Last updated: March 27, 2026
1.1 These Terms of Use govern access to and use of the That's Me platform, operated by That's Me Ltd. (CNPJ 48.657.854/0001-71), available at app.thatsme.com.br and via its application programming interfaces (APIs). The platform enables issuing organizations to create, store, verify, and share digital certificates and credentials with individual recipients.
1.2 By creating an account, clicking "Create Account", signing in via Google, LinkedIn, or magic link, or by accepting a certificate issued through the platform, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, do not use the services.
1.3 These Terms apply to two user profiles: (i) Recipient User — an individual who receives and accumulates certificates on their public profile; and (ii) Issuer User — an organization (company, school, institution) that issues certificates to recipients through the platform.
2.1 You must provide truthful, accurate, and up-to-date information when registering. You are solely responsible for the information you provide and for keeping it current.
2.2 The platform offers the following access methods:
2.3 Each account is personal and non-transferable. Sharing access credentials is strictly prohibited.
2.4 You may remain signed in on multiple devices simultaneously. Active sessions can be viewed and individually revoked under Settings → Security. Revoking all sessions will sign you out of every device.
2.5 The platform applies automatic rate limiting on login attempts to protect against unauthorized access. Excessive failed attempts will result in a temporary lockout.
2.6 You will receive email notifications when: (i) your account is accessed from a new device or unrecognized location; (ii) your password is changed; or (iii) your primary email address is changed.
2.7 You may deactivate your account at any time. A deactivated account can be reactivated by signing in again. You may also request permanent deletion, subject to a 7 (seven) calendar-day cooling-off period as described in Section 9.
2.8 That's Me may suspend or terminate your access if you violate these Terms, without waiving any other remedies available under applicable law.
3.1 The user may link up to 5 (five) verified email addresses to the same account, under Settings → Identity. Certificates issued to any linked and verified email address will be automatically displayed on the user's profile.
3.2 You may request the merging of two separate accounts that you own. The merge is a 3-step process requiring ownership verification of both accounts via a code sent by email. Once confirmed, all certificates, followers, and associated data are transferred to the primary account, and the secondary account is deactivated.
3.3 Account merging cannot be undone by the user. If you believe a merge was performed without your authorization, you may request an administrative reversal within 90 (ninety) days by contacting support. An administrative reversal restores access to the secondary account but does not guarantee retroactive transfer of data generated after the merge.
3.4 Issuer (COMPANY) accounts cannot be merged with Recipient accounts.
4.1 The Issuer is solely responsible for the criteria, eligibility requirements, and content of the certificates it issues. That's Me acts as a processing platform and assumes no responsibility for the accuracy or merit of any credential issued.
4.2 To issue certificates, the Issuer provides the platform with recipient data: full name, email, and optionally, phone number. This data is used exclusively for certificate delivery and for creating the link on the recipient's profile.
4.3 Recipients who are not yet registered on the platform will receive an invitation by email and, where applicable, by WhatsApp. Their data will be retained as a pending invitation for up to 2 (two) years, after which it is automatically deleted. Once the recipient registers, all pending certificates are automatically added to their profile.
4.4 Each certificate is assigned a cryptographic integrity hash (SHA-256), publicly verifiable at thatsme.com.br/c/verify/[hash]. Certificates issued by organizations with active KYB verification embed the verification identifier in the hash, providing auditable proof of the issuer's identity at the time of issuance.
4.5 Certificates may have an expiration date set by the Issuer. Expired certificates remain on the recipient's profile with an expiration indicator but are no longer treated as active credentials.
4.6 The Issuer may revoke a certificate at any time. Revocation does not erase the certificate's record from the system but changes how it appears on the recipient's public profile.
4.7 Certificate issuance is subject to the quota of the Issuer's current plan. Issuances that exceed the quota are billed as overage at the rates in effect at the time of issuance, provided the Issuer has enabled overage billing.
5.1 Issuing organizations may request business identity verification (Know Your Business — KYB), available under Settings → Verification. Verification is voluntary and results in the display of a "Verified" badge on the profile and on issued certificates.
5.2 Verification may be obtained through two independent paths:
5.3 Brazilian organizations may optionally provide their CNPJ number for automatic validation via BrasilAPI. Organizations in other countries may submit their local registration number as a reference for manual review.
5.4 Verification is valid for 1 (one) year. Organizations are notified 30 (thirty) days before expiration. Once expired, the badge is automatically removed without public notification.
