Terms and conditions

Overview

1. Introduction

Welcome to the CCX Company website ("CCX", "we", "our"), a private law entity registered with CNPJ under number 24.329.191/0001-06, headquartered in São Paulo/SP, specializing in technology consulting, software development, digital commerce, integrations, data, artificial intelligence and proprietary SaaS products.

These Terms and Conditions ("Terms") govern (a) the access and use of this website and (b) the general conditions applicable to the contracting of CCX services. They are complemented by specific contractual instruments for each project — Commercial Proposal, Master Service Agreement (MSA), Statement of Work (SOW), Data Processing Agreement (DPA) and service orders.

These Terms are governed by Brazilian law, including Law No. 12.965/2014 (Internet Civil Rights Framework), Law No. 13.709/2018 (LGPD), Law No. 8.078/1990 (Consumer Protection Code), Law No. 10.406/2002 (Civil Code), Law No. 9.610/1998 (Copyright Law), Law No. 9.279/1996 (Industrial Property Law), Law No. 12.846/2013 (Anti-Corruption Law) and other applicable regulations.

2. Definitions

For purposes of these Terms, the following definitions apply:

• Website: CCX institutional website at ccxcompany.co and its subdomains.
• Visitor: any person who accesses the Website.
• Client: natural or legal person who contracts CCX services through a contractual instrument (Proposal, MSA, SOW or service order).
• Services: consulting, dedicated squads, software development, implementation and evolution of platforms (VTEX, Salesforce Commerce, SAP Commerce, Shopify Plus), migrations, integrations (SAP, Protheus, MuleSoft), Data & BI, AI for Business, mobile apps, web apps and proprietary products (CCX Messages, NexLog OS).
• Deliverables: artifacts, source code, documentation, dashboards, models and other products generated from the contracted Services.
• Personal Data: any information related to an identified or identifiable natural person, pursuant to the LGPD.
• DPA: Data Processing Agreement, which governs CCX's role as a data processor for the Client.
• SOW: Statement of Work — document that details scope, deliverables, timelines, team and values of a specific project.
• AMS: Application Management Services — maintenance and continuous evolution services post go-live.

3. Acceptance and effectiveness

3.1. The use of the Website constitutes tacit acceptance of these Terms by the Visitor. The contracting of Services, in turn, depends on the signature of a specific contractual instrument by the parties, which prevails over these Terms in case of conflict.

3.2. These Terms are effective for an indefinite period. CCX may modify them at any time, with effect from their publication on the Website. Substantial modifications will be communicated prominently.

4. Eligibility

4.1. The contracting of Services is intended for legally established entities and natural persons over 18 years of age, fully capable under civil law.

4.2. The representative who signs any instrument on behalf of the Client declares that they have the authority to do so, being responsible for the truthfulness of this declaration.

Consulting and squads

1. Technology consulting

1.1. CCX provides strategic technology consulting services, including diagnosis, solution architecture, platform selection, roadmap planning, technical governance, performance assessment and digital transformation.

1.2. Contracting modalities:

• Fixed Price: scope, timeline and value fixed in SOW. Suitable for diagnostics, reference architectures and projects with clearly defined scope.
• Time & Material (T&M): billing by hour/person or per sprint, with maximum cap when applicable. Suitable for evolutionary scope initiatives.
• Retainer: recurring monthly hour bank for continued technical governance, CTO as a Service or advisory.

1.3. Typical deliverables: executive reports, reference architectures (C4, flowcharts), RFPs, comparative analyses, ADRs (Architecture Decision Records), multi-year roadmaps and engineering documentation.

2. Dedicated squads

2.1. CCX allocates multidisciplinary squads (Tech Lead, full-stack engineers, QA, Product Designer, Data Engineer, DevOps and other profiles as needed) for ongoing or client-demand projects.

2.2. Modalities:

• Fixed Capacity: dedicated squad with fixed composition, monthly contracting.
• Flex Capacity: squad with dynamic composition adjusted each quarter.
• Outcome-based: compensation linked to achieving negotiated OKRs or KPIs.

2.3. CCX is responsible for the selection, replacement and management of its professionals. There is no employment relationship or direct subordination between the Client and squad members.

2.4. Professional replacement: CCX may replace squad members for operational reasons, ensuring adequate knowledge transfer. The Client may request replacement for justified reasons, observing the transition timeline agreed in the SOW.

