Terms and Conditions

Version 7 · Last updated 26 October 2026
Earlier versions: 6
All documents Back Sign in

TUA Platform — Terms and Conditions

Effective date: 2026-10-26 Version: 7

Version 7 supersedes Version 6 (2026-10-14). It is a full revision, published on the same day as new versions of the Privacy Policy and the Refund Policy and two new documents, the Acceptable Use Policy and the Business Terms. Section 18 lists every change.

These Terms and Conditions ("Terms") govern your access to and use of TUA Platform (the "Service"). By creating an account, signing in, or otherwise using the Service you agree to be bound by these Terms. If these Terms are not acceptable to you, please do not create an account or use the Service.

The Service is owned and operated by CelestiNet (celestinet.com). "CelestiNet", "we" and "us" in these Terms mean CelestiNet. TUA Platform is a service that CelestiNet runs; you do not install it.

The documents that apply to you. These Terms are read together with:

  • the Privacy Policy (/legal/privacy), which says what information we keep and who receives it;
  • the Acceptable Use Policy (/legal/acceptable_use), which says what you may not do with the Service, and which forms part of these Terms;
  • the Refund Policy (/legal/refund), which applies when you buy something; and
  • the Business Terms (/legal/business_terms), which a company accepts through one of its administrators. For a company, and for a person who gives a bot to somebody else, the Business Terms apply on top of these Terms, and where the two differ the Business Terms apply.

Versions. CelestiNet may change these Terms by publishing a new version. Every change is a new version with its own number, and every earlier version stays readable on the Service. Where a change is material you are asked to accept the new version before you continue to use the Service.

1. Accounts

  1. Accounts are for adults. You must be 18 or older to have an account. You confirm this when you sign up. An administrator who makes an account for somebody else confirms that the person is 18 or older, and must not make an account for a child. The Privacy Policy, section 11, says what happens if we learn that an account belongs to a child.
  2. You must provide accurate registration information and keep it up to date.
  3. You are responsible for safeguarding your password and for all activity that occurs under your account.
  4. You must tell CelestiNet at once, through the contact form at /contact, of any unauthorised use of your account or any other breach of security.
  5. An account is personal to you. Do not share your credentials, and do not let another person use your account.
  6. Where multi-factor authentication is available you are encouraged to enable it. If you mark a device as trusted, you are responsible for that device remaining under your control until the trust expires or you revoke it.

  7. CelestiNet may suspend or close an account that breaks these Terms or the Acceptable Use Policy, or where the law requires it. Where we can, we tell you first and say why.

  8. Accounts nobody uses are deleted. If nobody signs in to an account for two years, we email it 30 days and 7 days before that date. On that date the account is marked for deletion and we email it again; signing in within the next 30 days keeps it. After that it is deleted, as section 15 describes.

2. Access to apps

  1. The Service is a suite of separate apps. Your account may have access to some apps and not others.
  2. You can have access to an app because: - you bought it in the App Store; - you redeemed a coupon; - CelestiNet granted it to you; - a company you belong to gave you a seat, or holds the app for all its members; or - the app has a free version that every account may use.
  3. Free versions and trials. Some apps have a free version with part of their features, and every account may try the paid version of such an app once, for 14 days. A trial ends on its own date; nothing you made is lost when it does.
  4. Access can be added, reduced or withdrawn, and access given for a period ends on its date. When your access to an app ends, the content you made in it is kept, but you may not be able to reach it through that app. Your data export (section 11.3) is available at any time.
  5. Purchases. The price is shown before you pay. The Refund Policy says who sells to you on each way of paying, what happens if you want your money back, and how cancelling works; it forms part of these Terms for anything you buy. Where an app is offered as a subscription, its billing period is shown before you pay. Nothing is payable for access CelestiNet or your company gives you.

3. Acceptable use

You must use the Service in line with the Acceptable Use Policy (/legal/acceptable_use). It forms part of these Terms. It covers unlawful and harmful use, security, the load you put on the Service, automated access, email, AI features and the people you serve with the Service.

4. Content you submit

  1. You retain ownership of any content you upload, store, or create within the Service ("Your Content").
  2. You grant CelestiNet a limited, non-exclusive licence to host, store, process, display and send Your Content as needed to operate and provide the Service to you. That includes sending it to the recipients you choose (for example the AI provider a bot uses, or a calendar you connect) and to the providers named in the Privacy Policy, section 4.
  3. You represent and warrant that you have all necessary rights to submit Your Content and that doing so does not violate any law or third-party right.
  4. CelestiNet never uses Your Content to train, fine-tune or improve any AI model, for itself or for anybody else. When you use a bot that another person or company set up, its owner can see the ratings you give its answers together with the conversation around them, and may use what it holds to make training material for its own bots (section 7.5).
  5. Where Your Content contains personal information about other people, you are responsible for having a proper basis to store it and for responding to any request you receive about it. See the Privacy Policy, section 8.