5.5 Documents submitted for verification are stored in a private environment and accessed exclusively by the That's Me administrative team for review purposes. They are not shared with third parties.
6.1 That's Me offers subscription plans (FREE, STARTER, PRO, BUSINESS, ENTERPRISE) with defined monthly issuance quotas. Billing is processed by Stripe and may be conducted in BRL or USD, as selected by the Issuer.
6.2 The FREE plan does not allow certificate issuance. A paid plan is required to issue certificates.
6.3 Issuances above the monthly quota are billed per issuance at the rates in effect on the date of issuance, provided the Issuer has enabled overage billing. The Issuer may set a maximum overage spending cap under Settings → Billing.
6.4 The WhatsApp add-on, available on the STARTER plan, enables certificate delivery via WhatsApp and changes the per-issuance overage rate.
6.5 Subscription management, including upgrades, downgrades, cancellations, and payment method updates, is handled directly through the Stripe Portal, accessible under Settings → Billing.
6.6 Canceling a subscription ends the ability to issue new certificates at the close of the current billing period. Previously issued certificates remain accessible on recipients' profiles.
7.1 Each Recipient has a public profile at thatsme.com.br/@[nickname] that displays their certificates. The user may set their profile to private at any time.
7.2 You are responsible for all content on your profile, including your photo, biography, and any other information. Publishing false, offensive, illegal, or rights-infringing content is prohibited.
7.3 All intellectual property rights in the platform, brand, software, interfaces, and proprietary content belong exclusively to That's Me Ltd. Use of the services does not grant or transfer any intellectual property rights to the user.
7.4 You grant That's Me a non-exclusive, worldwide license to display and process the data and content you provide, solely for the purpose of delivering the services.
8.1 The processing of personal data is governed by the Privacy Policy of That's Me, available at thatsme.com.br/privacy/policy, in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD) and, for users outside Brazil, with applicable local laws, including the European Union General Data Protection Regulation (GDPR).
8.2 Explicit consent for data processing is collected at the time of registration. The timestamp of acceptance is recorded in the platform's system.
8.3 Data subject rights — access, correction, portability, deletion, and withdrawal of consent — may be exercised by emailing [email protected], with a response within 15 (fifteen) days.
9.1 The user may deactivate their account at any time. Deactivation hides the public profile and blocks new sign-ins, but the account can be reactivated by signing in again.
9.2 The user may request permanent deletion of the account under Settings → Account. Deletion takes effect after a cooling-off period of 7 (seven) calendar days, during which you may cancel the request by signing in.
9.3 After the cooling-off period, your personal data is anonymized: name, email, photo, biography, and other identifiable information are replaced or removed. Issued certificates remain in the system with an anonymized recipient reference, preserving the integrity of the issuance record for the Issuer.
9.4 You may export your personal data before deletion in compressed JSON format, in accordance with Article 20 of the LGPD.
9.5 Email addresses of pending certificate recipients (not registered) are retained for up to 2 (two) years and automatically deleted after that period.
10.1 That's Me does not guarantee uninterrupted service availability but maintains reasonable maintenance and infrastructure monitoring practices.
10.2 That's Me is not liable for: (i) the content or criteria of certificates issued by Issuers; (ii) disputes between an Issuer and a recipient regarding the merit of a credential; (iii) failures in hardware, software, or networks outside the platform's control; or (iv) losses arising from unauthorized account access caused by a security failure attributable to the user.
10.3 In the context of certificate issuance, the Issuer is the data controller with respect to recipient data. That's Me acts as a data processor, as defined in Article 5, VII and X of the LGPD.
11.1 The user is prohibited from:
11.2 Violation of any of the above may result in immediate suspension or termination of the account, without waiving any other remedies available under applicable law.
12.1 Access to the That's Me public API is subject to additional terms available in the API documentation. Use of the API requires an authentication key and is subject to the usage limits of the contracted plan.
13.1 That's Me may update these Terms at any time. Material changes will be communicated by email and by notice on the platform at least 30 (thirty) days in advance. Continued use of the services after the notice period constitutes acceptance of the updated Terms.
14.1 If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
14.2 These Terms are governed by the laws of Brazil. Any disputes arising under these Terms shall be submitted to the courts of Belo Horizonte, Minas Gerais, except where mandatory consumer-protection rules require a different jurisdiction.
14.3 Questions, requests, and complaints: [email protected]
That's Me Ltd. — CNPJ 48.657.854/0001-71 — Belo Horizonte, MG, Brazil
Version 3.1 — March 27, 2026