2.5. Ownership of code produced by squads is regulated in the SOW — by default, source code developed under contract is assigned to the Client after full payment of installments.

3. Engagement rules

• Standard service hours: business days, 09:00–18:00 (BRT), unless otherwise agreed.
• Communication via channels defined at kickoff (Slack, Microsoft Teams, corporate email, Jira).
• Agile ceremonies: Scrum/Kanban ceremonies according to agreed framework (daily, planning, review, retro).
• Development environment: access provided by Client; CCX operates in segregated environments (dev/staging/prod).
• Tracking metrics: velocity, lead time, throughput, bug ratio, test coverage and other KPIs defined in the SOW.

Implementations and migrations

1. Platform implementation

CCX is a certified partner of leading digital commerce and cloud platforms. Implementation projects are governed by the specific SOW and follow standardized phases:

1. Discovery: interviews, requirements analysis, architecture design, initial backlog and project plan.
2. Setup: environment provisioning (dev, staging, prod), CI/CD configuration, access governance.
3. Build: development, configuration, integrations, testing (unit, integration, e2e, performance).
4. UAT & Go-Live: acceptance testing, cutover, data migration, transition.
5. Hypercare: post go-live period with priority support, typically 30 to 90 days.
6. AMS (optional): maintenance and continuous evolution.

2. Supported platforms

• VTEX: VTEX IO, FastStore, VTEX B2B Suite, Marketplace, Headless CMS.
• Salesforce Commerce Cloud (SFCC B2C/B2B): Composable Storefront, SLAS, Einstein.
• Salesforce Data Cloud: CDP, Customer 360, integrations with Marketing Cloud and Service Cloud.
• SAP Commerce Cloud: Spartacus, SAP CPI, SAP BTP, SAP S/4HANA.
• Shopify & Shopify Plus: customized theme, Hydrogen, Shopify Functions.
• MuleSoft Anypoint Platform: API-led connectivity, enterprise integrations.

3. Third-party platform licensing

3.1. Licensing of third-party platforms (VTEX, Salesforce, SAP, Shopify, MuleSoft, AWS, GCP, Azure, etc.) is contracted directly by the Client with the respective vendor, except when CCX acts as an officially authorized reseller.

3.2. CCX is not responsible for unavailability, price changes, contract changes or feature discontinuation made by platform vendors.

4. Platform migrations

4.1. CCX executes migrations with proprietary methodology, minimizing downtime and operational risk:

• SAP Hybris → VTEX IO: catalog replication, commercial policies, ERP integration.
• Magento → VTEX: catalog migration, customers, historical orders, SEO preserved.
• VTEX legacy CMS → VTEX IO: headless storefront modernization without loss of organic ranking.
• Shopify ↔ VTEX: bidirectional migrations with history and SEO preservation.

4.2. Typical migration scope includes: source data audit, mapping design, development of extractors and loaders, sample validation, reconciliation and scheduled cutover.

4.3. CCX is not responsible for data inconsistencies existing in the source platform — the diagnosis conducted in Discovery will identify the databases requiring prior cleanup.

Integrations and development

1. System integrations

1.1. CCX designs and implements integrations between commerce platforms, ERPs, CRMs, tax systems, payment gateways, logistics hubs and other corporate systems:

• SAP ↔ E-commerce: S/4HANA, ECC, CPI/BTP, Emarsys — bidirectional synchronization of catalog, prices, inventory, orders and customers.
• Protheus (TOTVS) ↔ E-commerce: integration with VTEX and Shopify — sales orders, invoicing, NF-e.
• MuleSoft Anypoint: API-led connectivity, DataWeave, CloudHub, synchronous and asynchronous flows.
• Custom middleware: REST/SOAP API orchestration, queues, EDA (event-driven architecture) with Kafka, RabbitMQ, SQS.

1.2. Engagement model: Fixed Price per integration or T&M for more complex projects. Monthly AMS available for post-go-live support.

2. Custom software development

2.1. CCX develops customized web and mobile applications, including:

• Web Apps SaaS: enterprise platforms, B2B portals, intranets, BI dashboards, multi-tenant platforms.
• Mobile Apps: native development (Swift/iOS, Kotlin/Android) and cross-platform (React Native, Flutter).
• APIs & Microservices: distributed architectures, event-driven, CQRS, serverless.
• DevOps & Cloud: infrastructure as code (Terraform, CloudFormation), Kubernetes, GitHub Actions, monitoring and observability.

