Terms of service
Effective date: September 23, 2026
Last updated: October 30, 2026
These Terms of Service (the "Terms") are an agreement between you and Cure AI, LLC, a Florida limited liability company doing business as OneStar ("Cure AI", "we", "us" or "our"). They govern your use of the OneStar website at onestar.sh, the OneStar app, the API at api.onestar.sh, public report pages, feedback forms, the form widget at embed.onestar.sh, form and conversation pages, and the emails we send (together, the "Services").
By creating an account, starting a report or otherwise using the Services, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Services.
Please read Section 17 carefully. It requires most disputes to be resolved by individual binding arbitration and waives class actions and jury trials, unless you opt out within 30 days.
1. Eligibility
You must be at least 18 years old and able to form a binding contract to use the Services. If you use the Services for a company or other organization, you represent that you have authority to bind it, and "you" includes that organization. You may not use the Services if you are barred from doing so under applicable law, including export control and sanctions laws.
You sign in with a one time link sent to your email address or with Google. You are responsible for keeping access to your email account and your devices secure, and for all activity in your account. Tell us promptly at support@onestar.sh if you believe your account has been used without your permission. Each account has one personal workspace. We may block automated sign ups and disposable email addresses.
2. What OneStar is and is not
OneStar reads public reviews of apps and games, or reviews you upload as a CSV file, and turns them into reports: why people complain, what they praise, how that changes over time, and the short quotes behind each number. It supports public reviews from the Apple App Store, Google Play and Steam. Store reviews come from the stores' public interfaces and from third party review data providers, so the sources, how far back each one reaches and how many reviews it returns can change or stop at any time. On paid plans, OneStar also collects answers to your own feedback forms and counts them beside your reviews (Section 6).
- Reports are automated judgments. Each review is judged by an AI model. The model can misread sarcasm, context, language or intent, and a report can be wrong or incomplete. Answers below a confidence cutoff are shown as unsure rather than hidden, but the rest are not guaranteed to be correct either.
- Written analysis is generated. On Max, and on OneStar's public reports, an LLM writes short passages about a report. Code fills in their figures and quotes from the report, but the wording can still be wrong or incomplete. The numbers and the reviews behind them are the record.
- Reports are not professional advice. They are not legal, financial, investment, marketing, medical or other professional advice, and they are not a statistically representative survey of all users of a product. Verify anything important before you rely on it.
- Reviews come from third parties. We do not write, verify or endorse the reviews we read, and we do not control what the stores or our review data providers make available. A store or provider may change or limit access to its reviews at any time.
- OneStar is not affiliated with the stores. OneStar is not affiliated with, endorsed or sponsored by Apple, Google, Valve or the owners of any product we report on. Product and store names belong to their owners and are used only to identify them.
3. Your data and your content
"Your Content" means what you submit to the Services: the products and links you look up, CSV files you upload, questions you ask about reviews, custom categories, feedback on judgments, settings, the forms you make, the answers they collect, the replies you write and the answers you import. You keep whatever rights you have in Your Content. You grant Cure AI a worldwide, non exclusive, royalty free license to host, copy, process, transmit and display Your Content only as needed to provide, secure and improve the Services for you and as described in Section 5 for reports you make public.
CSV uploads. You may upload only review data that you have the right to use and to share with us for analysis, such as an export of reviews of your own product. Do not include personal data beyond what is needed. In particular, remove reviewer names, email addresses, phone numbers, customer ids and similar columns before you upload. OneStar drops columns that look like names or contact details, scrubs contact details from the text, and never writes the uploaded file to disk, but you remain responsible for the file and for having a lawful basis to provide it. You must not upload special category data, data about children, or anything you are not permitted to disclose.
How we treat review text. Raw review text is never written to disk. Only excerpts of at most 200 characters are kept with a report, author fields are never read, and contact details are scrubbed before text is sent to a model. Answers to your forms are different: people write them to you, so they are stored as written, up to 5,000 characters, as Section 6 describes. The Privacy Policy explains this in detail.
You can export your workspace as a JSON file and delete your account at any time from Settings.
