Terms of Service

1. Definitions

• “Application” refers to the Celatum desktop software, including all updates and associated documentation.
• “We”, “us”, “our” refers to Salvioni Digital Solutions, Switzerland.
• “You”, “user” refers to the individual or entity using the Application.
• “License” refers to the right to use the Application granted under a paid subscription.
• “PII” refers to personally identifiable information as defined by applicable data protection laws.

2. Acceptance of Terms

By downloading, installing, or using the Application, you agree to be bound by these Terms of Service. If you do not agree, do not use the Application.

If you are using the Application on behalf of an organization, you represent that you have the authority to bind that organization to these terms.

3. License Grant

3.1 Scope

Upon purchasing a license, we grant you a non-exclusive, non-transferable, revocable license to install and use the Application on the number of devices specified by your subscription plan.

3.2 Restrictions

You may not:

• Reverse-engineer, decompile, or disassemble the Application, except to the extent expressly permitted by applicable law (including Swiss Federal Act on Copyright, Art. 21).
• Modify, adapt, or create derivative works based on the Application.
• Sublicense, rent, lease, or lend the Application to third parties.
• Remove, alter, or obscure any proprietary notices or labels.
• Use the Application for any unlawful purpose or in violation of applicable data protection laws.
• Circumvent, disable, or interfere with the license validation mechanism.

3.3 Device binding

Each license is bound to a specific device via an opaque, hashed device identifier. You may deactivate a device from your license management dashboard and reactivate on a different device, subject to the limits of your plan.

4. Subscription and Payment

4.1 Plans

The Application is offered under paid subscription plans with different feature sets and device limits. Current plans and pricing are published at celatum.ch.

4.2 Billing

Subscriptions are billed in advance on a monthly or annual basis, as selected at purchase. Payment is processed by Stripe. We do not store your payment card details.

4.3 Renewal and cancellation

Subscriptions renew automatically unless cancelled before the end of the current billing period. You may cancel at any time through the Stripe customer portal accessible from your license management page. Cancellation takes effect at the end of the current billing period; no partial refunds are issued.

4.4 Refunds

We offer a 14-day refund window from the date of initial purchase. To request a refund, contact info@celatum.ch. Refunds are not available after the 14-day window or for renewal charges.

5. Local Processing and Data Responsibility

5.1 Local-first architecture

The Application processes all documents locally on your device. No document content, extracted text, detected PII, or anonymized output is transmitted to our servers or any third party. The machine-learning model runs offline after initial download.

5.2 Your responsibility

You are solely responsible for:

• The documents you choose to process with the Application.
• Ensuring that your use of the Application complies with all applicable data protection laws, including but not limited to the GDPR, the Swiss Federal Act on Data Protection (FADP), and any sector-specific regulations (e.g., Swiss banking secrecy, office secrecy, professional secrecy obligations, or other confidentiality rules applicable to your profession or organization).
• Verifying the accuracy and completeness of anonymization results before sharing or publishing redacted documents.
• Maintaining appropriate access controls on your device to prevent unauthorized access to documents and application data.
• Securely disposing of any temporary or output files produced by the Application.

5.3 No guarantee of complete redaction

The Application uses machine-learning models to detect PII. While we strive for high accuracy, no automated system can guarantee 100% detection of all PII in all documents. You must review the Application’s output and verify that all sensitive information has been appropriately redacted before sharing or publishing documents.

5.4 Software defects and output verification

Like all software, the Application may contain bugs or defects that could affect the accuracy of its output. Salvioni Digital Solutions declines all responsibility for any errors, omissions, or inaccuracies in the redacted, pseudonymized, or translated output produced by the Application, whether caused by software defects, model limitations, or any other reason.

It is the sole responsibility of the user to:

• Verify that the redacted output accurately reflects the intended anonymization of the original document.
• Compare the output text against the input text to ensure no unintended modifications, omissions, or data corruption has occurred.
• Perform a thorough human review of all output before sharing, filing, publishing, or relying upon it in any professional, legal, or regulatory context.

The Application is a tool designed to assist qualified professionals — it is not intended to replace human oversight, judgment, or verification. No automated system can guarantee error-free results.

