Terms and Conditions

Version 6 · Published 21 October 2026
This is an earlier version. Read the current version (7).
All documents Back Sign in

TUA Platform — Terms and Conditions

Effective date: 2026-10-14 Version: 6

Version 6 supersedes Version 5 (2026-09-25). It changes only the product's name: The Utility App is now called TUA Platform. See section 18 for the changes in this version and the versions before it. Earlier version notes remain in section 19.

These Terms and Conditions ("Terms") govern your access to and use of TUA Platform (the "Service"). By creating an account, signing in, or otherwise using the Service you agree to be bound by these Terms. If these Terms are not acceptable to you, please do not create an account or use the Service.

The Service is owned and operated by CelestiNet (celestinet.com). References in these Terms to "the Service operators", "we" or "us" mean CelestiNet.

The current authoritative version of these Terms is the one published in the Administrator panel of the Service. Administrators may update these Terms at any time; any changes take effect when the new version is published. Continued use of the Service after a change constitutes acceptance of the updated Terms. Where a change is material you may be required to re-accept these Terms before continuing to use the Service.

1. Accounts

  1. You must provide accurate registration information and keep it up to date.
  2. You are responsible for safeguarding your password and for all activity that occurs under your account.
  3. You must notify the administrators immediately of any unauthorised use of your account or any other breach of security.
  4. Accounts may be suspended or terminated at any time, with or without notice, for any breach of these Terms.
  5. An account is personal to you. Do not share your credentials, and do not let another person use your account.
  6. Where multi-factor authentication is available you are encouraged to enable it. If you mark a device as trusted, you are responsible for that device remaining under your control until the trust expires or you revoke it.

2. Access to apps

  1. The Service is a suite of separate apps. Access to each is granted individually by an administrator, and your account may have access to some apps and not others.
  2. Access may be granted permanently, for a fixed period, by redeeming a coupon, or on a trial basis. Where an app is offered in trial mode, only part of its functionality may be available.
  3. Access may be added, reduced or withdrawn by an administrator at any time. Where access lapses or is withdrawn, you may lose the ability to reach content you created in that app, even though the content itself is retained. Please export any content you need before access ends.
  4. If paid subscriptions are offered in your deployment, the applicable pricing, billing interval and cancellation terms will be presented to you at the point of purchase and form part of these Terms for that purchase. No payment is required to use apps an administrator has granted you.

3. Acceptable use

You agree not to:

  1. use the Service for any unlawful, fraudulent, harmful, defamatory, obscene, or otherwise objectionable purpose;
  2. attempt to gain unauthorised access to any part of the Service, other user accounts, other companies' workspaces, or to any systems or networks connected to the Service;
  3. interfere with, disrupt, or impose an unreasonable load on the Service or its infrastructure, including by circumventing rate limits;
  4. reverse engineer, decompile, or attempt to extract the source code of any part of the Service except to the extent permitted by applicable law;
  5. upload or transmit viruses, malware, or any other harmful code;
  6. use automated means to access the Service other than through an API key issued to you, and within the limits set for it (see section 8);
  7. use the Service to send unsolicited bulk email, or to relay mail you are not authorised to send;
  8. store credentials or data belonging to a third party without the right to do so.

4. Content you submit

  1. You retain ownership of any content you upload, store, or create within the Service ("Your Content").
  2. You grant the operators of the Service a limited, non-exclusive licence to host, store, process, and display Your Content solely for the purpose of operating and providing the Service to you.
  3. You represent and warrant that you have all necessary rights to submit Your Content and that doing so does not violate any law or third-party right.
  4. Your Content is not used to train AI models.
  5. Where Your Content contains personal information about other people, you are responsible for having a proper basis to store it and for responding to any request you receive about it. See the Privacy Policy, section 8.

5. Company workspaces and shared content

  1. The Service supports shared company workspaces. Content placed in a workspace — including chat messages, shared projects, shared lists, shared documents and shared Lore universes — is visible to the members of that workspace according to the roles their administrator has set.
  2. Deleting shared content may not undo earlier sharing. Once you have posted or shared something into a workspace, other members may already have seen, saved, quoted or exported it.
  3. Content contributed to a workspace remains available to that workspace after you leave it or delete your account, unless the workspace's administrator removes it.
  4. A workspace administrator can set the retention period for chat messages, can see membership and moderation information, and can remove members and content. If you use the Service through an organisation, that organisation's policies apply to you in addition to these Terms.
  5. You must not use a shared workspace to store material that its other members are not entitled to see.
  6. TUA Chat. Every account can use TUA Chat for direct messages and groups. TUA Chat Plus adds features such as company channels, and is available to an account that has been sold or granted it. If Plus ends, nothing you made is deleted: your conversations, messages and files are kept, company channels are shown locked, and they open again if Plus returns. A workspace's retention period (paragraph 4) still applies to its channels while they are locked.
  7. You can block other users and report them. The Service's administrators review reports and may remove content, end connections or restrict an account in response.

