1code Studio Terms of Service

1. Who we are and who you contract with

"1code" is two companies that work together.

• 1CODE X LTD is a company registered in England and Wales (company number 12828341), at 2 Centurion Way, Credenhill, Hereford HR4 7FF, United Kingdom. It runs 1code ID and 1code Mail for everyone, and publishes the 1code phone app on Google Play. It decides how personal data is used, so it is the data controller for everyone, wherever they live. The Privacy Policy explains this.
• 1code X (Pty) Ltd is a private company registered in South Africa (registration number 2025/981275/07), at 2 The Circus St, Three Rivers, Vereeniging 1935, South Africa.

Your contract is with:

• 1code X (Pty) Ltd, if you live in South Africa or your business is established there. Your contract with it covers everything you use and buy on 1code, including 1code ID and 1code Mail, which it has 1CODE X LTD run. It bills you in rand through Paystack.
• 1CODE X LTD, if you live anywhere else. It bills you through Stripe.

In these terms, "we", "us" and "our" mean the company you contract with. Where these terms talk about 1code ID, 1code Mail or personal data, they also mean 1CODE X LTD. "You" means the person who accepts these terms. If you accept them for an organisation, "you" also means that organisation.

The country you give when you sign up decides which company you contract with and which country section applies to you. It must be the country where you live or, for a business, where it is established. If you move, change it in your settings. 1code.co.za always shows the South African version of the website, and 1code.uk the UK version, but the web address you used does not change who you contract with.

2. What these terms cover

These terms cover 1code Studio: the website at 1code.studio, 1code.co.za and 1code.uk, the products in section 5, 1code ID, 1code Mail, the 1code phone app, the 1code connector and developer API, free sites at 1code.host, and domains you register through us. In these terms we call all of this "1code".

These policies are part of these terms:

• the Privacy Policy (1code.studio/privacy): what personal data we collect, why, how long we keep it, who helps us handle it, and your rights;
• the Acceptable Use Policy (1code.studio/acceptable-use): the full rules on what you may and may not do with 1code, including email;
• the Cookie Policy (1code.studio/cookies).

If a policy and these terms disagree, these terms apply, except on how we handle personal data, where the Privacy Policy applies.

Separate developer terms will apply before the 1code API and connector open to outside developers. If you build an app on 1code for other people to use, they will also apply to you.

You accept these terms when you create an account. When you accept, we record the version, the date and time, and the country you gave. We do the same each time you accept a new version.

How the agreement is made. You choose your country, read these terms and accept them, and then create your account. To buy a plan or a domain, you choose it, see a summary with the full price, and pay. Before you accept or pay, you can go back and correct any mistake, or stop. We keep the version you accepted, and you can ask us for a copy at any time. These terms are offered in English.

3. Who can use 1code

• You must be at least 18 and able to make a binding contract.
• If you accept these terms for an organisation, you confirm that you are allowed to, and the organisation is bound by them.
• You may not use 1code if the law, including sanctions law, does not let us provide it to you, or if we closed an earlier account of yours for breaking these terms, unless we agree.
• People you invite to a room, channel, file or meeting, and visitors to your site, may not need an account. You are responsible for inviting them and for how you handle their data (section 8). 1code is not designed for children. If you invite anyone under 18 to something you run, you are responsible for having their parents' or school's consent, and any other consent their law requires.

4. Your account and 1code ID

Signing in. You sign in to 1code with 1code ID. There is no password. In the 1code phone app, you sign in with your phone and your fingerprint or face. On the web, you may get a one-time code by email, or a request to approve the sign-in on your phone.

Your phone is your key. Keep your phone and its lock under your control. Anyone who can unlock your phone with a fingerprint or face enrolled on it can approve sign-ins and actions as you. Never approve a sign-in or an action you did not start.

Recovery. Your phone holds a private key that never leaves it. We never hold that key or your fingerprint or face, so we cannot reset your account or sign in as you. You can get back in on a new phone only through the key holders you chose in 1code ID. A key holder who confirms a recovery that was not really yours can let someone else take over your account, so choose them carefully. If you lose your phone and have no key holders, we cannot recover your account.

One person, one account. Your account is for you alone. Do not share it, and do not use a name that misleads people or belongs to someone else.