6. Intellectual Property

The Application, including its code, design, documentation, and the GLiNER model integration, is the intellectual property of Salvioni Digital Solutions and is protected by Swiss and international copyright law.

Your license grants a right of use only. No ownership rights are transferred. All rights not expressly granted are reserved.

7. Updates

We may release updates to the Application to fix bugs, improve performance, or add features. The Application checks for available updates on startup (by contacting our server with no personal data beyond the HTTP request itself). Installation of updates is at your discretion.

We reserve the right to discontinue support for older versions. Critical security updates may require a minimum version for continued license validation.

8. Disclaimer of Warranties

The Application is provided “as is” and “as available”, without warranties of any kind, whether express, implied, or statutory, including but not limited to:

• Warranties of merchantability or fitness for a particular purpose.
• Warranties that the Application will detect all PII accurately.
• Warranties that the Application will operate without interruption or error.
• Warranties that the Application is free of bugs, defects, or vulnerabilities.
• Warranties regarding the security of data processed by the Application, beyond the reasonable technical measures described in our Privacy Policy.

9. Limitation of Liability

To the maximum extent permitted by applicable law, Salvioni Digital Solutions shall not be liable for:

• Any indirect, incidental, special, consequential, or punitive damages arising from the use of or inability to use the Application.
• Any loss of data, revenue, profits, or business opportunities.
• Any damages resulting from undetected PII in documents processed by the Application.
• Any damages resulting from bugs, defects, or errors in the Application’s output.
• Any damages resulting from the user’s failure to verify output before use.
• Any damages resulting from unauthorized access to your device or the Application’s local data.

Our total cumulative liability to you for all claims arising from the Application shall not exceed the amount you paid for the Application in the 12 months preceding the claim.

Nothing in these terms excludes or limits liability for gross negligence or intentional misconduct, or any liability that cannot be excluded under Swiss law (Art. 100 CO).

10. Indemnification

You agree to indemnify, defend, and hold harmless Salvioni Digital Solutions from any claims, damages, losses, or expenses (including reasonable legal fees) arising from:

• Your use of the Application in violation of these terms.
• Your violation of applicable laws, including data protection laws.
• Your failure to verify anonymization results before sharing documents.

11. Termination

We may terminate or suspend your license immediately, without prior notice, if you breach these terms. Upon termination:

• Your right to use the Application ceases immediately.
• You must uninstall the Application from all devices.
• Provisions that by their nature should survive termination (including Sections 6, 8, 9, 10, and 14) shall survive.

You may terminate by cancelling your subscription and uninstalling the Application.

12. Third-Party Components

The Application incorporates open-source components, including the ONNX Runtime and the GLiNER model. These components are subject to their respective licenses. A list of third-party licenses is available within the Application. Our terms do not alter the rights granted by those open-source licenses.

13. Changes to These Terms

We reserve the right to modify these terms at any time. Changes take effect when published on our website. Continued use of the Application after changes constitutes acceptance. Material changes will be communicated via the Application’s update notification at least 30 days before taking effect.

14. Governing Law and Dispute Resolution

These terms are governed by the laws of Switzerland, excluding its conflict-of-laws provisions and the United Nations Convention on Contracts for the International Sale of Goods (CISG).

Any dispute, controversy, or claim arising out of, or in relation to, this contract, including regarding the validity, invalidity, breach, or termination thereof, shall be resolved by arbitration in accordance with the Swiss Rules of International Arbitration of the Swiss Arbitration Centre in force on the date on which the Notice of Arbitration is submitted in accordance with those Rules.

• The number of arbitrators shall be one.
• The seat of the arbitration shall be Lugano, Switzerland.
• The arbitral proceedings shall be conducted in English.

15. Severability

If any provision of these terms is found to be unenforceable, the remaining provisions shall continue in full force and effect. The unenforceable provision shall be modified to the minimum extent necessary to make it enforceable while preserving its intent.

16. Entire Agreement

These Terms of Service, together with the Privacy Policy, constitute the entire agreement between you and Salvioni Digital Solutions regarding the Application, and supersede all prior agreements and understandings.

17. Contact

Salvioni Digital Solutions
Email: info@celatum.ch
Website: salvionisolutions.ch