6. Connected third-party accounts

  1. You may choose to connect external accounts — for example a Google or Microsoft calendar, or your own email account — so that the Service can act on them on your behalf.
  2. Connecting an account is your decision and your authorisation. You are responsible for having the right to connect that account, and for complying with that provider's own terms.
  3. The Service will only use the access you granted, for the features you are using. You may disconnect at any time from within the Service, and you may additionally revoke access from the provider's own account settings.
  4. The Service operators are not responsible for the availability, behaviour, or content of a connected third-party service, or for data loss caused by one. Synchronisation may fail, lag, or be interrupted if the provider changes its interface or revokes access.
  5. Deleting your account may not revoke permission already granted to a connected provider. Please disconnect the account or revoke access through the provider.

7. AI-assisted features

  1. The Service includes optional AI features (AI Chat, AI Search, AI Tasks and AI-assisted tooling). Using them sends your prompt, and any content the feature is asked to work with, to the AI model configured for your deployment. See the Privacy Policy, section 1.6.
  2. AI output is generated automatically and may be inaccurate, incomplete, outdated or misleading. It is provided for assistance only. You must not rely on it as legal, financial, medical or other professional advice, and you are responsible for verifying anything you act on.
  3. Do not submit content to AI features that you are not permitted to disclose to the configured model provider.
  4. Automated AI Tasks act on a schedule you configure. You are responsible for what a task you created does, including any external calls it makes and any credentials you give it.

8. Programmatic access and API keys

  1. The Service may issue API keys for programmatic access. A key is shown to you once and is stored only as a hash — it cannot be recovered, only revoked and replaced.
  2. A key acts with the authority of the account or project it was issued for. You are responsible for activity carried out with a key issued to you, including by software you configure to use it.
  3. Do not commit a key to a source repository, embed it in client-side code, or share it. Revoke a key immediately if it may have been exposed.
  4. Programmatic access is subject to the same rate limits and acceptable-use rules as ordinary use.

9. The Password Manager

The Password Manager is designed to help you store and use credentials securely. Because access to encrypted credentials depends on the relevant keys, please read this section alongside the Privacy Policy, section 6.1. Where this section differs from the general provisions in sections 4, 10 and 11, this section applies to Password Manager entries.

9.1 Purpose and account security

  1. The Password Manager helps you store and retrieve credentials you are authorised to use. It does not replace the security of the accounts to which those credentials belong. Please use strong, unique passwords and enable multi-factor authentication where available.
  2. We take security seriously, but no electronic system can be guaranteed free from compromise. The security of an underlying account also depends on factors outside the Service.
  3. Please only store credentials that you are permitted to hold and use, and do not retain access after that permission has ended.

9.2 Your personal vault

  1. Personal vault entries are encrypted with a vault-specific key. That key is stored in encrypted ("wrapped") form, protected using your account password and, if you create one, your recovery key.
  2. CelestiNet does not hold a master key or a stored, usable copy of your personal vault key that would allow routine independent access. When you unlock your vault, its key is available in server memory for the unlocked session; it is not sent to your browser.
  3. Your vault locks after 24 hours without use. Changing your password re-wraps the vault key without moving or re-encrypting each entry.
  4. The technical limits of this protection, including the possibility of malicious code or unauthorised server access, are explained in the Privacy Policy, section 6.1.

9.3 If you no longer have your password or recovery key

  1. If an administrator resets your account password, or you use account recovery, your personal vault is disconnected rather than deleted. You may reconnect it using your previous password or a valid recovery key.
  2. If neither your previous password nor a valid recovery key is available, the encrypted personal vault cannot be recovered through the Service's normal recovery processes. CelestiNet does not have a master key or another means of restoring access to that vault. A backup of the encrypted vault does not remove the need for the relevant key.
  3. Please keep an independent copy of anything you cannot afford to lose. To the extent permitted by applicable law, and subject to section 13, CelestiNet is not responsible for loss resulting solely from the unavailability of the password and recovery key needed to unlock a vault.

