LatSouth Data Licence Agreement

Version 1.0 — 2026-10-25

Parties. The licensor named on the Order Form or invoice, trading as LatSouth, São Paulo — Brazil ("LatSouth"), and the company named on the Order Form or at checkout ("Customer").

Structure.

• Part A applies to every licence.
• Part B applies to subscriptions and annual licences.
• Part C applies only when the Order Form grants wholesale or redistribution rights.
• Schedule 1 (source licences and attribution) and Schedule 2 (data-protection statement) form part of this Agreement.
• If documents conflict, this is the order of precedence: Order Form → Part C → Part B → Part A → Schedules.

---

Part A — Terms for every licence

A1. Definitions

• "Data": the files, rows, fields, API or actor outputs, samples and documentation LatSouth delivers. Each delivery carries a data_as_of date per source.
• "Product": the named data product on the Order Form or checkout page, e.g. Brazil Mid-Market & Enterprise Accounts or Brazil C&I Solar Owners.
• "Authorised Users": Customer's employees, plus contractors working for Customer, up to the number stated on the Order Form (unlimited for one-off files unless stated).
• "Internal Use": use inside Customer's own business, as defined in A2.
• "Source Licence": the licence under which a government agency publishes the underlying open data (Schedule 1).

A2. Licence grant

LatSouth grants Customer a non-exclusive, non-transferable, worldwide licence to use the Data for Internal Use during the Term. Internal Use means:

• (a) loading the Data into Customer's CRM, data warehouse, BI and sales tools;
• (b) segmentation, territory planning, market sizing, analytics and research;
• (c) B2B outreach to the companies in the Data, subject to A5;
• (d) Customer products or services that use the Data without exposing rows or substantial extracts to third parties, e.g. lead scoring or internal models.

A one-off licence is perpetual for the delivered snapshot. A subscription or annual licence covers the deliveries made during the Term (Part B).

A3. Restrictions

Unless Part C applies, Customer will not:

• (a) sell, sublicense, resell, rent, publish or redistribute the Data or any substantial part of it, alone or bundled into another data product, list, database, API or dataset;
• (b) make the Data available to any company other than Customer and its Authorised Users;
• (c) use the Data to build or train a product that competes with LatSouth's data products, or to re-identify natural persons;
• (d) remove the source and licence columns or the attribution notices;
• (e) state or imply that any government agency, or LatSouth, endorses Customer.

Aggregates and statistics that cannot be reverse-engineered into rows may be published, with the attribution in Schedule 1.

A4. Open-data sources: what Customer is paying for

The underlying registries are public open data. LatSouth's restrictions in A3 apply to LatSouth's compilation:

• cleaning, harmonisation into one English schema, ISIC mapping;
• registry and regulator joins;
• website verification, derived fields and delivery.

They never restrict rights Customer already has under a Source Licence. Where a Source Licence requires the licensed rows to remain open, Schedule 1 prevails over A3 for those rows only. Today this covers:

• Colombia (CC BY-SA 4.0);
• the ODbL derivative databases (Brazil C&I Solar Owners; the br_fintech_licenses file).

A5. Outreach and contact fields

Some Products contain company contact channels: a registered phone, a role mailbox on the company's own domain (contato@, sales@ …), or company social pages, each with source and date. Customer is the independent controller of any outreach it performs and will:

• (a) comply with the e-mail, telemarketing and data-protection laws that apply to it and to the recipient, including LGPD (Brazil), CAN-SPAM, GDPR/UK GDPR and the laws listed in Schedule 2;
• (b) honour opt-outs and maintain its own suppression list;
• (c) not use the Data to contact natural persons in their private capacity.

On request, LatSouth supplies its suppression list of companies and mailboxes that asked not to be contacted.

A6. Delivery and acceptance

• Delivery: zip download, signed cloud URL, or API/actor access, within one business day of payment for catalogue products and on the date in the Order Form for custom work.
• Formats: CSV (UTF-8) and Parquet with identical columns, README, data dictionary and LICENSE file.
• Integrity guarantee (7 days): Customer may report any of the following within 7 days of delivery:
• (i) the row count differs from the count published for that data_as_of;
• (ii) the columns differ from the data dictionary;
• (iii) the file does not open.

LatSouth will fix or replace the delivery, or refund in full. Coverage that does not meet Customer's expectations is not a defect: free samples and published counts exist for checking before purchase.

A7. Fees and taxes

• Fees are as stated at checkout or on the Order Form, in USD unless stated, and due on invoice (Net 15 unless stated).
• Taxes: fees exclude taxes, which are payable by Customer where applicable. Each party bears its own bank and payment-provider charges.
• Late payment: LatSouth may suspend subscription deliveries for invoices unpaid 30 days after the due date.

A8. Warranties and disclaimer

LatSouth warrants that:

• (a) it compiles the Data from the sources listed in Schedule 1, under their licences;
• (b) its build removes natural persons and personal-data fields as described in Schedule 2;
• (c) it has the right to grant this licence.

Otherwise the Data is provided "as is". Registry data reflects what companies and agencies file and can be outdated, incomplete or wrong at source. LatSouth does not warrant that any company is solvent, active in fact, compliant, or reachable, and does not warrant fitness for a particular purpose. The Data is not a consumer report or credit report. It must not be used as the sole basis for any decision about credit, employment, insurance, housing or eligibility for any benefit, or for any purpose regulated as such.

A9. Liability cap

• Cap: each party's total liability under this Agreement is limited to the fees paid or payable by Customer in the 12 months before the event giving rise to the claim.
• Excluded losses: neither party is liable for indirect, consequential, special or punitive damages, lost profits, or lost revenue.
• Carve-outs: the cap and the exclusion do not apply to Customer's breach of A3 or Part C, to a party's fraud or wilful misconduct, or to any liability that the governing law does not allow to be limited.