Companies and workspaces. If a company adds you to its workspace, the company (its owner and admins) runs that workspace. It can create, suspend, see and close the accounts and mailboxes in it, and it keeps your work content if you leave. Your personal account stays yours.

Your responsibility. You are responsible for what happens under your account, including what people you add, and agents and apps you connect, do. Tell us at once at privacy@1code.email if you think your account or phone has been misused.

5. The products

• Docs, Sheets, Slides and Pdf: write, calculate, present and work with PDFs, alone or together.
• Drive: keep and share your files.
• Mail: email at addresses like name@company.1code.email, or at your own domain. The rules are in section 11.
• Channels: messages and conversations for teams and groups.
• Rooms: presentations, meetings and paid rooms.
  • Tell people before you record, and get their consent where the law requires it. A room shows everyone when it is recording.
  • In a paid room you charge people to join, and you are the seller, as in Store below. Paid rooms need the same identity checks and payout account as Store.
  • We send people who sign up for your room only what they need, such as confirmations, links and reminders. Rooms is not for marketing email.
• Calendar: your schedule and bookings. If you connect Google Calendar, Google's terms also apply to that connection.
• Project: plan and track work on boards.
• Store: websites and online stores, including free sites at <name>.1code.host (section 10).
  • To sell, you must pass identity checks (KYC) and add a payout account in your own name or your business's name. We may ask for more documents, and we may pause selling while the checks are not complete or where we see signs of fraud.
  • When you sell, you are the seller. Your customers' contract is with you, not with us. You must show them your business details, your terms, your returns and refund policy and your privacy notice, and follow the consumer, tax and data-protection law where you sell.
  • Payments are processed by Paystack (South Africa) or Stripe (everywhere else), under their own terms. They may hold or delay payouts under their own rules.
• Books: make and send invoices. You are responsible for the amounts, the VAT and other tax on them, and keeping the records the law requires. Books does not give tax or accounting advice.
• 1code ID: phone-bound sign-in with fingerprint approvals (section 4).
• The 1code phone app: 1code ID, Mail and 1code Studio on your phone.
  • 1CODE X LTD publishes it on Google Play. An iPhone app is planned. Your contract for what the app does is with the company in section 1.
  • These terms apply to the app. The app store's own terms also apply to downloading it.
  • Apple and Google are not parties to these terms. They are not responsible for the app, its support, or any claim about it. They may enforce these terms against you as far as these terms relate to the app.
  • Keep the app up to date. Older versions may stop working.

Some features are marked as preview or "coming". A preview feature may change or end. A "coming" feature is not part of 1code until we release it.

What you need. 1code works in current versions of the major web browsers. 1code ID needs a phone with a fingerprint or face lock and secure key storage. The Android versions the phone app supports are listed on Google Play. An iPhone app is planned.

6. Free and paid plans

• What each plan includes. Some of 1code is free and some needs a paid plan. The plans page shows what each plan includes, its limits and its price before you pay. Prices for consumers include any tax that applies.
• Paying. Paid plans are paid monthly, in advance. Your plan starts when you pay and renews each month until you cancel. 1code X (Pty) Ltd bills South African customers in rand through Paystack. 1CODE X LTD bills everyone else through Stripe, in the currency shown at checkout. We email you a receipt for each payment. We never see or store full card numbers.
• Cancelling. You can cancel at any time in your billing settings. Cancelling stops future payments. You keep everything in your plan until the end of the month you have paid for. After that, your account moves to the free plan.
• Refunds. We do not refund part of a month, except where your country section or the law says otherwise.
• When a paid plan ends. You can still see and download everything you made. If you are over the free plan's limits, you cannot add more until you are back under them. We never delete content because you are over the limits without giving you at least 60 days' notice.
• Failed payments. If a payment fails, we try again and tell you, for 14 days. If it still has not gone through, your account moves to the free plan, and "When a paid plan ends" applies. We never delete content over unpaid fees without giving you at least 60 days' notice.
• Price changes. We tell you at least 30 days before a new price applies to you. You can cancel before it does.
• Free trials. If we offer a free trial, we remind you before it becomes a paid plan.
• Selling fees. If selling through Store or a paid room has a fee, we show it before you start selling.
• Domains are paid for separately (section 12).