4. Third party services
The Services rely on third parties, including hosting, database, email, anti abuse, sign in, payment, review data and AI model providers, and on the public stores that publish reviews. Links to and data from third party sites and services are provided for convenience. We are not responsible for third party services, their availability or their content, and your use of them may be subject to their own terms. The providers that work for us, including those that process personal data, are listed below and in the Privacy Policy.
| Provider | What it does for OneStar | Information involved | Where | Privacy policy |
|---|---|---|---|---|
| Vercel | Hosts the website and sign in, serves the feedback form widget, and provides cookieless Web Analytics | Requests to onestar.sh, including IP address and browser details in transit; aggregate page view statistics | United States and edge locations worldwide | Vercel privacy policy |
| Fly.io | Runs the analysis service at api.onestar.sh | API requests, including IP address in transit | United States (Virginia) | Fly.io privacy policy |
| Neon | Hosts the database | Account, session, workspace, report and billing status records, and answers to feedback forms with their respondent records (contact details encrypted) | United States (AWS us-east-1) | Neon privacy policy |
| Cloudflare | Runs the Turnstile check that blocks automated sign ups | Browser and device signals collected by the Turnstile widget on the sign in form | Global network | Cloudflare privacy policy |
| Sign in with Google, only if you choose it, and the Google Ads tag that measures our ads on marketing pages | Your Google account email address and, if Google provides it, your name; for the Ads tag, the page address with campaign tags and ad click id, IP address and browser details, without cookies | Global | Google privacy policy | |
| Resend | Sends sign in links, alerts, digests, opted in updates and form owners' replies to people who answered their forms | Your email address and the content of each email; for a reply, the email address the person left and the reply | United States | Resend privacy policy |
| Polar | Merchant of Record for payments, tax and invoices | Your email, billing details and payment card data (card data goes only to Polar and its payment processors) | Global | Polar privacy policy |
| TypeSafe | Runs the Jev model that judges reviews and questions; committed not to train models on customer data | Scrubbed review text, scrubbed written answers to feedback forms, category descriptions and questions you ask about reviews | United States | TypeSafe privacy policy |
| Anthropic | Runs the large language model (LLM) that writes short passages about report numbers on Max and on OneStar's public reports; its commercial terms say it may not train models on this content | Stored review excerpts (personal details removed, at most 200 characters), counts and labels from reports, product names and store descriptions, excerpts of answers to feedback forms on Max, and what you type into Ask, the Explorer's search box and a category name for a drafted description | United States | Anthropic privacy policy |
| DataForSEO | Review data service that supplies public App Store, Google Play, Google Maps, Tripadvisor and Trustpilot reviews, Google Play app details and search results, and place and company search results | Store app ids, place ids, Tripadvisor page ids and company website domains, store country and language codes, and words typed into Google Play, place and company search. Nothing about you: no email, IP address or account data | Estonia (DataForSEO OU, Tallinn) | DataForSEO privacy policy |
5. License, reports and intellectual property
Our license to you. Subject to these Terms, Cure AI grants you a limited, personal, non exclusive, non transferable, revocable license to use the Services for your internal business or personal purposes. You may use, download and share the reports you create, including exported CSV files, for those purposes and to discuss the products they cover.
Our property. The Services, including the software, design, question sets, taxonomies, category library, report layouts and the OneStar name and logo, are owned by Cure AI or its licensors and are protected by intellectual property laws. Except for the license above, no rights are granted to you.
Store reviews. Reviews belong to their authors and the stores that publish them. OneStar quotes short excerpts as evidence for the counts in a report and links to the source store where possible. Nothing in these Terms grants you any right in the reviews themselves. If you republish excerpts, you are responsible for doing so lawfully. A reviewer can ask us to remove an excerpt of their review as the Privacy Policy describes.
Sharing and publishing reports. A report is private to your workspace unless you change it. You can share it by link, which lets anyone with the link view it, or, on plans that allow it, list it publicly. Public report pages show an overview of the report to anyone, can be indexed by search engines, and may appear in the OneStar gallery, trending lists and comparisons. When you share or publish a report, you grant Cure AI a worldwide, non exclusive, royalty free, perpetual license to host, display, reproduce, distribute and promote that report, and reports derived from it, on the Services and in materials that describe the Services, for as long as the report stays shared or public, and for a reasonable period afterward for cached copies and materials already produced.
Cure AI may, at its discretion and without notice, feature or stop featuring a public report, unlist it, merge duplicate public reports of the same product so that one page represents that product, replace a public report with a newer report of the same product, or remove a public report. Public reports never show who created them, what they cost or internal ids.
6. Feedback forms
On plans that include them, you can make forms, polls and NPS questions for your own product ("Forms"), put them in your site or app with the OneStar widget, share them as pages on onestar.sh, and reply to the people who answer ("Respondents"). On Max you can also read and import answers through the API with secret keys and receive webhook calls. Answers belong to the Respondents who wrote them; you may use the answers your Forms collect for your product, within the notice shown with the Form.
