Terms

Last updated: 7 November 2026.

This is an English translation of the Portuguese page at www.colaai.co/termos, provided for convenience. If the two differ, the Portuguese version prevails.

This page brings together all of Cola AI's legal documents: the Terms of Use, the Privacy Policy, how to delete your data, the notice on WhatsApp and the AI assistants, and the rules for credits and payments. By using Cola you agree to all of them. Questions: hi@colaai.co.

Terms of use

1. Who we are

Cola AI («Cola», «we») is operated by TINYCO TECNOLOGIA E SOLUCOES DE PAGAMENTO LTDA, CNPJ 57.331.565/0001-79, with its registered office at Rua Papa João Paulo II, 114, Centro, Caxambu – MG, CEP 37440-000, Brazil. We answer at hi@colaai.co and our website is www.colaai.co. These terms govern the use of the Cola service over WhatsApp and through the web app.

2. The service

Cola is a platform for managing construction works and projects. Over WhatsApp and on the web, it stores and organizes a team's documents, photos, audio, floor plans, tasks, approvals, payments, meetings and site notebooks, and lets the team share parts of them with clients and suppliers. Gabi and Cola's other assistants are artificial intelligence systems that read what you send and answer on your behalf and on your team's.

3. Account and access

• Your account is your WhatsApp number. You sign in with a code sent to that number and give your first and last name. Keep control of your number and your device: whoever has access to them has access to your account.
• An office is a company's or a team's account on Cola. It is created by the person who manages it, who invites members, clients and suppliers and decides what each of them sees. Invitations are sent over WhatsApp and accepted by the invited person.
• You are responsible for what happens in your account and for keeping your details correct.
• The service is intended for people over 18 and for professional use.

4. Acceptable use

You may not use Cola for illegal activities, to send offensive or misleading content or content that infringes the rights of others, to send unsolicited bulk messages, to try to access other offices' data, or to interfere with the service. We may suspend accounts that break these rules.

5. What you send

• Everything you send to Cola (messages, photos, documents, audio, floor plans, locations) remains yours. You give us a limited licence to store, process, transcribe, index and show that content to your office and to the people you authorize, only to provide the service.
• You warrant that you have the right to send that content and to share the third-party data it contains (names, phone numbers, documents of clients, suppliers and employees). For that data, your office is the controller and Cola is the processor, under Brazil's General Data Protection Law (LGPD).
• We do not use your content to train artificial intelligence models.

6. Artificial intelligence

The answers of Gabi and the other assistants are generated automatically by AI models. They may contain errors, omissions or misreadings of documents, floor plans, amounts and deadlines. Check the information before acting on it. Cola does not give engineering, legal, accounting or financial advice, and does not replace the professional responsible for the work.

7. Credits and payments

Use of the assistants is paid for with credits, as set out in the «Credits and payments» section of this page.

8. Intellectual property

The software, the Cola AI brand, the texts, the interfaces and Cola's materials are ours or licensed to us. You may not copy them, resell them or create derivative products without written permission.

9. Availability and changes

We work to keep the service available, but it may be interrupted by maintenance, third-party failures (WhatsApp, cloud providers, AI providers) or force majeure. We may change, add or remove features. We will give reasonable notice when a change removes something essential.

10. Limitation of liability

To the extent permitted by law, Cola is not liable for indirect damages, lost profits, loss of data caused by third parties, or decisions made on the basis of the AI assistants' answers. Our total liability for any claim is limited to the amount you paid Cola in the 12 months before the event. Nothing in these terms reduces the rights that Brazilian law guarantees to consumers.

11. Closing your account

You can close your account at any time by writing to hi@colaai.co; to delete your data as well, follow the Data deletion section. We may close or suspend access if these terms are breached or after a long period of inactivity, with notice when possible. After closure, data is handled as described in the Privacy Policy.

12. Changes to these terms

We may update these terms. The current version is always on this page, with its update date. Relevant changes will be announced over WhatsApp or in the app. Continued use after the notice means you agree.

13. Governing law and jurisdiction

These terms are governed by Brazilian law, including the Consumer Protection Code where it applies. Disputes go to the courts of the consumer user's domicile; for business relationships, to the courts of Cola's registered office.

Privacy policy

1. Controller and contact

TINYCO TECNOLOGIA E SOLUCOES DE PAGAMENTO LTDA (CNPJ 57.331.565/0001-79), which operates Cola AI, is the controller of your account data and of the data we receive from Meta through WhatsApp, and the processor of the data your office handles on the platform. Data protection officer (encarregado): hi@colaai.co.

2. Data we process

• Identification and access: WhatsApp number, first and last name, verification code, offices and roles.
• Content: messages sent to Cola over WhatsApp and on the web, photos, documents, floor plans, audio and its transcripts, shared locations, and what the assistants produce from them (summaries, notebooks, tasks, searches).
• Data received from Meta through WhatsApp: phone number, WhatsApp profile name, messages and files sent to Cola's number, message identifiers and delivery status.
• Payments: records of the credit purchases made by your office. Card data is handled by Stripe; Cola does not store it.
• Usage and technical data: access logs, WhatsApp message identifiers, delivery status, IP address, device and browser type, errors.
• Third-party data you send: contacts of clients, suppliers and employees, tax documents and contracts, processed on behalf of your office.

3. What we use it for and on what legal basis

• To provide the service and perform our contract with you: running the account, storing and organizing content, generating the assistants' answers, sending messages over WhatsApp (performance of a contract, LGPD art. 7, V).
• Security, fraud and abuse prevention, service improvement and aggregate statistics (legitimate interest, art. 7, IX).
• To comply with legal, tax and regulatory obligations (art. 7, II).
• To send communications that are not part of the service, such as news and offers (consent, art. 7, I), which you can withdraw at any time.

