Skip to main content
Legal

Terms of Service

The agreement between you and UBava OÜ.

Service Description

UBava operates a privacy relay for EU businesses to access American large language models (including Claude, GPT, Gemini, and Grok). Our service tokenizes and strips personally identifiable information (PII) before prompts leave your infrastructure, relays the sanitized request to the selected LLM provider, and restores original data when the response returns.

Account Requirements

  • You must represent a valid, registered company
  • Two payment methods are required on file
  • A minimum of 20 seats per account
  • First-invoice signup charges all of: (a) the first month of per-seat subscription, (b) the first year of the vault license, (c) a minimum prepaid credit load (see Pricing)
  • You are responsible for maintaining the security of your account credentials

Per-Seat Subscription + Annual Vault License + Prepaid Token Credits

UBava combines three independent charges:

  • Per-seat subscription: a recurring monthly fee charged per declared seat (see Pricing), minimum 20 seats. Access to the UBava Privacy Relay and every tool released to customers is gated on active subscription status.
  • Annual vault license: a flat recurring annual fee for the on-premise vault, network redirect configuration, and blocklist. Billed at signup and every 365 days thereafter.
  • Prepaid token credits: denominated in your account currency (USD or EUR). One-time purchases consumed as LLM prompts run through the Relay. A minimum initial credit load is required at signup; further top-ups optional. Credits do not expire.

Seat additions and removals apply at the next monthly billing cycle; no proration is applied. The annual vault license renews on the anniversary of the signup date and is non-refundable for the year in progress.

Acceptable Use

By using UBava, you agree to the following:

  • Business use only, the service is intended for commercial and professional use by registered companies
  • No illegal content, you may not use the relay to generate, transmit, or facilitate illegal content under EU or Estonian law
  • No bypass attempts, you may not attempt to circumvent, disable, or interfere with the PII protection mechanisms
  • No abuse, you may not use the service to conduct denial-of-service attacks, spam, or other disruptive activities

Violation of these terms may result in immediate account suspension without refund.

Artificial Intelligence Transparency

UBava deploys AI systems as defined by EU Regulation 2024/1689 (the AI Act). By using UBava services, you acknowledge the following:

  • AI outputs may contain errors, hallucinations, or biases inherent to large language model technology
  • You are responsible for reviewing all AI-generated outputs before acting on them or incorporating them into business decisions
  • UBava does not guarantee the accuracy, completeness, or fitness for purpose of any AI-generated content
  • UBava provides AI literacy information in accordance with Article 4 of the AI Act at ubava.ee/legal/ai-literacy

Prohibited and Restricted Uses

In addition to the acceptable use restrictions above, HiveGuard agents must not be used in the following high-risk domains as defined by Annex III of EU Regulation 2024/1689 without obtaining separate high-risk AI compliance certification:

  • Biometric identification or categorisation of natural persons (Annex III, 1)
  • Critical infrastructure management, including energy, water, gas, heating, and transport systems (Annex III, 2)
  • Education and vocational training scoring or student assessment that determines access to education (Annex III, 3)
  • Recruitment, hiring, or employment screening, including CV filtering, interview evaluation, and promotion decisions (Annex III, 4)
  • Credit scoring or creditworthiness assessment of natural persons (Annex III, 5(b))
  • Law enforcement profiling, predictive policing, or risk assessment of natural persons (Annex III, 6)
  • Migration, asylum, and border control decisions, including security risk assessments (Annex III, 7)
  • Administration of justice and democratic processes, including judicial decision support (Annex III, 8)

Using HiveGuard agents in the domains listed above without obtaining separate high-risk AI compliance certification constitutes a material breach of these Terms. UBava reserves the right to immediately suspend accounts found deploying agents in prohibited domains without prior notice.

Liability

Data Protection Responsibilities. Under GDPR Article 4(2), UBava is not a data processor for relay traffic. The VHH Privacy Air-Lock cascade tokenizes all PII on the customer's own Company Node before any query reaches UBava's infrastructure; UBava's relay handles synthetic data only. UBava remains a data controller solely for its own operational records (account email, company name, billing data) and meets its GDPR obligations for that limited scope. Each client is the sole data controller for the personal data they originate, including any PII they process through their own Company Node prior to tokenization. It is your responsibility to ensure that your use of AI services complies with applicable regulations, including GDPR, the AI Act, and any sector-specific rules.

UBava provides the service “as is” and makes no guarantees of uninterrupted availability.

  • Liability cap: UBava’s total aggregate liability is limited to the fees paid by you in the 12 months preceding the claim
  • Exception: This limitation does not apply to UBava’s own willful misconduct or gross negligence
  • UBava is not liable for indirect, incidental, consequential, or punitive damages arising from use of the service

Cancellation

  • You may cancel your account at any time by contacting info@ubava.ee
  • Upon cancellation, your account data will be deleted per our Privacy Policy
  • Token credits never expire. Unused balances remain available on your account indefinitely. Credits are not redeemable for cash and are not transferable between accounts.

Pricing

Prices are quoted in USD or EUR. The customer selects a billing currency at signup and the same currency applies to the subscription, the vault license, and prepaid credits for the life of the account.

  • Subscription: $50 per seat per month (or €50 per seat per month). Minimum 20 seats. First month is charged at signup; subsequent months bill on the same calendar day.
  • Annual vault license: $1,500 per year (or €1,500 per year), flat. Year one is charged at signup; renewals bill on the annual anniversary and are non-refundable for the year in progress.
  • Seat changes: take effect at the next monthly cycle. No proration.
  • Large-account discount: customers exceeding 100 seats qualify for a special discount tier; contact info@ubava.ee for details.
  • Prepaid token credits: minimum initial credit load of $500 (or €500) at signup. Additional top-ups any time in preset amounts of $500 / $1,000 / $5,000 / $10,000, or any custom amount between $500 and $10,000 (Stripe hard cap).
  • Token pricing: 50% markup on direct LLM usage (relay-only mode); 75% markup on agent-assisted usage (50% relay + 25% agent orchestration).

Company Details

UBava OÜ
Registry code: [Pending Registration]
Registered address: Tallinn, Estonia
Contact: info@ubava.ee
Supervisory authority: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)

Governing Law

These terms are governed by the laws of the Republic of Estonia.

Jurisdiction

Any disputes arising from these terms shall be resolved exclusively in the Harju County Court, Tallinn, Estonia.

Changes to These Terms

We may update these terms from time to time. Material changes will be communicated via email to the address on your account. Continued use of the service after changes take effect constitutes acceptance of the updated terms.

Last updated: 5 April 2026