Your responsibilities. You decide what your Forms ask, where they appear and what you do with the answers. You agree that:
- you have a lawful basis to collect the answers and you tell Respondents who you are and how you use their answers, including in your own privacy policy wherever a Form appears in your site or app. OneStar shows a short notice under every Form, generated from its settings, but it does not replace yours;
- you will not use a Form to ask for passwords, payment card or bank details, government identification numbers, health information or other special categories of personal data, and you will not direct a Form at children or knowingly collect answers from anyone under 13, or under the age of digital consent where the Respondent lives;
- you will not use Forms to steer only satisfied people toward store reviews or to keep unhappy people away from them, and you will not offer anything of value in exchange for a positive answer or a positive review;
- if you send OneStar a signed identity token or traits about your users, you have the right to share them;
- replies you send through OneStar are about the Respondent's answer and are never marketing. If a Respondent agreed to hear from you about updates, you send those from your own systems and under the laws that apply to them;
- you import only answers you collected lawfully and have the right to share with us;
- you keep secret API keys and webhook signing secrets confidential, and you are responsible for every call made with your keys; and
- you handle Respondents' requests about their answers, such as access or deletion, with our help as described below.
Email addresses are not verified. An address a Respondent types is not checked, so a reply can reach someone who did not write the answer. Every reply email lets its recipient stop further emails and report that they did not send the answer, after which OneStar stops emailing that address. Reply emails are capped per workspace and per address each day.
Sharing Forms and results. A Form and its results are private unless you share them, by link or publicly, like a report. When a Form says answers may be quoted publicly, Respondents see that before they answer, and readers of its shared results can browse excerpts of its quotable answers, without contact details. You may feature some excerpts and you may hide one only for a listed reason (spam, abuse, personal data, off topic, duplicate or legal); hidden excerpts are counted on the page. The license in Section 5 for shared reports applies to shared Forms and results.
Processing answers for you. For personal data in answers, replies and Respondent records, you are the controller and Cure AI is your processor and service provider. Cure AI will:
- process that data only to provide the Services to you, as these Terms, your settings and your other written instructions describe, unless the law requires otherwise, in which case we will tell you first unless the law forbids it;
- not sell it, use it for advertising, or use it to train AI models;
- make sure the people who process it are bound to confidentiality;
- protect it with the measures in Section 11 of the Privacy Policy, including encryption of contact details at rest;
- use only the subprocessors listed in Section 4, tell you by email or in the app before we add or replace one, and let you object by ending your subscription;
- help you answer Respondents' requests and meet your obligations for security, breach notification and impact assessments, as far as the information available to us allows;
- tell you without undue delay after we learn of a personal data breach that affects your Forms;
- delete the data when it expires under Section 7, when you delete an answer, a Form or your account, as the Privacy Policy describes;
- give you the information needed to show that we meet these commitments, and answer reasonable written questions about them; and
- transfer it out of the European Economic Area, the United Kingdom or Switzerland only with the safeguards in Section 9 of the Privacy Policy. Where those laws require it, these Terms incorporate the European Commission's Standard Contractual Clauses (module two, controller to processor) and the United Kingdom addendum, with you as data exporter and Cure AI as data importer.
7. Plans and subscriptions
OneStar offers a Free plan and paid plans. At launch the paid plans are Pro at US$19 per month or US$190 per year and Max at US$49 per month or US$490 per year, before any applicable tax. Each plan has limits, such as the number of reports and reviews per month, reviews per report, tracked reports, questions you can ask, history kept and the features included. The pricing page is the authoritative, current description of plans, prices and limits.
- Limits and quotas are enforced by the Services. When a report would exceed a limit, OneStar may offer a smaller sample that fits instead.
- We may also apply per report caps, daily limits, concurrency limits, rate limits and a service wide daily capacity limit to protect the Services. These can delay or pause a report even when your plan quota is not used up.
- We may change plans, features, limits and prices. Price increases for an existing paid subscription take effect at your next renewal after notice to you, and you can cancel before then.
- Runs of private reports are kept for the history period of your plan and then deleted. The latest finished run and the pinned run of every report are kept, and so is every run of a shared or public report.
- Answers to your forms are kept for the history period of the plan they arrived under, counted from each answer's date, then deleted with any conversation about them. Canceling or changing plans never shortens it.