7. Your content

• It stays yours. What you make, upload, record or send in 1code ("your content") belongs to you.
• Our permission to host it. You give us a worldwide, non-exclusive, royalty-free permission to host, store, copy, back up, convert (for example into the video sizes a player needs, or a preview picture), index for search, process, display and send your content. We use this permission only to run 1code for you and to show your content to the people you choose. It includes automatic checks for spam, malware and abuse.
• When the permission ends. It ends when you delete the content. There are three exceptions: backup copies we keep for the times in the Privacy Policy; copies other people already have, such as an email you sent or a file someone downloaded; and copies the law requires us to keep.
• What we do not do. We do not sell your content, show advertising, or use your content to train AI models.
• When people at 1code look at it. Only when you ask us to, when the law requires it, or when we need to check a report or a sign of harm (sections 13 and 14).
• Your rights to share it. You are responsible for having the rights to everything you upload, publish and share, including music, pictures and footage made by others. When you share or publish something, the people who can see it may copy it.
• Trash. Deleted files and mail wait in Trash for 30 days, in every app, where you can bring them back. After that they are deleted for good.
• Taking it with you. You can download your content at any time, including when you leave. Keep your own copies of anything you cannot afford to lose.
• Feedback. If you send us ideas or suggestions, we may use them freely, without owing you anything.
• What is ours. 1code's software, design and name belong to 1CODE X LTD or its licensors. These terms give you a personal right to use 1code for its purpose, and nothing more. Do not copy, take apart or reverse-engineer 1code, except where the law allows it.

8. Data you hold about other people

Sometimes you use 1code to handle other people's personal data, and you decide why and how it is used. Examples:

• your company's mailboxes;
• the people who sign up for, join or pay for your rooms;
• your Store's shoppers, and the people who fill in forms on your site;
• your clients in Books;
• the people you invite to a workspace you run for your organisation.

For that data you are the controller (the "responsible party" under POPIA), and we act for you as your processor (your "operator" under POPIA). You must have a lawful reason to collect it, tell people what you do with it, and answer their requests about it.

For that data, this section is our data-processing agreement with you under Article 28 of the GDPR and the UK GDPR, and section 21 of POPIA.

What it covers. The data is whatever personal data you or your people put in 1code: for example names, contact details, messages, files, recordings, sign-ups, orders and invoices about the people listed above. We store, host, send, show and otherwise process it to run 1code for you, for as long as you use 1code, and then for the deletion and backup times in the Privacy Policy.

We:

• use it only to run 1code for you, on your instructions, which are these terms and the settings you choose. If we think an instruction breaks data-protection law, we tell you at once;
• let only people who need it for that work see it, under a duty of confidence;
• protect it with the security measures in the Privacy Policy;
• use only the sub-processors named in the Privacy Policy. We tell you at least 30 days before we add or replace one. You may object, and stop using the affected feature or close your account. We bind each sub-processor, in a written contract, to data-protection duties as strict as these, and we stay responsible to you for what they do;
• move it out of the UK, the European Economic Area or South Africa only with the safeguards the law requires. These are the EU Standard Contractual Clauses (Decision 2021/914) with the UK Addendum, and section 72 of POPIA. Where the law requires those clauses between you and us, they are part of these terms, and they win over anything here that conflicts with them;
• help you answer people's requests, and meet your own duties on security, breach notices, impact assessments and consulting a regulator, as far as our part allows;
• tell you without undue delay after we learn of a breach that affects it, with what we know (under POPIA, as soon as there are reasonable grounds to believe the data was reached by someone not allowed to);
• at the end, let you download it, and then delete it when you delete it or close your account, after the backup times in the Privacy Policy, unless the law requires us to keep it;
• give you the information you reasonably need to show we keep these promises, and allow and help with reasonable audits by you or an auditor you choose.

9. AI agents and apps you connect

Your own AI. You can connect your own AI agent, such as Claude, ChatGPT or Gemini, to 1code. You do this through the 1code connector (MCP) or the developer API, using your own subscription or your own keys.