A10. Data-subject and authority requests

Each party informs the other without undue delay of any request or complaint that concerns the other's processing of the Data. LatSouth removes from future deliveries any record that turns out to identify a natural person, as soon as it is notified. Customer applies that removal to its copies within 30 days of being told.

A11. Confidentiality

Order Form pricing and any non-public information exchanged are confidential. They may be disclosed only to advisers and as required by law.

A12. Term and termination

• Duration: one-off licences are perpetual (A2). Subscriptions and annual licences run for the Term on the Order Form (Part B).
• Termination for breach: either party may terminate for material breach not cured within 30 days of notice.
• On termination of a subscription or annual licence: Customer may keep the deliveries received during the Term for Internal Use, unless termination is for Customer's breach of A3.
• Survival: A3, A8–A11 and A13 survive termination.

A13. General

• Governing law: the laws of the Federative Republic of Brazil. The courts of the city of São Paulo, SP have jurisdiction, unless the Order Form selects another forum or arbitration.
• Language: the English version prevails.
• Assignment: neither party may assign without consent, except to a successor of its business. LatSouth may assign to the entity that succeeds the operator named on the invoice.
• Entire agreement: this Agreement, including its Order Form and Schedules, is the entire agreement.
• Notices: notices go to hello@latsouth.com and to the Customer contact on the Order Form.

---

Part B — Subscriptions (monthly refresh) and annual licences

• B1. Term and renewal. Monthly subscriptions renew monthly until cancelled. Annual licences run 12 months from the start date and renew for 12 months unless either party gives 30 days' notice. LatSouth may change renewal prices with 60 days' notice before renewal.
• B2. Deliveries. A full refreshed file plus delta_new, delta_closed and delta_changed, within 5 business days of each source release LatSouth processes, at most monthly per source. Sources release on their own calendars, and some (e.g. Mexico's DENUE) are not monthly. A late or skipped release at source is not a breach.
• B3. Authorised Users.
• Team licence: up to 10 users and 1 Product.
• Business licence: up to 25 users and up to 3 Products.
• Universe licence: all users of one legal entity and the full catalogue.

Group companies need their own licence unless named on the Order Form.

• B4. Support. E-mail support with a response within 2 business days. One schema-change notice at least 30 days before any column is removed or renamed.
• B5. Schema stability. Columns are only added between versions, never removed without the B4 notice.

---

Part C — Wholesale / redistribution addendum (only when on the Order Form)

• C1. Grant. LatSouth grants the right to display, distribute or make available the Data inside the Customer Platform named on the Order Form, to the platform's end users, during the Term, within the scope stated: countries, Products, fields, volume.
• C2. Conditions.
• (a) End users receive only per-record or query-based access, never the bulk database, unless stated.
• (b) Customer passes through restrictions at least as protective as A3 and A5.
• (c) Customer displays the attribution in Schedule 1 where the Source Licence requires it, together with "Data: LatSouth".
• (d) ODbL and CC BY-SA rows are distributed under their Source Licences (Schedule 1).
• C3. Reporting and audit. Quarterly usage report (records delivered or queried by country and Product). One audit per year on 30 days' notice, at LatSouth's cost unless under-reporting exceeds 5%.
• C4. End of term. Customer stops new distribution at expiry. Records already delivered to end users before expiry may stay with them.

---

Schedule 1 — Source licences and attribution

Every row carries source and source_license, and every file's README repeats the exact credit. If Customer publishes aggregates or excerpts, it keeps the credit of the countries and agencies involved and does not imply endorsement.

Template credit (Portuguese, as in the READMEs): "Fonte: [agência], [base], [data]. Dados transformados por LatSouth; não é um produto oficial do órgão."

Schedule 2 — Data-protection statement (company data only)

1. Design rule. LatSouth sells data about legal entities. At build time it:
2. removes natural persons, individual entrepreneurs (e.g. Brazil MEI and legal-nature 213-5 and the 4xx group; Mexico personas físicas; Peru RUC 10/15/17; Ecuador persona natural; Colombia organización 01) and owner-named legal forms;
3. never loads partner, shareholder, director or legal-representative tables;
4. scrubs CPF-like numbers from names;
5. masks names of legal forms that must carry a person's name.
6. Contact fields. These are company channels only:
7. the phone and e-mail the company filed with the registry (Brazil, Mexico, part of Colombia), with an accountant-contact flag;
8. the e-mail only when it is a role mailbox on the company's own domain;
9. in Brazil Verified Contacts, role mailboxes and phones the company publishes on its own website.

Named mailboxes (name.surname@), free-mail and ISP mailboxes, and values repeated across many sites are dropped.

1. Legal basis.
2. LatSouth: public open data republished under the agencies' open-data licences; compilation under legitimate interest (LGPD art. 7 IX and §§3–4 on publicly accessible data) for any residual data that might relate to a person.
3. Customer: an independent controller for its own use (A5).
4. No processor relationship exists, so a DPA is not normally required; LatSouth will sign a short controller-to-controller addendum on request.
5. Laws considered. Brazil LGPD (Lei 13.709/2018); Mexico LFPDPPP; Chile Ley 19.628 / Ley 21.719; Colombia Ley 1581/2012 and Decreto 1377/2013; Peru Ley 29733; Argentina Ley 25.326; Ecuador LOPDP (2021); GDPR/UK GDPR and CAN-SPAM for Customer's outreach.
6. Requests. Removal and objection requests go to hello@latsouth.com. LatSouth answers within 48 hours and removes the record from the next build and from its suppression list exports.