Caso (NUC).

Two warnings specific to this source, which is why they are here and not in the trunk. The first: those services are not published under a Poder Judicial domain but on third-party infrastructure it contracted, so their address may change without prior notice and without that being a failure of ours. The second: the Poder Judicial de la República Dominicana publishes no edicts or procedural notices, which is what the Service watches in other countries. What it does publish, and what the Service reads instead, is the Rol Nacional de Audiencias: the country's hearing agenda, with its court, its courtroom, its modality and its status. It is not an edict and does not replace one -Dominican electronic service of process goes to the lawyer's inbox, behind an authentication the Service does not cross- so what you will see from this channel are hearings, not notifications.

What the Service shows of a Dominican case file is what those sources publish, when they publish it. Valid service of process remains the one the court performs by the means Dominican law provides, and not a Custodio Legal notice.

For firms domiciled in Ecuador, these Terms are governed by Ecuadorian law, including the personal data protection legislation: the Organic Law on Personal Data Protection (LOPDP) and its General Regulation (RGLOPDP). This is a professional contract; the rules of the Organic Consumer Defense Law apply insofar as they admit no agreement to the contrary and insofar as these Terms expressly grant them to you.

Firms domiciled in Ecuador pay in United States dollars (USD), which is the country's legal tender, the currency the pricing page publishes this country's plans in and the currency the checkout charges. This is the currency the billing Section of the Terms refers to this annex: the trunk names none. AI credit top-ups are charged in that same currency, with the minimum amount and the AI-credits-per-dollar rate published on the pricing page and shown on the top-up screen before you pay.

For firms in Ecuador the return or exchange right recognized by Article 45 of the Ley Orgánica de Defensa del Consumidor applies, in the wording given to it by the First Amending Provision, numeral 5, of the Ley Orgánica para Defender los Derechos de los Clientes del Sistema Financiero Nacional y Evitar Cobros Indebidos y Servicios No Solicitados (Supplement to Official Register No. 1 of 11 February 2022, p. 18). The article reads, in full, in the Spanish it was published in:

«Artículo 45.- Procedimiento de Devolución o Cambio.- El consumidor que adquiere bienes o servicios por cualquier medio, gozará del derecho de devolución o cambio, el mismo que deberá ser ejercido dentro del término de quince (15) días posteriores a la recepción del bien o servicio, siempre y cuando lo permita su naturaleza y el estado del bien sea el mismo en el que se lo recibió. En el caso de servicios, el derecho de devolución se ejercerá mediante la cesación inmediata del contrato de provisión del servicio. No se entregará notas de crédito, bienes o servicios compensatorios, por el valor pagado.»

The term is fifteen (15) días de término from receiving the service. "Término" means business days, so this period is longer than the fifteen (15) calendar days the Colombian and Dominican annexes grant: here we do not improve on the law, we apply it. Nor does it depend on your having contracted at a distance: the article covers acquisition by any means.

The exception Section 3A of the trunk describes does not apply in Ecuador. Article 45 does not carry it: within the term, the only conditions it sets are that the nature of the good or service allows it and that the good is in the same condition in which it was received. And for services it says the opposite of excluding them for having begun — it orders that the right be exercised by immediately ceasing the service provision contract, which is a service already under way. Having activated the plan and used its features does not take the right away from you.

To exercise it, tell us in writing before the term expires at [email protected] or from 'My practice > My plan'. Once exercised, the subscription ceases immediately and we refund all the money paid, through the same payment method, within the fifteen (15) calendar days following your notice. We do not refund it in credit notes or in compensatory goods or services, which is what Article 45 itself forbids.