• We never hold your AI credentials. We never ask for, store or pass on the sign-in details, password or keys of your AI account. If anyone asks you for them in 1code's name, it is not us.
• You are responsible for what it does. An agent acts for you. You are responsible for what it does with the access you give it, as if you had done it yourself, unless our own failure caused the problem, for example an approval that did not work as we describe it. You choose what it may do, such as read, draft or send. Give it only the access it needs. You can disconnect it at any time.
• Approvals on your phone. By default, when an agent asks to send something outside 1code, pay, publish something publicly, or delete something for good, we ask you to approve it on your phone first. Sending inside 1code and moving something to Trash do not ask by default. You can change each of these settings. If you turn an approval off, the agent acts without asking and you are responsible for the result.
• Activity log. We keep a log of what each connected agent did, when, and what you approved or refused. You can read it at any time. We keep it for one year.
• Your AI provider. What your agent reads from 1code goes to your AI provider. Its own terms and privacy policy apply between you and it. We are not responsible for what your AI provider does with that data, or for mistakes your AI makes.
• Same rules as people. Agents must follow these terms, the Acceptable Use Policy and the sending limits. They may not scrape or bulk-copy 1code.

Keys you create. Treat the API keys and connections you create like passwords. If one leaks, revoke it. We may limit how much and how fast the API and connector are used.

Our own AI features. Any AI feature that 1code itself provides runs on our own API keys with our AI providers, never on your personal AI subscription. We tell you when you are dealing with AI. AI can be wrong, so check its output before you rely on it.

Apps built by others. Developers can build apps on 1code. An app is run by its developer under the developer's own terms, and the developer is responsible for it. An app gets only the access you approve, and you can remove it at any time. We may pause an app that causes harm. If we do, we tell the people who use it.

10. Free sites on 1code.host

• You can publish a free website at <name>.1code.host.
• The site is yours, and so is the responsibility for it. That includes what it says and shows, the privacy notice and cookie consent its visitors need, and consumer law if you sell.
• You may not use a name that pretends to be a person, a brand or 1code, or that misleads people. We may refuse such a name or take it back.
• We scan published free sites, with automatic tools and sometimes by hand, for phishing, malware, scams, impersonation and other harm.
• We may take a site offline or remove it without warning if it is harmful or illegal. Examples are phishing, malware, scams, impersonation, child sexual abuse material, and anything else the Acceptable Use Policy bans. We tell you what we did, why, and how to ask us to look again (section 14).
• A free site comes with no promise that it will always be online. We may change free-site features and limits with notice.

11. Email

This is a summary. The full rules are in the Acceptable Use Policy.

• Receiving. Addresses on 1code.email, such as name@company.1code.email, receive mail from anyone.
• Writing. From these addresses you can write to anyone on 1code. They never send mail outside 1code, not even replies. To write to people outside 1code, connect your own domain.
• Whose address it is. A company's addresses belong to the company (section 4). Addresses directly on 1code.email, such as hello@1code.email, belong to 1code. A closed address is never given to anyone else. We refuse company names that pass for a brand or an official body.
• No bulk or marketing email. 1code is not for bulk or marketing email, from any address, your own domain included.
• Limits. When you send outside 1code from your own domain, an email may have at most 10 recipients, and you may send at most 100 emails to people outside 1code per person per day. Each recipient counts separately, and a day is a calendar day in your account's time zone. If bounces or spam complaints rise, we may lower the limits or pause outside sending, for an address, a company or the whole service, until it is fixed.
• No fakes. No phishing, no spoofing, and no pretending to be 1code or any other brand or person.
• Checks. We check mail automatically for spam, fake senders and malware.
• Your own domain. From your own domain you can write outside 1code to your Contacts: people who write in, whom we add to your Contacts automatically, and people you add by hand. You can also reply to any email someone sent you. Mail from your own domain is sent through the providers named in the Privacy Policy. You must set up the DNS records we ask for.