2.2. Recommended stack: Next.js, React, Node.js, Python, TypeScript, Go, AWS, GCP, Azure. Alternative stacks may be agreed upon per Client needs.

3. Intellectual property of deliverables

3.1. As a rule, source code developed under contract is assigned to the Client upon full payment of the respective SOW, by means of copyright assignment agreement.

3.2. Excluded from assignment: (a) pre-existing components, CCX proprietary libraries (CCX Core Libraries), internal frameworks and reference knowledge used in execution; (b) open-source software under their respective licenses; (c) licensed third-party components. For pre-existing components, the Client receives a non-exclusive, perpetual and non-transferable license.

3.3. Know-how and methodologies developed by CCX (playbooks, templates, accelerators) remain the exclusive property of CCX and may be reused in other projects.

4. Testing and quality

• Minimum unit test coverage per SOW (typically 70%+).
• Integration, end-to-end and performance testing per project criticality.
• Mandatory code review before merge; pair programming on critical features.
• Segregated environments: dev, staging, pre-production and production.
• Monitoring and observability with Datadog, New Relic, Sentry or equivalent.

Data, AI and SaaS products

1. Data & Business Intelligence

CCX structures modern data platforms, implements data warehouses, lakes and lakehouses, models business logic and delivers executive dashboards.

• Stack: Snowflake, BigQuery, Redshift, Databricks, dbt, Airflow, Fivetran.
• Visualization: Power BI, Tableau, Looker, Metabase, custom dashboards.
• CDP: Salesforce Data Cloud, Segment, marketing cloud integrations.
• Governance: cataloging, lineage, data quality, LGPD by design.

2. AI for business

2.1. CCX develops generative and traditional AI solutions applied to business objectives:

• Conversational agents and chatbots with Claude, GPT, Gemini and open-source LLMs;
• RAG (Retrieval-Augmented Generation) over corporate databases;
• Classification, summarization, data extraction, sentiment analysis;
• Computer vision, OCR, document processing;
• Predictive models (churn, propensity, lifetime value, demand);
• MLOps, feature stores, model registry, drift monitoring.

2.2. Data used in training/fine-tuning is handled per executed DPA. CCX adopts safeguards against PII leakage in prompts and logs.

3. Proprietary SaaS products

3.1. CCX Messages (WhatsApp Business)

Proprietary platform for scale delivery via WhatsApp Business API, with template orchestration, human support, chatbot, analytics and CRM integration. SaaS engagement model with monthly licensing + Meta conversation cost pass-through.

3.2. NexLog OS (Supply Chain Operating System)

Modular supply chain operating system with architecture, control tower, customs, ESG and logistics capabilities. Multi-tenant SaaS engagement model with volume-based or module-activation plans.

3.3. NexLog OS Academy

Educational platform for supply chain training with online courses, certifications and premium content.

4. SaaS product terms

• Engagement via monthly or annual subscription, with auto-renewal unless cancelled;
• Minimum availability SLA of 99.5% (except scheduled maintenance windows);
• Support during business hours (9am–6pm BRT); 24×7 support available in premium plans;
• Daily backup and retention per contracted plan;
• Cancellation at any time, effective at end of current billing cycle; no refund of already-commenced cycles;
• Client data exportable in open format up to 60 days after cancellation.

CCX Messages

1. The CCX Messages service

CCX Messages is CCX's service for sending communications via email, SMS and WhatsApp on behalf of client companies ("Company"), through official integrations — including the WhatsApp Business Platform (operated by Meta), telecom carriers and email providers. The service is contracted through a commercial proposal, agreement or specific work order.

2. Data roles and responsibilities

In the operation of CCX Messages, the Company is the controller of recipients' personal data and CCX acts as a processor, handling data exclusively under the Company's instructions and under the applicable data processing agreement (DPA).

3. Client Company obligations

• Obtain and keep records of valid recipient consent (opt-in) before any sending, where required by law or by channel policies;
• Honor unsubscribe requests (opt-out) immediately on every channel;
• Send lawful content only: spam, phishing, fraud, misleading content, harassment, illegal content or restricted categories without legal authorization are prohibited;
• Comply with the LGPD, Meta's policies applicable to WhatsApp (including the WhatsApp Business Messaging Policy), carrier rules and email anti-spam best practices;
• Use WhatsApp templates only after approval by Meta, where applicable;
• Be responsible for the recipient lists provided and for the legal basis of each campaign.

