Draft — not legal advice; to be reviewed by a qualified lawyer before publishing.

Terms of service

Version: 2026-10-31 (draft) Effective date: [EFFECTIVE DATE — set when published] Last updated: 31 October 2026 · All changes

1. Who we are and this agreement

Castling by Cakraya is operated from Malaysia by Cakraya, whose exact registered form is pending: [COMPANY LEGAL NAME], registration number [REGISTRATION NO.], address [ADDRESS] ("Cakraya", "we", "us"). Registration with the Companies Commission of Malaysia (SSM) is pending. These Terms are between you and Cakraya. The legal identity and registration details must be completed before this draft is published as an agreement.

By creating an account or using the hosted service, you agree to these Terms and the Acceptable use policy. Our Privacy policy and Cookie policy explain our data practices. If you act for a business, you confirm that you may bind it. You must be at least 18 and legally able to enter this agreement.

2. What Castling provides

Castling is a hosted, and self-hostable, workspace for teams of AI agents, projects, messaging and customer relationship management (CRM). Agents can use your own CLI tools, accounts and permitted API connections, including Claude, Codex, Gemini/Antigravity, DeepSeek and local models, depending on your setup. A runner on a computer or server you choose can execute tasks and access the files and tools you allow.

Features include linking WhatsApp, importing chat history and media, stickers, locally run voice-note transcription, reply suggestions, drafts and automatic replies in your style. Connected services can include Telegram, Messenger and Instagram inboxes and comments, and social publishing through Meta and TikTok's official APIs. Availability depends on configuration, platform permissions and approval; TikTok publishing does not mean Castling offers a TikTok direct-message inbox. Some integrations or hosted AI options may be unavailable or planned rather than enabled.

WhatsApp's linked-device connection works in a similar way to WhatsApp Web. It uses an unofficial integration and is not Meta's official WhatsApp Business Platform or Cloud API. The official Cloud API is a separate connection you must configure with the required Meta account and permissions. We are not affiliated with or endorsed by WhatsApp, Meta or the AI providers.

The beta may change, fail or be interrupted. We do not promise uninterrupted access, recovery of every message, or that every feature will remain available. Self-hosted software is also subject to its applicable software licence; these Terms do not replace that licence. A separate host controls its own deployment and data practices.

3. Accounts and access

Give accurate account details, protect your sign-in, devices, API keys, runners and connected-app permissions, and tell us promptly about suspected unauthorised access at [CONTACT EMAIL]. Do not share another person's login or circumvent access controls. You are responsible for activity you authorise through your account, team members, agents and integrations, subject to applicable law.

Invite only people who should have access, and review roles, chat membership, connected apps and agent permissions. Do not assume a number is private from your workspace administrator or the host operator. The current beta does not yet provide the planned complete per-person, per-number privacy and erasure controls. Do not connect sensitive personal or work communications unless the current access and processing arrangements are suitable and authorised.

4. Your messages, contacts and platform obligations

You must have the right to collect, import, use and disclose the messages, contacts, media and other data you put into Castling, including information about people who have no Castling account. Give required privacy notices, obtain consent where required, respect confidentiality and workplace rules, and establish any other lawful basis required for your processing. Owning a number or receiving a message does not itself authorise every AI use or onward disclosure.

You must comply with applicable laws and the terms and policies of WhatsApp, Meta, Telegram, AI providers and other connected services. Castling's technical ability to perform an action does not mean that platform permits it. You must check whether automation, broadcasts, imports and business use are permitted for your account and connection method.

Using the linked-device method, including automated replies, may cause WhatsApp to restrict, suspend or permanently ban your number. Pacing, opt-in and other safeguards cannot remove that risk. The official Cloud API also has policies and enforcement risks; it is not a guarantee against restrictions. You choose whether to connect a number and accept these platform risks. To the extent the law permits, Cakraya is not liable for platform restrictions, lost access to a number or resulting losses. Nothing here excludes liability or rights that cannot legally be excluded.

5. AI replies and agent actions

AI can produce incorrect, invented, biased, offensive or unsuitable content, misread tone, disclose information or take an unintended action. Transcripts, summaries, CRM labels and style estimates can also be wrong. Outputs are not professional advice and must be checked before you rely on them, especially for legal, medical, financial or other important decisions.

Replies sent in your name, including automatic replies that imitate your writing, are your responsibility. Review the recipient, content and attachments and your Manual, Draft, Auto, away, handover and approval settings. Automatic modes may send without your review of each message. Pause automation when human judgment is needed, and make any AI disclosure required by law or platform rules. Never authorise an agent to make significant decisions about another person's rights without appropriate human review and a lawful process.

Review tools, folder access, runner locations, model choices and fallback settings before enabling unattended work. Permission prompts, rate limits and the secret guard reduce particular risks but cannot guarantee safe or correct output. The secret guard masks detected secrets in supported AI-bound text; it does not guarantee detection of every secret or inspect every image, audio file or binary attachment.