5. Companies and shared content

  1. A company on the Service is a shared workspace that its administrators run. Content shared into a company (for example notes, documents, projects, calendars, link collections, Lore universes, passwords and TUA Chat conversations) is visible to its members according to the access its administrators set. Sharing something with named people (for example a shared list, diary entry or reminder) is separate: only the people you choose see it.
  2. Deleting shared content may not undo earlier sharing. Once you have posted or shared something, other people may already have seen, saved, quoted or exported it.
  3. Content contributed to a company remains with that company after you leave it or delete your account, unless the company removes it. It no longer names you as its owner.
  4. A company's administrators can see its members, add and remove them, set how long the company's TUA Chat conversations are kept, and remove messages in the company's channels. Direct messages and group conversations have no moderator. If you use the Service through an organisation, that organisation's own policies also apply to you.
  5. You must not use a company to store material that its other members are not entitled to see.
  6. TUA Chat. While the free version of TUA Chat is offered, every account can use it for direct messages and groups. TUA Chat Plus adds features such as company channels, and is available to an account that has been sold or granted it. If Plus ends, nothing you made is deleted: your conversations, messages and files are kept, company channels are shown locked, and they open again if Plus returns. A company's retention period (paragraph 4) still applies to its channels while they are locked.
  7. You can block other users and report them. CelestiNet reviews reports and may end a connection, stop a person contacting you, or suspend an account in response. Messages inside a company are removed by that company's own administrators.
  8. A company accepts the Business Terms through one of its administrators. CelestiNet's support may act on a company as the Business Terms describe, for example to suspend it, or to appoint an administrator when it has none.
  9. When a company closes, its administrators can download its data for 30 days. After that the company and its data are deleted.

6. Connected third-party accounts

  1. You may choose to connect external accounts, for example a Google or Microsoft calendar, a calendar server or feed, or your own email account, so that the Service can act on them on your behalf.
  2. Connecting an account is your decision and your authorisation. You are responsible for having the right to connect that account, and for complying with that provider's own terms.
  3. The Service asks for the access each feature needs, and the provider shows you what that is before you agree. Connecting a calendar gives access to your calendars. Connecting a Gmail account to the Email app gives full access to that mailbox, because the Email app reads, sends, moves and deletes your mail. The Service uses the access only for the feature you connected it to.
  4. You may disconnect at any time from within the Service; we then delete the access we stored. The permission may still be listed in your account at the provider until you remove it there too.
  5. CelestiNet is not responsible for the availability, behaviour, or content of a connected third-party service, or for data loss caused by one. Synchronisation may fail, lag, or be interrupted if the provider changes its interface or revokes access.
  6. Deleting your account deletes the access we stored for your connected accounts. The permission may still be listed at the provider until you remove it there.

7. AI features

  1. Bots. The Service includes AI apps (AI Chat, AI Search, AI Tasks and AI-assisted tooling). They work through bots. A bot is set up by a person or a company (the bot's owner), who chooses the AI model and its provider and supplies the key that pays for it. CelestiNet does not supply, sell or pay for the use of any AI model.
  2. What is sent. When you use a bot, your message, any files you attach, the conversation so far and the instructions the bot's owner wrote are sent to the provider the bot uses. The bot's page names that provider. The bot's settings decide whether it is also told who you are (your name and email address) and where and when you are (your time zone, the date and time there, your country and the web search region). The Privacy Policy, section 1.6, says more.
  3. Web search. If a bot's owner has turned on web search, the bot's searches go to the search service its owner chose, and the bot may open web pages to read them.
  4. AI answers can be wrong. Answers are labelled as written by AI. They are generated automatically and may be inaccurate, incomplete, outdated or misleading. You must not rely on them as legal, financial, medical or other professional advice, and you are responsible for checking anything you act on. The Acceptable Use Policy sets rules for high-risk uses.
  5. Ratings and training material. When you rate an answer, the rating and the conversation around it go to the bot's owner. The owner may use what it holds, including its users' conversations and ratings, to make training material for its own bots; it must have the right to do so and must tell its users. CelestiNet never trains any model on anybody's content (section 4.4).
  6. Reporting an answer. You can report an answer you think is wrong, harmful or offensive. The report goes to the bot's owner, who decides what to do. CelestiNet does not review AI answers; the provider's own filters may refuse to answer.
  7. How long conversations are kept is set by the bot's owner: until you delete them, or 30, 90 or 365 days.
  8. Do not send content to a bot that you are not permitted to disclose to the provider it uses.
  9. Automated AI Tasks act on a schedule you configure. You are responsible for what a task you created does, including any external calls it makes and any credentials you give it.