4. Recipients' rights

Recipients can stop receiving messages at any time (replying "STOP" on WhatsApp or SMS, or via the unsubscribe link in emails) and can request the deletion of their data as described on the Data Deletion page, through suporte@ccxcompany.co.

5. Service suspension

CCX may immediately suspend sending that violates these Terms, channel policies or the law — including abnormal report/block rates, degraded number quality rating, or determinations by Meta/carriers — to protect recipients, the platform and other client Companies.

6. Availability and third-party dependencies

Message delivery depends on third-party platforms (Meta, telecom carriers, email providers) and is subject to their rules, windows and technical limits. CCX applies best delivery efforts but does not guarantee receipt, timing or reading, nor is it liable for outages caused by such third parties.

Site use and intellectual property

1. Site use

1.1. The Visitor commits to using the Site in compliance with Brazilian legislation, these Terms, and good practices.

1.2. It is forbidden for the Visitor to:

• Use robots, scrapers, crawlers, or automated tools without express authorization;
• Perform reverse engineering, decompile, disassemble, or attempt to access the Site's source code;
• Circumvent or interfere with security mechanisms, authentication, or rate limiting;
• Reproduce, distribute, or modify Site content without written authorization from CCX;
• Use the Site for unlawful, defamatory, discriminatory purposes, or in violation of third-party rights;
• Overload the infrastructure with excessive requests or denial-of-service attacks (DoS/DDoS).

2. Intellectual property

2.1. All Site content — texts, images, logos, trademarks, design, source code, layout, case studies, whitepapers, presentations, templates, infographics, videos, and technical materials — is the exclusive property of CCX Company or its licensors, protected by Law No. 9.610/1998 (Copyright) and Law No. 9.279/1996 (Industrial Property).

2.2. The trademarks "CCX", "CCX Company", "CCX Messages", "NexLog OS", "NexLog OS Academy", and their visual elements are the exclusive property of CCX.

2.3. Access to the Site does not grant the Visitor any intellectual property rights over the content or technologies employed. Only a limited, personal, non-exclusive, non-transferable, and revocable license for viewing and reading is granted.

2.4. Sharing URLs and limited citations of content with clear attribution to CCX Company is permitted for non-commercial purposes.

3. Content generated in events and webinars

Recordings, transcriptions, and materials distributed at CCX events, webinars, and presentations are the exclusive property of CCX, unless otherwise indicated. Recording of participants' images at in-person or online events is done with prior notice, in accordance with the LGPD.

4. Third-party links

4.1. The Site may contain links to third-party websites, including technology partners (VTEX, Salesforce, SAP, Shopify, AWS, MuleSoft, among others). The inclusion of these links does not imply endorsement, warranty, or responsibility by CCX for the content or practices of such sites.

4.2. We recommend that the Visitor read the terms and privacy policies of third-party sites before using them.

5. Site availability

5.1. CCX will make commercially reasonable efforts to keep the Site available and operational, but does not guarantee uninterrupted or error-free operation.

5.2. CCX reserves the right to suspend, modify, or discontinue the Site at any time, without prior notice, for maintenance, updates, or security reasons.

Legal terms

1. Payment and billing

1.1. Amounts, payment method, and financial schedule for each contract are defined in the respective SOW or commercial proposal.

1.2. Unless otherwise provided, billing is monthly via electronic Service Invoice (NFS-e), due within 30 calendar days from issuance.

1.3. Late payment subjects the Client to: (a) late fee of 2% on the outstanding amount, (b) interest of 1% per month, pro rata die, (c) monetary correction by IPCA, (d) possible service suspension upon notification.

1.4. Annual contract adjustments follow the accumulated IPCA of the last 12 months, or official substitute index, unless otherwise agreed.

1.5. Applicable taxes on service provision (ISS, PIS, Cofins, IRRF, CSLL, INSS) are collected in accordance with current legislation and itemized on the NFS-e.

2. Confidentiality and NDA

2.1. Information exchanged between CCX and the Client during the provision of Services is confidential, except if already public, legally obtained from third parties, or disclosure is required by law or court order.

2.2. The confidentiality obligation persists for 5 years after the end of the contractual relationship, or a longer period for strategic data, as agreed.