9.4 Looking after your recovery key

  1. A recovery key is shown once and is not stored by the Service in retrievable form. Keeping it securely outside the Service gives you an alternative if you can no longer use your previous password.
  2. A recovery key can be used once. Using or replacing it, or reconnecting a vault, makes an earlier recovery key invalid; please save the new one when it is issued.
  3. We recommend creating a recovery key before relying on your personal vault for important credentials.

9.5 Company-shared entries

  1. Company-shared entries use a company key so authorised members can access them according to permissions set by the company's administrators. This is different from the arrangement for your personal vault.
  2. The company key is protected using separate key material: one part is kept in an encrypted file on the server, and another is kept encrypted within an authorised user's personal vault. CelestiNet does not ordinarily have direct access to that user-held part, and the server-side part alone is not sufficient to open the company key through the intended design. The Privacy Policy, section 6.1, explains this in more detail.
  3. Company administrators decide who can access, use, edit or reveal shared entries, including permissions by category and subsection. Sharing an entry into a company moves it from your personal vault to the company vault; it remains company content if your membership later ends.
  4. Revealing, changing and deleting a company entry is recorded in an audit trail available to company administrators. Reveal records are kept for 90 days and other records for 365 days. Deleted entries can be restored from the recycle bin for 30 days before permanent removal.

9.6 Leaving the Service or a company

  1. Shared company entries remain with the company when your membership ends or your account is deleted, in line with section 5.3.
  2. Deleting your account also deletes your personal vault. Please export any information you need before deleting your account or losing access; section 11.3 also applies.

9.7 Security limitations and loss of key material

  1. The Service is designed so that CelestiNet does not routinely view or retrieve vault passwords independently of an authorised user's access. Nevertheless, no software or server can be guaranteed immune to deliberate tampering or unauthorised access. Malicious code introduced into the Service, or an attacker who compromises the server and interferes with an unlocked session, could potentially capture credentials. We use automated tests intended to detect the presence of credential-capture behaviour in our software; these tests are an additional safeguard, not a guarantee against all vulnerabilities or attacks.
  2. If key material required to unlock a company vault is lost or damaged and cannot be recovered, the affected shared entries may become unreadable. Please retain independent copies of credentials essential to your operations.
  3. To the maximum extent permitted by applicable law and subject to section 13, CelestiNet's liability for events outside its reasonable control is limited as set out in these Terms. Nothing here excludes liability for CelestiNet's own unlawful conduct, negligence or failure to meet a duty where applicable law does not permit that exclusion.

10. Intellectual property

The Service, including all software, designs, text, graphics, and other materials (other than Your Content), is the property of CelestiNet (celestinet.com) or its licensors and is protected by intellectual property laws. No rights are granted to you other than the limited right to use the Service in accordance with these Terms.

11. Availability, backups and your own copies

  1. The Service is provided without any guaranteed level of availability. Maintenance, upgrades and outages may interrupt access without notice.
  2. The Service operators may take backups for their own operational purposes. Those backups are not a service to you, and no undertaking is given that any particular item can be restored, or restored to any particular point in time.
  3. Please keep your own copies of anything you cannot afford to lose. The Service provides a data export in Profile → Export your data; use it.

12. Disclaimer of warranties

The Service is provided "as is" and "as available". To the extent permitted by applicable law, we do not provide express or implied warranties, including implied warranties of merchantability, fitness for a particular purpose or non-infringement. We cannot guarantee uninterrupted, error-free or completely secure operation, or that every item of data will always be preserved.

13. Limitation of liability

To the maximum extent permitted by applicable law, CelestiNet is not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill arising from using or being unable to use the Service, even where the possibility of such loss was brought to our attention.

13.1 Total cap on liability

To the maximum extent permitted by applicable law, CelestiNet’s total aggregate liability to you for claims arising from these Terms or the Service, whether in contract, delict, statute or otherwise, and whether the loss is direct or indirect, is limited to the greater of:

  1. the total amount you paid CelestiNet for the Service in the twelve (12) months immediately before the event giving rise to the claim; or
  2. ZAR 1,000.

This is a single aggregate cap. It is not increased by the number of claims you bring, the number of apps involved, or the number of people bringing them.