6. Third-party accounts and providers

You supply and maintain your own authorised AI accounts, subscriptions, CLIs or API keys where needed and pay their charges. Subscription logins used by your CLI stay with that CLI on your runner; a cloud service may receive prompts and context even when a CLI runs on your computer. We do not grant rights to resell or use a provider account contrary to its terms. Hosted execution using user API keys remains subject to feature availability; it is not promised merely because a provider is listed.

Messages and relevant context may go to the selected AI provider and, where enabled, other services such as TypeSafe/Jev for triage. Providers, runners and connected platforms have their own terms, retention and data practices. Local inference avoids sending that inference request to a cloud model, but does not mean hosted Castling stores no data or that enabled integrations make no external requests. See the Privacy policy before choosing a setup.

7. Fees and billing

The beta is currently free. You remain responsible for your AI-provider, platform, hosting, connectivity and other third-party charges. Joining a waitlist creates no payment obligation or guarantee of access.

Paid plans, billing periods, taxes, renewal, cancellation and refund terms have not been finalised. Before charging for a plan, we will give you its price and billing terms and obtain the agreement required by law. There is no automatic conversion from this free beta to a paid subscription under these draft Terms.

8. Ownership and permission to process content

You retain your rights in content you provide. You give Cakraya a limited, non-exclusive permission to store, copy, transmit and process it, and to use service providers as needed, to provide, secure and support the features you request. This includes making AI requests and sending messages through your enabled connections. That permission is limited by our Privacy policy, applicable law and any separate data-processing agreement; it does not transfer ownership of your contacts' data to us.

As between you and Cakraya, you may use generated output to the extent permitted by law and the relevant provider terms. We do not promise that output is unique, protected by copyright or free of third-party rights. Cakraya and its licensors retain rights in Castling's software, branding and service materials, subject to applicable open-source licences. Feedback may be used to improve Castling without payment; do not include confidential third-party information in feedback.

9. Suspension, termination and data afterwards

You may stop using Castling and ask to close your account at [CONTACT EMAIL]. Disconnect external services and stop runners and automation you no longer want. Leaving a workspace or removing a number is not complete erasure of stored information.

We may restrict or suspend access to address abuse, security incidents, unlawful activity, a platform requirement or a material breach. Where practical, we will explain and allow a reasonable chance to resolve the issue; immediate action may be needed to prevent harm or comply with law. We may end the beta or a feature with reasonable notice where practical.

Closure, suspension or removal does not automatically erase all chats, contacts, derived data, logs, backups or provider-held copies. Some deletion requests currently require manual handling, and complete workspace/account erasure is not a self-service feature. Contact us for access, export or erasure requests; the Privacy policy describes current limitations and applicable rights. Keep independent copies of important information; no unlimited post-termination access or recovery period is promised. Terms that by nature continue, including ownership, accrued obligations and lawful liability limits, survive termination.

10. Warranties and liability

To the fullest extent permitted by law, the beta is provided "as is" and "as available", without warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, availability or error-free operation. We do not guarantee AI outcomes, message delivery, platform availability or freedom from account restrictions.

To that same extent, Cakraya is not liable for indirect or consequential losses, lost profits, revenue, goodwill or business opportunities, or loss of data arising from use of the service. Our total aggregate liability arising from the service or these Terms is limited to the greater of RM100 or the fees you paid Cakraya for the service in the 12 months before the event giving rise to the claim. Third-party fees are not fees paid to Cakraya.

These exclusions and the cap do not apply to fraud, deliberate misconduct, death or personal injury caused by negligence, or any liability that cannot lawfully be excluded or limited. They do not take away mandatory consumer remedies, privacy rights or other rights under applicable law.

11. Claims caused by misuse

To the extent permitted by law, you will indemnify Cakraya against third-party claims and reasonable costs caused by your unlawful use, unauthorised processing of another person's information, infringement of their rights or material breach of these Terms. This does not cover harm caused by Cakraya's own breach, negligence or misconduct. We will notify you of a claim, allow reasonable participation in its defence, and will not agree to a settlement imposing obligations on you without your consent. This clause is subject to mandatory consumer protections.

12. Malaysian law, changes and contact

Malaysian law governs these Terms. The courts of Malaysia have jurisdiction, subject to any mandatory right you have to bring a claim elsewhere or rely on your local consumer law. Please contact us first if you wish to resolve a concern; this does not limit your right to seek a remedy.

We may update these Terms as Castling changes. We will publish a new effective date and give reasonable notice of material changes through the service or available account contact details before they take effect, except where an urgent legal or security change is necessary. We will obtain renewed agreement where required by law. If you do not agree, stop using the affected service and contact us about closing your account and your data rights.

Contact Cakraya ([COMPANY LEGAL NAME]) at [CONTACT EMAIL] or [ADDRESS].