2.3. For sensitive projects, the parties execute a specific NDA or include a reinforced clause in the MSA/SOW.

3. Data protection (LGPD)

3.1. CCX processes personal data in compliance with the LGPD and the Marco Civil of the Internet. Data processing on the Site is detailed in our Privacy Policy, which is an integral part of these Terms.

3.2. In projects where CCX acts as a data processor on behalf of the Client (controller), the parties execute a specific DPA governing purposes, legal bases, sub-processors, international transfers, incidents, and rights of data subjects.

3.3. CCX maintains a data protection governance program with a designated DPO, data inventory, impact assessments (RIPD) when applicable, employee training, and incident response plan.

4. Limitation of liability

4.1. CCX's total liability to the Client, for any reason, is limited to amounts actually paid in the 12 months preceding the event giving rise to the claim, subject to applicable legislation.

4.2. CCX is not liable for: (a) indirect damages, lost profits, loss of revenue, lost business opportunity, or reputational damages; (b) failures of third-party platforms (cloud providers, payment gateways, ERPs, commerce platforms); (c) misuse of deliverables by third parties; (d) acts of God.

4.3. The above limitations do not apply to fraud, gross negligence, breach of confidentiality, or inalienable rights under the CDC.

5. Indemnification

5.1. The Client shall indemnify CCX for any loss, damage, fine, or fees arising from (a) Client's violation of these Terms or the contract, (b) content or data provided by the Client that violate third-party rights, (c) misuse of deliverables, (d) non-compliance with applicable legislation.

6. Suspension, termination, and cancellation

6.1. Either party may terminate the contract for just cause by written notice, effective immediately, if a material breach is not cured within 15 business days of notification.

6.2. Termination without just cause may occur with 60 days' prior notice, respecting pending obligations and proportional payment for services rendered.

6.3. Upon termination, CCX shall cooperate with transition (knowledge transfer) for up to 60 days, with compensation per the SOW or T&M basis.

7. Anti-corruption and compliance

7.1. The parties declare knowledge and commitment to comply with Law No. 12.846/2013 (Anti-Corruption), FCPA, UK Bribery Act, and other applicable anti-corruption and money laundering prevention laws.

7.2. CCX has a Code of Ethics and Whistleblower Channel (ouvidoria@ccxcompany.co), open to employees, clients, and partners, with confidentiality and non-retaliation guarantees.

8. Force majeure

8.1. Neither party is liable for non-performance resulting from force majeure or acts of God (pandemics, natural disasters, wars, governmental acts, widespread failures of internet or power infrastructure).

9. Assignment

9.1. The Client may not assign rights or obligations under these Terms without prior written consent from CCX. CCX may freely assign its rights and obligations to affiliates or successors, with notification.

10. Applicable law and forum

10.1. These Terms are governed by the laws of the Federative Republic of Brazil.

10.2. The forum of the District of São Paulo/SP is elected to resolve any controversies, except for the consumer's domicile forum when the CDC applies (art. 101, I).

10.3. The parties may alternatively submit disputes to mediation or arbitration, as agreed in a specific instrument.

11. General provisions

• Entire Agreement: these Terms, together with the Privacy Policy, Cookie Policy, and specific contractual instruments, constitute the entire agreement between the parties.
• Amendments: CCX may amend these Terms at any time, with prominent notice on the Site.
• Severability: invalidity of any provision does not affect the others.
• No Waiver: CCX's tolerance of any breaches does not constitute waiver or novation.
• Language: the Brazilian Portuguese version prevails in case of translation.
• Notices: must be sent by email with read confirmation or registered mail to addresses indicated in contracts.

12. Identification and contact

• Legal Name: CCX Company
• CNPJ: 24.329.191/0001-06
• Headquarters: São Paulo — SP — Brazil
• Website: ccxcompany.co
• Sales:ola@ccxcompany.co
• Data Protection Officer (DPO):juridico@ccxcompany.co
• Information security:juridico@ccxcompany.co
• Ethics channel:ouvidoria@ccxcompany.co

By contracting services from CCX Company or using this website, you declare that you have read, understood, and fully accepted these Terms & Conditions, without prejudice to the specific contractual instruments executed for each scope of service (SOW, MSA, DPA, service order).

Document updated on April 2, 2026. CCX Company — All rights reserved.