8. Programmatic access and API keys

  1. Some apps issue API keys for programmatic access. A key is shown to you once and is stored only as a hash; it cannot be recovered, only revoked and replaced.
  2. A key acts for the account, project or AI environment it was made for. You are responsible for activity carried out with a key issued to you, including by software you configure to use it.
  3. AI API keys are issued only to CelestiNet's own staff. Each has its own scopes, its own limit on requests per minute and an optional expiry, and it stops working when the person who made it no longer holds the AI App or their account is deleted.
  4. Do not commit a key to a source repository, embed it in client-side code, or share it. Revoke a key immediately if it may have been exposed.
  5. Each key has its own limits, and the Acceptable Use Policy applies to everything done with it.

9. The Password Manager

The Password Manager is designed to help you store and use credentials securely. Because access to encrypted credentials depends on the relevant keys, please read this section alongside the Privacy Policy, section 6.1. Where this section differs from the general provisions in sections 4, 10 and 11, this section applies to Password Manager entries.

9.1 Purpose and account security

  1. The Password Manager helps you store and retrieve credentials you are authorised to use. It does not replace the security of the accounts to which those credentials belong. Please use strong, unique passwords and enable multi-factor authentication where available.
  2. We take security seriously, but no electronic system can be guaranteed free from compromise. The security of an underlying account also depends on factors outside the Service.
  3. Please only store credentials that you are permitted to hold and use, and do not retain access after that permission has ended.

9.2 Your personal vault

  1. Personal vault entries are encrypted with a vault-specific key. That key is stored in encrypted ("wrapped") form, protected using your account password and, if you create one, your recovery key.
  2. CelestiNet does not hold a master key or a stored, usable copy of your personal vault key that would allow routine independent access. When you unlock your vault, its key is available in server memory for the unlocked session; it is not sent to your browser.
  3. Your vault locks after 24 hours without use. Changing your password re-wraps the vault key without moving or re-encrypting each entry.
  4. The technical limits of this protection, including the possibility of malicious code or unauthorised server access, are explained in the Privacy Policy, section 6.1.

9.3 If you no longer have your password or recovery key

  1. If an administrator resets your account password, or you use account recovery, your personal vault is disconnected rather than deleted. You may reconnect it using your previous password or a valid recovery key.
  2. If neither your previous password nor a valid recovery key is available, the encrypted personal vault cannot be recovered through the Service's normal recovery processes. CelestiNet does not have a master key or another means of restoring access to that vault. A backup of the encrypted vault does not remove the need for the relevant key.
  3. Please keep an independent copy of anything you cannot afford to lose. To the extent permitted by applicable law, and subject to section 13, CelestiNet is not responsible for loss resulting solely from the unavailability of the password and recovery key needed to unlock a vault.

9.4 Looking after your recovery key

  1. A recovery key is shown once and is not stored by the Service in retrievable form. Keeping it securely outside the Service gives you an alternative if you can no longer use your previous password.
  2. A recovery key can be used once. Using or replacing it, or reconnecting a vault, makes an earlier recovery key invalid; please save the new one when it is issued.
  3. We recommend creating a recovery key before relying on your personal vault for important credentials.

9.5 Company-shared entries

  1. Company-shared entries use a company key so authorised members can access them according to permissions set by the company's administrators. This is different from the arrangement for your personal vault.
  2. The company key is protected using separate key material: one part is kept in an encrypted file on the server, and another is kept encrypted within an authorised user's personal vault. CelestiNet does not ordinarily have direct access to that user-held part, and the server-side part alone is not sufficient to open the company key through the intended design. The Privacy Policy, section 6.1, explains this in more detail.
  3. Company administrators decide who can access, use, edit or reveal shared entries, including permissions by category and subsection. Sharing an entry into a company moves it from your personal vault to the company vault; it remains company content if your membership later ends.
  4. Revealing, changing and deleting a company entry is recorded in an audit trail available to company administrators. Reveal records are kept for 90 days and other records for 365 days. Deleted entries can be restored from the recycle bin for 30 days before permanent removal.

