Terms

Your account

You need an email address you control. If you sign up yourself we confirm it with a code before there is an account; if you are invited, the invitation link confirms it. You are responsible for what gets done under your account and for the people you invite into your organization. An invitation expires after 7 days.

One organization has exactly one owner. The owner can transfer ownership, manage billing and delete the organization; no other member can.

What you may point it at

Cettara runs a real browser against a URL you give it and signs in with credentials you give it. That’s a powerful thing to hand over a service so the rule is simple and it’s not negotiable.

You also agree not to use Cettara to:

• Attack, overload or probe a system you are not authorised to test.
• Scrape or harvest data from a third party’s service.
• Break a rate limit, an access control or bot protection on a system you don’t own.
• Store material in evidence that is illegal to hold.
• Resell access or run the product on behalf of someone who has been suspended.

We can suspend an organization that breaks this. We’ll tell you why and a suspension deletes nothing.

Plans and payment

The Free plan is 3 seats and 50 AI credits a month without card. It has no end date and its AI credits renew each month; nothing is charged and no card is held so there’s nothing to cancel.

Paid plans auto-renew until cancelled, monthly or annually as you choose. Annual is ten months’ price. Payment is taken by Polar (our merchant of record), who invoice you and handle tax; we never see your card.

A seat is a person who can sign in. To add people beyond the seats your plan includes, add seats first; each extra seat is charged at the rate in the table above. An invitation that would go past your seats is refused.

AI credits and purchased packs

AI credits are what the parts of the product that ask the AI use: a checkpoint uses 1 (2 if it reads a downloaded PDF), a visual condition uses 1 each time it is reached, a “Do” step uses 3, and a “Task” step uses 1 for each turn it takes, up to the budget you set on it (at most 200), which is reserved when the run starts. They are the only part of the product that costs money to run so they’re the only part we meter. Steps that click, type or navigate cost nothing; manual testing costs nothing; reading anything at all costs nothing.

Paid plans include an allowance each month; the Free plan includes 50 AI credits each month. After that you can buy AI credits at 2¢ each (the price is the same no matter how many you buy).

• A pack is charged once and never renews.
• Purchased AI credits are valid for 12 months from the date of purchase and then expire.
• Purchased AI credits are not refundable (including on expiry and including if you cancel your plan).
• The allowance isn’t carried over. It is that month’s, on annual plans too — an annual subscription is topped up monthly not handed a year at once.
• AI credits that expire soonest are spent first. Your monthly allowance usually expires before a pack does, so it is normally used first, but a pack in its last month is spent before a fresh allowance.

When you run out of AI credits, new automated runs don’t start and say so. A run that has already started is never stopped midway: if it uses more AI credits than you have left, your balance goes below zero and your next allowance or purchase repays what was overspent first. Manual testing goes on, nothing you’ve already recorded is locked away — the evidence you paid for still reads.

Your data stays yours

Your test cases, runs, verdicts and evidence are yours. We process them to run the service, including checking how accurate the model’s verdicts are, and for nothing else. We don’t use your application’s data for training anything.

An owner can export the organization’s test cases, runs, verdicts, evidence index with hashes and audit log at any time without asking us. The export lists evidence files by their hash but does not include the files, and a section longer than 50,000 rows is cut short with a note saying so. How long each thing is kept and what deletion does are in the privacy policy.

What our evidence is, and is not

Cettara records what happened and attaches a model’s reasoning to each verdict. That record is real: audit log is tamper-evident by database privilege and hash-chained, evidence files are identified by SHA-256; each sign-off records who signed it.

Release decisions are yours. We give you the record on which to make them; we don’t make them and we aren’t liable for one that goes badly.

Availability

We want to keep the service up and we don’t currently offer a contractual uptime commitment. We’d rather say that plainly than publish a number we haven’t committed to measuring.

Some things in the product are marked not built yet. Anything so marked is an intent and not part of what you are paying for.

Liability

To the extent that law allows it, our liability in any twelve month period is limited to what you paid us in that period and we are not liable for indirect or consequential loss (lost profit, lost data and cost of release that went wrong).

Nothing here limits liability that cannot be limited lawfully; nothing here takes away rights you have as a consumer where those apply.

Ending it

You can cancel anytime — the plan runs out at the end of the period you have paid for and doesn’t renew. You can delete the org outright from Settings (this cancels the subscription immediately and deletes the data after 30 days).

We can suspend, close or delete an organization that breaks the acceptable use rules, doesn’t pay or puts the service or other customers at risk. A deletion we make takes effect at once, without the 30-day grace period, and also removes the accounts of members who belong to no other organization. Except where law or risk prevent it we will tell you first and give you a chance to export.

Changes

We may change these terms. If there is a change that matters to you we’ll tell you before it takes effect and the date at the top of this page is always the real one. Continuing to use Cettara after a change means you accept it; if not you can cancel and export.