Terms of Use

Last updated: 24 April 2026

1. Acceptance of Terms

By accessing or using Tokatos (“the Service”), operated by Nusax Pte. Ltd. (“we”, “us”, or “our”), you agree to be bound by these Terms of Use.

2. Service Description

Tokatos is an AI-powered secure infrastructure and workflow platform designed for accounting, corporate secretarial, and professional services firms (“Firms”). The Service processes data, documents, and messages to facilitate business operations, compliance tracking, and communication between Firms and their respective business clients (“Clients”).

3. Account Responsibilities, Acceptable Use & Confidentiality

  • B2B Use Only: The Service is strictly for business and professional use.
  • Confidentiality of Corporate Data: We recognize that Firms upload highly sensitive corporate and financial data (e.g., ACRA submissions, financial resolutions). This “Corporate Data” is strictly protected by our duty of confidence and is never sold, traded, or utilized outside the scope of providing the Service.
  • Prohibited Uses (Acceptable Use Policy): You agree not to use Tokatos to transmit any content that is defamatory, libelous, abusive, harassing, or otherwise unlawful. As a Network Service Provider under the Electronic Transactions Act (ETA), we hold zero liability for third-party content.
  • WhatsApp Policies: You must comply with all applicable Meta platform policies when utilizing the Tokatos WhatsApp agent.

4. Intellectual Property & Commercial Threats

  • All content, features, AI prompts, and workflow logic of the Service are proprietary and owned by Nusax Pte. Ltd.
  • You are strictly prohibited from attempting to reverse-engineer, decompile, scrape, or extract any of the platform's proprietary architecture, source code, or AI instruction sets.

5. Data Processing and “Deemed Consent”

  • Your Role as Data Controller: The Firm acknowledges that it is the Data Controller for all personal data processed through Tokatos regarding its own staff and its Clients' staff. The Firm is solely responsible for complying with the Personal Data Protection Act 2012 (PDPA).
  • Tokatos's Role as Data Intermediary (Processor): Tokatos acts strictly as a Data Intermediary processing data upon your instructions.
  • Deemed Consent via Employment: By assigning staff to use Tokatos, the Firm warrants that such usage is a requirement of the staff's employment, and consent to process their data is deemed given under the PDPA. Similarly, when a Client assigns their employees to interact with the Firm via Tokatos, consent is deemed given as part of their job scope.

6. AI-Generated Content & Professional Reliance

Tokatos uses artificial intelligence to triage messages, classify documents, draft documents, and orchestrate communications.

  • Provided “As-Is”: AI-generated content is provided strictly “as-is.”
  • Professional Verification Required: Professional users are solely responsible for reviewing, verifying, and approving any AI-generated outputs, calculations, or drafted resolutions before relying on them for financial, legal, or statutory compliance purposes.

7. Indemnification & Limitation of Liability

  • Indemnification: You agree to indemnify Nusax Pte. Ltd. against any claims arising from your breach of the PDPA, Meta's Business Policies, any third-party legal claims of defamation, libel, or abuse arising from content transmitted by you or your Clients through the platform, and any claims by your staff or your Client's staff regarding a lack of consent or transparency concerning the AI processing of their data.
  • Statutory & Regulatory Disclaimers: To the maximum extent permitted by law, Nusax Pte. Ltd. shall not be liable for any statutory fines, tax penalties, ACRA regulatory sanctions, or legal damages incurred by you or your Clients resulting from the use of, or reliance upon, AI-generated content or missed compliance milestones.
  • Liability Cap: In no event shall our total aggregate liability exceed the total amounts paid by you to us in the twelve (12) months immediately preceding the event giving rise to the claim. We exclude all indirect, consequential, or special damages.

8. Force Majeure & Third-Party Outages

Nusax Pte. Ltd. shall not be held liable for any delay, failure in performance, or interruption of the Service resulting directly or indirectly from any cause beyond our reasonable control. This includes, but is not limited to: Acts of God, natural disasters, pandemics, acts of war or terrorism, civil riots, labor strikes, widespread telecommunications or internet failures, and outages or disruptions of essential third-party API providers(including but not limited to Meta's WhatsApp Business API, Google Cloud Platform, or SendGrid).

9. Termination & Data Extraction

Upon termination of your account, you will be granted a 30-day window to export your Corporate Data and documents. The Firm acts as the Data Controller to its Clients, and is solely responsible for communicating with its Clients regarding data extraction and retention. Following this 30-day period, all Corporate Data will be permanently erased from our active servers.