9.6 Leaving the Service or a company

  1. Shared company entries remain with the company when your membership ends or your account is deleted, in line with section 5.3.
  2. Deleting your account also deletes your personal vault. Please export any information you need before deleting your account or losing access; section 11.3 also applies.

9.7 Security limitations and loss of key material

  1. The Service is designed so that CelestiNet does not routinely view or retrieve vault passwords independently of an authorised user's access. Nevertheless, no software or server can be guaranteed immune to deliberate tampering or unauthorised access. Malicious code introduced into the Service, or an attacker who compromises the server and interferes with an unlocked session, could potentially capture credentials. We use automated tests intended to detect the presence of credential-capture behaviour in our software; these tests are an additional safeguard, not a guarantee against all vulnerabilities or attacks.
  2. If key material required to unlock a company vault is lost or damaged and cannot be recovered, the affected shared entries may become unreadable. Please retain independent copies of credentials essential to your operations.
  3. To the maximum extent permitted by applicable law and subject to section 13, CelestiNet's liability for events outside its reasonable control is limited as set out in these Terms. Nothing here excludes liability for CelestiNet's own unlawful conduct, negligence or failure to meet a duty where applicable law does not permit that exclusion.

10. Intellectual property

The Service, including all software, designs, text, graphics, and other materials (other than Your Content), is the property of CelestiNet (celestinet.com) or its licensors and is protected by intellectual property laws. No rights are granted to you other than the limited right to use the Service in accordance with these Terms.

The Service uses third-party software components. Each keeps its own licence; they are listed, with their notices, at /legal/third-party.

11. Availability, backups and your own copies

  1. The Service is provided without any guaranteed level of availability. Maintenance, upgrades and outages may interrupt access without notice.
  2. CelestiNet takes backups for its own operational purposes. Those backups are not a service to you, and no undertaking is given that any particular item can be restored, or restored to any particular point in time.
  3. Please keep your own copies of anything you cannot afford to lose. The Service provides a data export in Profile → Your data → Export my data; use it. The export holds the data the apps keep for you personally. It does not hold content you shared into a company or TUA Chat messages.

12. Disclaimer of warranties

The Service is provided "as is" and "as available". To the extent permitted by applicable law, we do not provide express or implied warranties, including implied warranties of merchantability, fitness for a particular purpose or non-infringement. We cannot guarantee uninterrupted, error-free or completely secure operation, or that every item of data will always be preserved.

13. Limitation of liability

To the maximum extent permitted by applicable law, CelestiNet is not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill arising from using or being unable to use the Service, even where the possibility of such loss was brought to our attention.

13.1 Total cap on liability

To the maximum extent permitted by applicable law, CelestiNet’s total aggregate liability to you for claims arising from these Terms or the Service, whether in contract, delict, statute or otherwise, and whether the loss is direct or indirect, is limited to the greater of:

  1. the total amount you paid CelestiNet for the Service in the twelve (12) months immediately before the event giving rise to the claim; or
  2. ZAR 1,000.

This is a single aggregate cap. It is not increased by the number of claims you bring, the number of apps involved, or the number of people bringing them.

13.2 What cannot be excluded, wherever you are

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited. Depending on where you live, that may include:

  • death or personal injury caused by negligence;
  • fraud or fraudulent misrepresentation;
  • liability under the Protection of Personal Information Act 4 of 2013 (POPIA);
  • your rights as a consumer under the Consumer Protection Act 68 of 2008, or under the mandatory consumer-protection law of the country where you live.

If any limitation in this section is found to be unenforceable, the rest of this section continues to apply, and that limitation applies to the maximum extent that is enforceable.

14. Indemnity

You agree to indemnify, defend, and hold harmless CelestiNet from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in any way connected with:

  1. your access to or use of the Service;
  2. Your Content;
  3. your use of an API key issued to you; or
  4. your breach of these Terms.

15. Suspension and deleting your account

You may stop using the Service at any time, and you may delete your account from Profile → Your data → Delete my account.

CelestiNet may suspend or close an account as section 1.7 says. A suspended account keeps its content, but nobody can sign in to it.

When your account is deleted:

  • your personal content is removed, subject to the exceptions in the Privacy Policy, section 5. Your orders, receipts and invoices are kept, as that section explains;
  • content you contributed to a company remains with that company (section 5.3);
  • every API key issued to your account stops working;
  • the access we stored for your connected accounts is deleted (section 6.6).

Sections that by their nature should survive (including 4, 5.3, 9, 10, 12, 13, 14 and 16) survive the end of your use of the Service.