8. AI features
OneStar uses the Jev model from TypeSafe to judge reviews and the written answers to your forms, pick quotes, suggest competitors, apply categories and answer questions you ask about reviews. On Max, and on OneStar's public reports, a large language model (LLM) from Anthropic also writes short passages beside the numbers: what the counts mean, the reasons inside a theme, explanations of alerts and trend changes, and the reasons on each side of a question you ask. To do this, scrubbed review text, scrubbed written answers, category descriptions and your questions are sent to TypeSafe, and stored excerpts of reviews and answers, report counts and your questions are sent to Anthropic. Contact details that Respondents leave are never sent to either. TypeSafe has committed not to train models on customer data, and Anthropic's commercial terms say it may not train models on this content. AI output, including written analysis, is probabilistic, can be wrong, and can differ between runs or model versions. You are responsible for how you use AI output, and you must not present it as a verified fact about any person or company without checking it.
9. Billing, cancellation and refunds
Paid plans are sold through Polar (polar.sh), which acts as the Merchant of Record. Polar processes your payment, charges and remits applicable sales tax and VAT, and issues receipts and invoices. Your purchase is also subject to Polar's terms. Cure AI never receives your full card number.
- Subscriptions renew automatically at the end of each monthly or yearly period until canceled. By subscribing, you authorize recurring charges through Polar.
- You can cancel at any time from Manage billing in Settings, which opens the Polar customer portal. After you cancel, paid features stay on until the end of the period you already paid for and the plan then returns to Free.
- Deleting your account cancels any subscription immediately, and paid access ends at that moment.
- Fees are non refundable except where required by law or where Polar grants a refund under its policies. Refunds, where offered, are issued by Polar. Contact us at support@onestar.sh if you believe you were charged in error, and we will work with Polar to resolve it.
- If a payment fails, Polar may retry it, and we may downgrade the workspace to Free until it succeeds.
10. Acceptable use
You agree not to, and not to help anyone else to:
- use reports, excerpts or any part of the Services to identify, contact, harass, threaten, dox or retaliate against the people who wrote reviews, or try to re identify a reviewer from an excerpt or from other data;
- upload data you do not have the right to use, or data that includes unnecessary personal information;
- use a Form to collect information under false pretenses, to pose as the makers of a product you do not make, to send spam, or to collect data that Section 6 rules out;
- scrape, crawl or harvest OneStar, its public report pages or its API by automated means, except for search engines indexing public pages in line with robots rules, or resell or redistribute the Services or bulk report data;
- access or try to access another workspace, guess or enumerate report ids or share links, or probe, scan or test the vulnerability of the Services without our written permission;
- bypass or try to bypass plan limits, quotas, rate limits, gating or payment, including by creating multiple accounts or using disposable email addresses;
- interfere with or disrupt the Services, introduce malware, or send traffic that places an unreasonable load on them;
- reverse engineer the Services, or use the Services or their output to build a competing product or to train a model, except as permitted by law;
- publish a report in a way that is misleading, such as presenting it as an official statement of a store or product owner, or use it to defame anyone;
- use the Services in violation of any law, store terms or the rights of others.
We may investigate suspected violations and take action under Section 13.
11. Updates and availability
We change the Services often. We may add, change or remove features, sources, question sets and categories, and a change can alter the results of new reports. We aim to keep the Services available but do not guarantee that they will be uninterrupted, timely or error free. Store sources may become unavailable because of changes made by the stores or by our review data providers. We may perform maintenance with or without notice.
12. Feedback
If you send us suggestions, bug reports or feedback on a judgment, you grant Cure AI a perpetual, irrevocable, worldwide, royalty free license to use it for any purpose, including to improve question sets and calibration, without obligation to you.
13. Termination
You may stop using the Services and delete your account at any time from Settings. We may suspend or terminate your access, or remove content, if you breach these Terms, if required by law, to protect the Services, other users or reviewers, or if we stop offering the Services. Where reasonable, we will give notice first. If we stop offering the Services entirely, we will try to give you at least 30 days of notice and a chance to export your data, and we will refund, through Polar, any prepaid fees for the unused part of a paid period.
On termination, the license in Section 5 ends and you must stop using the Services. Sections 2, 3, 5 (except your license to use the Services), 6, 8, 9 (for amounts owed), 10, 12, 13, 14, 15, 16, 17 and 18 survive termination.
14. Disclaimers
To the fullest extent permitted by law, the Services and all reports, excerpts and AI output are provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including implied warranties of merchantability, fitness for a particular purpose, title, non infringement and accuracy. Cure AI does not warrant that reports, judgments, counts, trends or quotes are accurate, complete, current or representative, or that the Services will be uninterrupted, secure or error free. Some jurisdictions do not allow the exclusion of certain warranties, so some of these exclusions may not apply to you.