Data received through WhatsApp is used only to provide the service to you and your office. We do not use it for advertising and we do not share it with Cola's other customers.

4. Who we share it with

We share data only with processors that help us provide the service, under contract and only for that purpose:

• Meta Platforms (WhatsApp Business Platform): carrying messages over WhatsApp.
• Anthropic (Claude models): generating answers and reading documents and images for the assistants.
• OpenAI: transcribing audio.
• Google (Gemini and Google Cloud): reading documents and indexing for search.
• Salesforce / Heroku and Amazon Web Services: hosting the application, the database and the files.
• Stripe and Asaas: processing payments.
• Resend: sending the service's emails.
• Cloudinary: delivering the images of the websites your office publishes.
• Vercel: hosting the website www.colaai.co.
• Dropbox and Google Drive: syncing files, when your office connects a folder from these services.

We also share data when the law requires it, by order of a competent authority, or to protect the rights of Cola and its users. We do not sell personal data.

Requests from public authorities: we review the legality of every request; we challenge those we consider unlawful or excessive; we disclose only the minimum needed to comply with the order; and we record every request, our response, the legal reasoning and who was involved.

5. International transfers

Some processors handle data outside Brazil, in particular in the United States. These transfers follow the LGPD (art. 33), with contractual clauses and appropriate security measures.

6. How long we keep it

We keep data while your account and your office exist and for as long as needed to meet legal obligations, resolve disputes and keep accounting records. After an office is closed, its content is deleted or anonymized within 90 days, unless the law requires it to be kept. We also delete the data received through WhatsApp when it is no longer needed for the service, if we stop operating the service, or when Meta asks us to. Technical logs are kept for a limited period.

7. Security

We use encryption in transit, role-based access control, separation between offices, audit logs and reviews of our integrations. No system is completely secure; if an incident affects your data, we will notify you and Brazil's National Data Protection Authority (ANPD) as the law requires.

8. Your rights

Under art. 18 of the LGPD, you can ask for confirmation that we process your data, access, correction, anonymization, blocking or deletion of data, portability, information about sharing, and to withdraw consent. Write to hi@colaai.co; we answer within 15 days. To delete your data, follow the Data deletion section. If the request concerns data your office controls, we pass it on to the office.

9. Cookies and browser storage

The website www.colaai.co uses no tracking cookies and no analytics tools. The web app stores in your browser only what it needs to keep you signed in and to remember your preferences.

10. Children and adolescents

The service is not intended for people under 18 and we do not knowingly collect their data.

11. Changes

This policy may be updated. The current version is on this page, with its update date, and relevant changes will be announced over WhatsApp or in the app.

Data deletion

Anyone whose data Cola processes can ask for it to be deleted, with or without an account, including people who have only exchanged messages with Cola's WhatsApp number.

1. Write to hi@colaai.co with the subject «Delete my data» and the WhatsApp number you used with Cola.
2. We confirm the request with that number on WhatsApp, to make sure it is yours.
3. We delete your account, your profile, your conversations with Cola and the data we received from you through WhatsApp, and we ask our processors to do the same. We finish within 15 days and let you know when it is done.

We keep only what the law requires, such as payment records, for the legal period. What you sent to an office (photos, documents, messages about a project) is part of that office's records: we tell its administrator and remove or anonymize your personal data in those records, unless the law requires otherwise.

WhatsApp and AI assistants

• Cola talks to you over WhatsApp using Meta's WhatsApp Business Platform. Messages travel through Meta's infrastructure and are also subject to WhatsApp's terms and privacy policy.
• By sending a message to Cola's number, accepting an invitation or being registered by an administrator of your office, you agree to receive messages from Cola: the assistants' answers, invitations, reminders, approval requests, and notices about documents, tasks and payments. Outside the conversation window, these messages use templates approved by Meta.
• To stop receiving messages, ask Cola itself, on WhatsApp or on the web: the messages Cola sends on its own stop at once, and it keeps answering what you write and sending what you ask for. To receive them again, just ask.
• Conversations are handled by artificial intelligence, not by people. The assistants read text, photos, documents and audio (transcribed automatically) and can make mistakes. Do not use Cola for emergencies. To talk to a person, write to hi@colaai.co.
• Photos, audio and documents sent over WhatsApp are stored in your office and can be seen by those who have access to it, according to the platform's permission rules.
• Cola does not send third-party promotional messages and does not share your number with advertisers.

Credits and payments

• Each office has a credit balance in US dollars (US$). Every use of the AI assistants consumes credits from that balance.
• New offices get a free trial, limited in messages and in usage, to get to know the service.
• Credits are bought in packs, processed by Stripe, with the payment methods shown on the payment screen.
• Packs are priced in US$. On the payment screen, Stripe may show and charge the amount in your currency, with the conversion shown there. Applicable taxes may be added as the law requires.
• When the balance reaches zero, the assistants stop answering until a new purchase. A use already under way may finish and take the balance slightly below zero; the difference is deducted from the next purchase.
• Only the office's administrators buy credits and see the charges.
• Refunds: an unused purchase can be cancelled and refunded within 7 days, under art. 49 of the Consumer Protection Code, by writing to hi@colaai.co; the refund is processed by Stripe and removes the corresponding credit. Credits already used are not refundable. Credits have no cash value outside the platform and cannot be transferred between offices.
• Payments between you and third parties (clients, suppliers) that Cola records and organizes are not financially intermediated by Cola. When the platform generates a charge or a PIX QR code, processing follows the terms of the relevant payment provider.
• We may change prices and packs; a change applies to future purchases and will be announced on this page and in the app.