13.2 What cannot be excluded, wherever you are

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited. Depending on where you live, that may include:

  • death or personal injury caused by negligence;
  • fraud or fraudulent misrepresentation;
  • liability under the Protection of Personal Information Act 4 of 2013 (POPIA);
  • your rights as a consumer under the Consumer Protection Act 68 of 2008, or under the mandatory consumer-protection law of the country where you live.

If any limitation in this section is found to be unenforceable, the rest of this section continues to apply, and that limitation applies to the maximum extent that is enforceable.

14. Indemnity

You agree to indemnify, defend, and hold harmless the Service operators from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in any way connected with:

  1. your access to or use of the Service;
  2. Your Content;
  3. your use of an API key issued to you; or
  4. your breach of these Terms.

15. Termination

You may stop using the Service at any time, and you may delete your account from Profile → Delete your account.

The Service operators may suspend or terminate your access at any time for any reason, including a breach of these Terms.

On termination:

  • your personal content is removed, subject to the retention exceptions in the Privacy Policy, section 5;
  • content you contributed to a shared company workspace remains with that workspace (see section 5.3);
  • any API keys issued to you stop working;
  • connected third-party accounts should be disconnected by you beforehand (see section 6.5).

Sections that by their nature should survive termination (including 4, 5.3, 9, 10, 12, 13, 14 and 16) will survive.

16. Governing law and jurisdiction

CelestiNet is a company registered in the Republic of South Africa. These Terms, and any dispute or claim arising out of or in connection with them or with the Service, are governed by the law of the Republic of South Africa, without regard to conflict-of-law principles.

You consent to the jurisdiction of the courts of the Republic of South Africa. CelestiNet may also bring proceedings in any other court that has jurisdiction, including the courts of the country where you are located.

The Service is offered worldwide. Choosing South African law does not restrict who may use the Service, where it may be bought, or where you may be located. It decides only which country's law is used to read this agreement.

Your local rights are not taken away. If you are a consumer, nothing in this section deprives you of the protection of any mandatory consumer-protection rules of the country where you live, nor of your right to bring proceedings there where the law of that country gives you one.

17. Changes to these Terms

The Service operators may modify these Terms at any time by publishing an updated version in the Administrator panel. Where changes are material, users may be required to re-accept the updated Terms before continuing to use the Service.

18. What changed in Version 6

Version 6 (2026-10-14) changes only the product's name. The Utility App is now called TUA Platform. It is the same Service, still owned and operated by CelestiNet, and nothing else in these Terms changes.

Earlier changes: Version 5 (2026-09-25)

Version 5 adds section 5.6 on TUA Chat — the chat app's new name — which every account can now use, and on its paid features, TUA Chat Plus, including what is kept when Plus ends. It adds section 5.7 on blocking and reporting other users. Nothing else in these Terms changes.

Earlier changes: Version 4 (2026-09-19)

Version 4 clarifies that company-shared passwords are not ordinarily accessible to CelestiNet merely through server-held key material. It describes the separate encrypted component held in a user's personal vault, explains the distinction between authorised operation and malicious interference, and makes the Password Manager and general Terms easier to read. The existing rights, retention periods and liability limits remain subject to applicable law.

Earlier changes: Version 3 (2026-09-16)

Version 3 named CelestiNet as the operator, added Password Manager terms, introduced the total liability cap and specified South African governing law. The encryption description given for company-shared entries in that version is superseded by section 9.5 above.

19. What changed in Version 2

Version 2 (2026-07-31) adds terms for features already present in the Service:

  • how app access is granted, and that it can be time-limited, coupon-based or trial-based, and can be withdrawn (section 2);
  • company workspaces: who can see shared content, that sharing is not undone by deletion, and that contributions stay with the workspace (section 5);
  • connected Google/Microsoft and email accounts, and how to revoke them (section 6);
  • AI-assisted features, and that their output must be verified before it is relied on (section 7);
  • API keys and programmatic access, replacing Version 1's blanket ban on automated access with a rule that permits it via an issued key (sections 3.6, 8);
  • availability, backups, and your responsibility for your own copies (section 11);
  • a statement that liability which cannot lawfully be excluded is not excluded (section 13);
  • what happens on termination (section 15);
  • accounts are personal and must not be shared; MFA and trusted devices (sections 1.5, 1.6).

Section numbering has changed. Version 1's sections 4–11 are now 9, 11, 12, 13, 14, 15, 16 and the contact section respectively.

20. Contact

The Service is owned and operated by CelestiNet — celestinet.com.

For questions about these Terms, contact the Service administrator through the contact form at /contact.