12. Domains you register through us

• You own the domain. You can buy a domain name through us. We register it with a registrar we work with, such as domains.co.za or Name.com, in your name or your business's name. You are the owner (the "registrant"), not us.
• Registry rules. The registry's rules and the registrar's terms also apply, including their dispute rules, such as ICANN's UDRP or the .za alternative dispute resolution regulations. You must give true contact details. The registry may publish some of them in public domain records.
• Paying and renewing. We show the price before you buy. Domains are paid a year at a time and renew automatically unless you turn renewal off. We remind you before each renewal.
• Registering. We usually register a domain within minutes of your payment, and at most within one business day.
• No undoing a registration. A registration cannot be undone once it is made, so the fee for that year is not refundable, except where the law says otherwise.
• Expiry. If a domain is not renewed, it expires, and you may lose it for good.
• Moving it. You can move your domain to another provider at any time, subject to the registry's rules. For example, many domains are locked for up to 60 days after they are registered or moved. Closing your 1code account does not take your domain away. We give you what you need to move it.
• Suspending a domain. We suspend a domain only when the registry, the registrar or the law requires it, or when it is used for serious abuse, such as phishing or malware.

13. Acceptable use

The full rules are in the Acceptable Use Policy. In short, do not use 1code to:

• break the law, or infringe other people's rights, including their privacy;
• share child sexual abuse material (we report it to the authorities);
• harass or threaten anyone, or incite violence;
• spread malware, phish, scam, or pretend to be 1code, another brand or another person;
• send spam, bulk email or marketing email;
• resell, white-label or wrap 1code to offer it to others;
• scrape or bulk-copy 1code or the content on it, including to train AI models;
• probe, overload or attack 1code, get around its limits or security, or reach other people's accounts or files.

If you find a security problem, tell us at privacy@1code.email.

Reporting. Anyone can report content or behaviour that breaks these rules, by writing to privacy@1code.email or with the report link where we show one.

How we enforce the rules. We use automatic tools, such as spam and malware checks and the scanning of free sites, and people. Depending on the harm, we may remove content, limit features, pause sending, pause an app or account, or close an account.

14. Suspension and closing accounts

You. You can stop using 1code and close your account at any time, in your settings or by asking us. Download what you want to keep first. Closing your account ends any paid plan straight away, and you lose the rest of the month you paid for. To keep it, cancel your plan first and close your account when the month ends. We delete your data within 30 days, apart from backups for the times in the Privacy Policy. Your domains stay yours (section 12).

Us. We may limit, pause or close an account, site, app or piece of content if:

• you seriously or repeatedly break these terms or the Acceptable Use Policy;
• the law, a court or an authority requires it;
• it puts people, 1code or others at risk, for example through fraud, phishing, malware or a security threat.

Before we act. We tell you first and give you a chance to respond or fix the problem. We act first and tell you afterwards only when there is urgent harm, when the law does not let us tell you, or when telling you would help someone cause harm. A person reviews every pause or removal. If we pause something at once to stop harm in progress, a person reviews it straight after. Nothing with serious effects is decided by a computer alone.

When we act. We tell you what we did, why, which rule it was under, whether automatic tools were used, and how to ask us to look again. You can ask within 6 months. A person reviews your request.

Your content. Unless the content is illegal or the law stops us, we give you a reasonable chance to download your content before we delete it.

Refunds. If we close a paid account and you did not break these terms, we refund what you paid for the time you will not get.

15. Availability and changes to the products

• We work to keep 1code available and secure. We cannot promise it will always be available, uninterrupted or free of errors. Sometimes we need to stop parts of it for maintenance.
• We may change, improve or remove features, but only for a good reason: to improve 1code, to follow the law or a regulator, to keep 1code and its users safe, or because a provider we rely on changes or ends its service. Before we remove something important you rely on, we tell you in advance and give you a way to take your content with you.
• We give at least 60 days' notice before we end a whole product.

16. Our responsibility to you

This section limits our responsibility. Please read it carefully.

We provide 1code with reasonable care and skill.

What we never limit. Nothing in these terms limits or excludes our responsibility for:

• death or personal injury caused by our negligence;
• fraud or fraudulent misrepresentation;
• loss caused by our gross negligence, or that of anyone acting for us, where the law does not let us limit it;
• your rights as a consumer that the law does not let us take away;
• anything else the law does not let us limit.