15. Limitation of liability
To the fullest extent permitted by law, Cure AI, its members, managers, officers, employees, contractors and agents (the "Cure AI Parties") will not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, data, goodwill or business opportunity, arising out of or related to these Terms or the Services, even if advised of the possibility of such damages. The total aggregate liability of the Cure AI Parties for all claims arising out of or related to these Terms or the Services will not exceed the greater of (a) the amounts you paid for the Services in the 12 months before the event giving rise to the claim and (b) US$100.
These limits apply to every theory of liability and even if a remedy fails of its essential purpose. They do not limit liability that cannot be limited under applicable law. You agree to bring any claim only against Cure AI, LLC and not against any individual Cure AI Party personally.
16. Indemnification
To the extent permitted by law, you will defend, indemnify and hold harmless the Cure AI Parties from any claims, damages, losses, liabilities, costs and expenses, including reasonable attorneys' fees, arising out of or related to (a) Your Content, including CSV files you upload, (b) reports you share or publish and how you use any report, (c) your breach of these Terms, or (d) your violation of any law or the rights of any third party, including reviewers.
17. Dispute resolution and arbitration
Informal resolution first. Before starting arbitration or a court case, you and Cure AI agree to try to resolve the dispute informally. The party raising the dispute must send a written notice describing it and the relief sought, by email to support@onestar.sh if you are sending it, or to the email address on your account if we are. If the dispute is not resolved within 30 days after the notice is received, either party may start arbitration.
Binding arbitration. Except as stated below, any dispute, claim or controversy arising out of or relating to these Terms or the Services will be resolved by final and binding individual arbitration administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules then in effect. The arbitration will take place in Hillsborough County, Florida, by video conference, or, if you are a consumer and so choose, in the county where you live. The arbitrator may award the same individual relief a court could. Payment of fees is governed by the AAA rules. The Federal Arbitration Act governs the interpretation and enforcement of this Section.
Exceptions. Either party may bring an individual claim in small claims court if it qualifies, and either party may seek injunctive or other equitable relief in court to protect its intellectual property or to stop unauthorized access to the Services.
Class action waiver. You and Cure AI agree that each may bring claims against the other only in an individual capacity and not as a plaintiff or class member in any purported class, collective, consolidated or representative proceeding. The arbitrator may not consolidate claims of more than one person. If this waiver is found unenforceable for a claim, that claim must be severed and heard in court, and the rest of this Section still applies.
Jury trial waiver. To the extent permitted by law, you and Cure AI waive any right to a jury trial for disputes covered by these Terms.
Your right to opt out. You may opt out of this arbitration agreement by emailing support@onestar.sh within 30 days after you first accept these Terms, with the subject "Arbitration opt out" and the email address of your account. Opting out does not affect any other part of these Terms.
Governing law and venue. These Terms are governed by the laws of the State of Florida and applicable United States federal law, without regard to conflict of law rules. For any dispute not subject to arbitration, you and Cure AI consent to the exclusive jurisdiction of the state and federal courts located in Hillsborough County, Florida. Nothing in these Terms removes consumer protections that the law of your country of residence gives you and that cannot be waived by contract.
Time limit. To the extent permitted by law, any claim arising out of or related to these Terms or the Services must be brought within one year after the claim arises, or it is permanently barred.
18. General
- Entire agreement. These Terms and the Privacy Policy are the entire agreement between you and Cure AI about the Services and replace any earlier agreement on the subject.
- Changes. We may update these Terms. We will post the new version here with a new "Last updated" date and, for material changes, notify account holders by email or in the app before they take effect. Continuing to use the Services after a change takes effect means you accept it.
- Assignment. You may not assign these Terms without our consent. We may assign them in connection with a merger, acquisition or sale of assets, or to an affiliate.
- Severability and waiver. If any provision is found unenforceable, it will be enforced to the maximum extent possible and the rest remains in effect. Failing to enforce a provision is not a waiver.
- Force majeure. We are not liable for delays or failures caused by events beyond our reasonable control, including outages of providers or stores.
- Notices. We may send notices to the email address on your account. You may send notices to the address in Section 19.
- Relationship. No agency, partnership, joint venture or employment relationship is created by these Terms. There are no third party beneficiaries.
- Export and sanctions. You will comply with United States export control and sanctions laws in using the Services.
19. Contact
Questions about these Terms can be sent to:
Cure AI, LLC, doing business as OneStar401 E. Jackson Street, Suite 2225, Tampa, FL 33602, United States
support@onestar.sh