Terms of use
These terms describe how Siglata works today. Using the product means you accept them. They are not a substitute for a contract with a specific customer.
Who operates Siglata
Siglata is operated by Siglata Tecnologia Ltda, CNPJ 69.277.307/0001-30, which serves customers in Brazil. Customers outside Brazil are served by Estirpia Technologies Pte. Ltd. (UEN 202633281R), Singapore. Contact: contato@siglata.com.
Customers outside Brazil contract with Estirpia Technologies Pte. Ltd., and customers in Brazil contract with Siglata Tecnologia Ltda, which issues their nota fiscal.
Accounts
Sign-in uses a one-time magic link sent to your email address, or your Google account. Accounts Siglata provisions itself may also sign in with a password Siglata issued; nobody can sign up with a password. You are responsible for the inbox that receives the link and for the Google account you sign in with. Locale preference may be stored in a cookie named siglata-locale.
Organizations and files
File names, sizes, media types, folder membership, visibility, and access grants are stored with the organization. File bytes belong to the organization that uploaded them. Trashed files remain until the 30-day recovery window ends, then they are deleted. Storage usage counts active and trashed files against the organization's quota.
Portal automation
On the Business plan, agents can work in third-party portals, such as an ERP, with the login of a person in the organization. Whoever connects a portal confirms they are authorized to automate that account, and the organization answers for what agents do in it with the access it grants and for respecting the portal's terms. Banks, social networks and the gov.br login can't be connected. Siglata uses Kernel, in the United States, to store those logins, including the passwords, and the browser profiles with the session cookies and run the browsers; the customer approves this international transfer in the Business contract, which describes it, and the privacy policy says what Kernel stores. Kernel doesn't store Siglata's connection records, session steps or activity records.
Emails sent by the agent
On the Business plan, agents can send email on behalf of a person in the organization to its members and to the company's registered contacts. The organization is responsible for the content of these messages and for having a legal basis to contact each recipient, and may not use them to send unsolicited bulk mail. Each company has a daily message limit, an admin can turn sending off, and Siglata may suspend it in case of abuse. Unsubscribes and permanently rejected addresses block further sends to that address.
Agent access
MCP clients receive an OAuth grant bound to one organization and a list of scopes. Tokens are validated against the live session and current membership on every tool call and byte transfer. Open listen streams recheck access about every 30 seconds and may keep sending updates until the next check. Ending the session or removing the member prevents subsequent access after revalidation. We do not issue long-lived unscoped API keys.
Requests
To export or delete an account, email contato@siglata.com from the address on the account. Security issues go to suporte@siglata.com.