16. Governing law and jurisdiction

CelestiNet is a company registered in the Republic of South Africa. These Terms, and any dispute or claim arising out of or in connection with them or with the Service, are governed by the law of the Republic of South Africa, without regard to conflict-of-law principles.

You consent to the jurisdiction of the courts of the Republic of South Africa. CelestiNet may also bring proceedings in any other court that has jurisdiction, including the courts of the country where you are located.

The Service is offered worldwide. Choosing South African law does not restrict who may use the Service, where it may be bought, or where you may be located. It decides only which country's law is used to read this agreement.

Your local rights are not taken away. If you are a consumer, nothing in this section deprives you of the protection of any mandatory consumer-protection rules of the country where you live, nor of your right to bring proceedings there where the law of that country gives you one.

17. Changes to these Terms

CelestiNet may change these Terms by publishing a new version. Every change is a new version, and every earlier version stays readable on the Service. Where a change is material, you are asked to accept the new version before you continue to use the Service.

18. What changed in Version 7

Version 7 is a full revision. Every statement in it was checked against how the Service works today. In plain words:

  • The other documents. The acceptable-use rules moved to their own document, the Acceptable Use Policy (section 3). The new Business Terms, accepted by a company, apply on top of these Terms (preamble, section 5.8). Every earlier version of these Terms stays readable (preamble, section 17).
  • Accounts are for people 18 or older, and an administrator must not make an account for a child (section 1.1). An account nobody signs in to for two years is deleted after warning emails (section 1.8). Suspension and closing now say the same thing in sections 1.7 and 15.
  • Access to apps lists every way you can have an app, including buying it, a company seat and an app's free version; the old "trial mode" is replaced by free versions and one 14-day trial (section 2).
  • Purchases point to the Refund Policy for who sells to you and how refunds work (section 2.5). The words "your deployment" are gone: TUA Platform is a service CelestiNet runs.
  • AI features are rewritten (section 7): a bot's owner chooses its AI model and provider and pays for it; what is sent to that provider, including the information a bot's settings allow about you; web search through the service the owner chose; the AI label on answers; ratings and training material; reporting an answer to the bot's owner; and how long conversations are kept. CelestiNet never trains any model on anybody's content (section 4.4).
  • Companies (section 5): what can be shared, that messages are removed by a company's own administrators, what CelestiNet's support may do, and the 30 days a closing company has to download its data.
  • Connected accounts say which access each one asks for, and that disconnecting deletes the access we stored (section 6).
  • API keys: AI API keys are issued only to CelestiNet's own staff, and each key has its own limits (section 8). Version 6 said programmatic access had the same limits as ordinary use, which was not true for AI API keys.
  • Third-party components keep their own licences, listed at /legal/third-party (section 10).
  • Your data export says what it holds (section 11.3).
  • Deleting your account is described separately from suspension, including that orders and invoices are kept (section 15).
  • Sections 9 (the Password Manager), 12, 13 and 14 are unchanged.

Earlier changes: Version 6 (2026-10-14)

Version 6 (2026-10-14) changes only the product's name. The Utility App is now called TUA Platform. It is the same Service, still owned and operated by CelestiNet, and nothing else in these Terms changes.

Earlier changes: Version 5 (2026-09-25)

Version 5 adds section 5.6 on TUA Chat — the chat app's new name — which every account can now use, and on its paid features, TUA Chat Plus, including what is kept when Plus ends. It adds section 5.7 on blocking and reporting other users. Nothing else in these Terms changes.

Earlier changes: Version 4 (2026-09-19)

Version 4 clarifies that company-shared passwords are not ordinarily accessible to CelestiNet merely through server-held key material. It describes the separate encrypted component held in a user's personal vault, explains the distinction between authorised operation and malicious interference, and makes the Password Manager and general Terms easier to read. The existing rights, retention periods and liability limits remain subject to applicable law.

Earlier changes: Version 3 (2026-09-16)

Version 3 named CelestiNet as the operator, added Password Manager terms, introduced the total liability cap and specified South African governing law. The encryption description given for company-shared entries in that version is superseded by section 9.5 above.

Earlier changes: Version 2 (2026-07-31)

Version 2 added terms for features already present in the Service: how app access is granted and withdrawn; company workspaces; connected Google, Microsoft and email accounts; AI-assisted features; API keys and programmatic access; availability and backups; liability that cannot lawfully be excluded; termination; and that accounts are personal.

19. Contact

The Service is owned and operated by CelestiNet — celestinet.com.

For questions about these Terms, contact CelestiNet through the contact form at /contact.