1. Terms of use
These terms apply to system900.com, related SYSTEM900 applications, and project work contracted with Zerosolution Inc. / SYSTEM900. By using the site or a SYSTEM900 application you agree to them.
Who we are
SYSTEM900 is a software practice of Zerosolution Inc. United States office: 560 Peoples Plaza #203, Newark, DE 19702. Brazil office contact: +55 48 99191-9559 · comercial@boomerang.app.br. Technical mail: it@system900.com.
The site
This website is informational. Estimates, timelines, and feature lists become binding only when written into a project agreement or subscription. We may change pages without notice. Do not misuse the site (scraping that degrades service, injecting content, probing other customers’ data).
Software and services
Prebuilt apps (loyalty / cashback, reservations, digital guides, voucher generators) and custom builds are licensed for the contracting organization. You do not buy the source unless the agreement says so. You may not resell, white-label, or expose another customer’s instance without written permission.
Hosting may be on your servers or ours. Availability, backups, and support levels follow the agreement for that instance. Daily database backups and one-click download, where enabled, are operational features — not a substitute for your own retention policy.
Acceptable use of applications
- Do not use SYSTEM900 software to break the law, send unlawful marketing, or store data you have no right to hold.
- You are responsible for the accuracy of customer records you load (names, documents, purchase history, voucher balances).
- Login credentials stay with the people you authorize. Tell us if an account is compromised.
Limitation
Software supports the business; it does not replace your legal, tax, or accounting duties. To the extent permitted by law, SYSTEM900 is not liable for lost profits, lost data beyond our backup window, or indirect damages. For a given contract, liability is limited to fees paid for that service in the preceding twelve months, unless the contract states otherwise.
2. Privacy notice
We respect privacy and do not rent or sell personal information. We keep physical and electronic safeguards around the data we hold. This notice covers two different piles of data.
A. Visitors to this website
When you open system900.com we may receive:
- IP address, browser / device (user-agent), date and pages requested
- Information you type into the contact form (name, company, email, telephone, project notes)
- Technical logs needed to run and protect the server
We use that to answer you, keep the site up, measure traffic, and stop abuse. Contact briefs go to it@system900.com and are kept as long as the conversation or a related project needs them, then deleted or archived with the project file.
B. People inside a customer’s SYSTEM900 application
Loyalty, reservation, guide, and voucher systems store data the customer business collects from its public. For that data, the business is the controller. SYSTEM900 is the processor: we host, back up, and maintain the software under the customer’s instructions. We do not use those end-customer lists for our own marketing.
Typical records in those apps (only if the customer enables them): identification and contact fields, purchase or visit history, points / cashback balances, voucher codes, reservation times, optional documents the customer chooses to store. Retention follows that customer’s policy and the subscription term.
Legal bases
Where Brazilian LGPD (Lei 13.709/2018) applies: we process website-form data to take pre-contract steps you request, and logs under legitimate interest in securing the service. Customer apps run under a processing relationship with that company. Where U.S. state privacy laws apply to a given dataset, we do not sell or “share” personal information for cross-context advertising.
Processors we may use on this site
Hosting and DNS for system900.com; email delivery of contact forms; optional analytics (see cookies). Client applications may also sit on the customer’s own infrastructure — in that case their host, not ours, holds the data.
Transfers
Staff in the United States and Brazil may access project mail and support tickets. If an application is hosted in one country and used in another, that is stated in the customer’s deployment notes.
Security
Encryption of sensitive fields, access control, and daily backups are part of the product design. No method is perfect. If we confirm a breach that affects you, we will notify the contracting contact and, where the law requires, the authority and the people concerned.
3. Cookies and measurement
This site may use first-party cookies for basic function and, if enabled, measurement cookies from providers such as Google or Microsoft to understand traffic and protect the service. Those providers may receive IP address and user-agent together with performance and security signals.
You can block cookies in the browser. The site will still load; some statistics will stop. We do not use the contact form to run ads against you.
4. Client systems — extra rules
- Export: where the control panel offers one-click database download, that file is the customer’s responsibility once it leaves our server.
- End of contract: on request we provide an export and then delete or return the instance according to the agreement, except copies we must keep for legal or security logs.
- Subprocessors for a given app are listed to the customer on request.
5. Your rights
Depending on where you live you may ask to access, correct, delete, or port personal data we hold as controller (website and direct mail), or to object / withdraw consent. For data inside a customer’s loyalty or reservation app, ask that business first — they own the relationship. We will help them fulfill the request.
Write to it@system900.com. Brazil: you may also contact the ANPD. We may need to confirm it is you before changing a record.
This page is a notice, not legal advice. Project contracts can add or replace clauses. We may update these terms; the date at the top is the current version.