Limits. Apart from that, and as far as the law allows:

• We are not responsible for loss we could not reasonably have foreseen when you accepted these terms.
• If 1code is down, has an error, or loses or delays data, we are responsible only where we did not use reasonable care and skill. Keep your own copies of anything you cannot afford to lose.
• We are not responsible for indirect or consequential loss. If you use 1code for a business, we are also not responsible for loss of profit, revenue, business, goodwill or opportunity.
• We are not responsible for the following, unless our own failure caused the loss:
  • what you, your audience, other users, or the agents and apps you connect do;
  • your AI provider, the services you connect (such as Google or Slack), or the app stores;
  • loss caused by someone unlocking your phone, or by a key holder you chose confirming a recovery;
  • events outside our reasonable control, such as power cuts, internet failures, natural disasters, war, government action, or the failure of a provider we rely on that we could not reasonably avoid.
• Free and preview features are provided "as is", as far as the law allows.
• The most we owe you for all claims connected with 1code, in any 12 months, is the greater of what you paid us in the 12 months before the claim, or £50 (R1,000 in South Africa).

If you use 1code for a business. You will cover our losses, and our reasonable costs, from claims by other people that are caused by your content, your sales, your sites, the agents and apps you connect, or your breach of these terms or the law. We will tell you about such a claim promptly and let you take part in dealing with it. This paragraph does not apply to consumers.

17. Changes to these terms

• We change these terms only for a good reason: to cover new or changed products, to follow a change in the law or a regulator's guidance, to keep 1code and its users safe, to reflect a change by a provider we rely on, or to make them clearer. Each version has a number and a date.
• We tell you about significant changes by email or in 1code at least 30 days before they apply. Prices follow section 6. We may make a change sooner when the law or an urgent security need requires it. Small changes that do not affect your rights, such as corrections and clearer wording, apply straight away.
• We ask you to accept each new version, and we record the version and your country.
• If you do not agree, you can stop using 1code and close your account before the change applies. If you have a paid plan, we refund what you paid for the time after the change applies.
• The current version is always at 1code.studio/terms. Ask us if you want an earlier version.

18. Law and disputes

• Talk to us first. Most problems can be sorted out quickly. Write to support@1code.studio. We reply and try to settle every complaint within 30 days.
• Law. These terms are governed by the law of England and Wales, unless your country section says otherwise.
• Courts. The courts of England and Wales deal with disputes. If you are a consumer, you keep the protection of the mandatory law of the country where you live, and you can bring a claim in the courts there. Your country section says more. If you contract with 1code X (Pty) Ltd, South African law and courts apply (see "South Africa").
• No arbitration. These terms have no arbitration clause and no class-action waiver.
• Authorities. You can always go to a consumer or data-protection authority where the law gives you that right.

19. General

• Whole agreement. These terms, with the policies in section 2 and what you agree when you buy a plan or a domain, are the whole agreement between you and us about 1code. If you are a consumer, what we told you about a plan or product before you bought it also counts, where the law says so.
• If a part does not work. If a court finds part of these terms unenforceable, the rest still applies.
• No waiver. If we do not enforce a term straight away, we can still enforce it later.
• Transfers. You may not transfer your account or these terms to anyone else without our agreement. We may transfer our rights and duties to another company that takes over 1code or the part of it you use, including between the two 1code companies. We will tell you, and your rights under these terms will not be reduced.
• Who can enforce these terms. Only you and the 1code companies, and Apple and Google as section 5 says.
• Language. These terms are written in English. If we translate them, the English version applies where the two differ, unless your law says otherwise.
• Notices. We send notices to the email address on your account or in 1code. You send notices to support@1code.studio or to the postal address of the company you contract with.

20. Contact us

• 1CODE X LTD, 2 Centurion Way, Credenhill, Hereford HR4 7FF, United Kingdom. Company number 12828341, registered in England and Wales. Not registered for VAT.
• 1code X (Pty) Ltd, 2 The Circus St, Three Rivers, Vereeniging 1935, South Africa. Registration number 2025/981275/07. Not registered for VAT.
• Phone: we help by email, not by phone. In South Africa, for legal notices only: to be confirmed — a South African phone number, which ECTA section 43 requires — owner
• Privacy, security, reports of abuse or illegal content, appeals and authorities: privacy@1code.email
• Help, billing and complaints: support@1code.studio