Terms of Service

These terms are the agreement between Supermode d.o.o., a company registered in Croatia ("critlab", "we", "us"), and you. They apply from the moment you create an account or use critlab. Who we are, in full, is in the Imprint.

What critlab is

critlab is a service where people upload prototypes built with AI coding agents, share them, collect comments pinned to individual elements, and send that feedback back to their coding agent. It runs as a hosted service at critlab.app. These terms cover the hosted service and the website, not a copy of critlab that someone installs and runs themselves.

Who these terms are for

critlab is a professional tool for designers, agencies, freelancers and teams. You confirm that you use it in the course of your trade, business or profession and not as a consumer. If you sign up for an organisation, you confirm that you may bind it.

If, despite this, mandatory consumer-protection law applies to you, nothing in these terms limits the rights that law gives you.

The free beta

critlab is in a free beta. That means:

• It costs nothing. We will not charge you for the beta. We will tell you before the beta ends and before any charge could apply, and you will not be charged unless you choose a paid plan.
• It has limits. A workspace on the free beta can have 50 prototypes, 50 versions per prototype and 25 members per workspace. We may change these limits, and we will say so in the product or by email when we do.
• It is a beta. Features may change, break or be withdrawn, and there is no uptime commitment or support commitment. Keep your own copy of anything you cannot afford to lose.
• Paid plans come later. When they do, they will be sold through our payment provider Paddle, which acts as the merchant of record. Paddle's terms govern the purchase itself; these terms govern the service. Plan terms will be published before anything is sold.

Accounts and access

You sign in with an emailed one-time code, with Google or Microsoft, or through your company's single sign-on. There are no passwords. You are responsible for what happens under your account and your API keys, so keep both secure and tell us at once if you think either has been misused. Give us accurate information, and do not let someone else use your account.

Your content

Your content is everything you or your team put into critlab: prototypes and the files in them, comments, replies, voice notes, screenshots and settings. You own it. You give us permission to host, store, copy (including thumbnails, previews, screenshots and backups), process, display and send it, and to let our subprocessors do so for us, for as long as needed to run critlab for you and, for backup copies, until they expire (see Deleting is permanent): to serve a prototype to the people you shared it with, to show comments to the people who may see them, and to send them to a coding agent you connected.

You are responsible for your content. You confirm that you have the rights to it and that it follows the acceptable use rules below. You decide who can open a prototype. A prototype shared by link can be opened by anyone who has the link, and a password-protected one by anyone who has the link and the password. Share them with that in mind.

Where your content contains personal data, we handle it for you as your processor, as set out in the Privacy Policy and the data processing agreement, which are part of these terms.

If you send us ideas or suggestions about critlab itself, we may use them freely and owe you nothing for them. This does not apply to your content.

Deleting is permanent

When you delete a prototype, a version or a workspace, it is gone. critlab asks you to confirm first, there is no trash, and we do not restore deleted content for anyone. It stops being available at once, the stored files are cleaned up shortly afterwards, and copies in our backups disappear as the backups are replaced, within 30 days.

Reviewers and share links

A reviewer is someone who opens a share link and comments, usually without an account. A reviewer's use of critlab is governed by these terms to the extent it applies to them: the acceptable use rules and the rules on content they submit. The workspace that shared the prototype decides who can see it and what happens to the comments, and is responsible for informing its reviewers. A reviewer who wants to see, correct or delete their comments can ask the workspace or write to us, as the Privacy Policy explains.

Acceptable use

This section is critlab's acceptable use policy. critlab hosts files that other people uploaded, so it matters. You must not use critlab to:

• host or share phishing pages, pages that collect other people's credentials or payment details under false pretences, or pages that imitate a person or organisation to deceive;
• host or distribute malware, or anything meant to damage, take over or spy on a device or an account;
• host or share child sexual abuse material;
• build prototypes that track or fingerprint the people who open them, or that use their devices for something they did not ask for, such as mining cryptocurrency;
• host or share content that is illegal where it is hosted or viewed, including content that infringes someone's copyright or other rights, or that harasses or threatens people;
• upload other people's personal data that you have no right to use, beyond what a prototype needs;
• send unsolicited bulk invitations, share links or notifications through critlab;
• try to break out of the sandbox, probe or attack critlab or anyone's systems, overload the service, or get around its limits and access controls;
• resell critlab or use it to build a competing service.

Security research. Good-faith security research is welcome. If you test only your own account and workspaces, do not access, change or delete other people's data, do not slow the service down, and report what you find to support@critlab.app before telling anyone else, we will not treat that research as a breach of these rules.

What the sandbox does and does not do. critlab serves every uploaded prototype from its own isolated address, in a sandboxed frame, with strict browser security rules, and tells search engines not to index it. This limits what a prototype can do to the person viewing it. It does not review what the prototype contains, and it is not a promise that a prototype is safe. Open prototypes from people you trust.

Reporting and removal. If you see something that breaks these rules, tell us through the abuse page. A person at critlab reads every report and makes every decision; we do not use automated tools to moderate content. We may remove or disable content, suspend an account, or both, when we have good reason to think these rules were broken or when the law requires it. Unless the law or an investigation says otherwise, we will tell the account holder what we did and why.

Availability and changes

We run critlab with reasonable care, but a beta is provided as it is. We may change, add or remove features, and we may do maintenance that makes it unavailable for a while. If we change these terms in a way that matters, we will tell you in the product or by email before the change takes effect and ask you to accept the new version. If you do not agree, you can stop using critlab and delete your workspace.

Connected services and links

You can connect critlab to other services, for example a coding agent or Slack. You choose them, and their own terms apply to them. When someone pastes a link into a comment, our servers may fetch that page to show its title.

Ending the agreement

You can stop using critlab at any time and delete your workspace. We may suspend or end your access if you break these terms, if you put the service or other people at risk, or if the law requires it. After the agreement ends we delete your data as the Privacy Policy describes.

Warranty and liability

To the extent the law allows, critlab is provided "as is" during the beta, without a promise that it will be uninterrupted, error-free or fit for a particular purpose.

To the extent the law allows, we are not liable for indirect or consequential loss, for lost profits, revenue, business or goodwill, or for the loss of data that you could have avoided by keeping your own copy, as the beta asks you to.

To the extent the law allows, our total liability for all claims arising out of or in connection with critlab, these terms and the data processing agreement, taken together, is limited to the fees you paid us for the service in the 12 months before the event giving rise to the claim. While you pay nothing, as in the free beta, it is limited to [to be completed].

Nothing in these terms limits or excludes liability for intent or gross negligence, for injury to life, body or health, or for anything else that the law does not allow us to limit.

Data protection

Our Privacy Policy explains how we handle personal data. For the personal data in your workspace we act as your processor under the data processing agreement, which includes standard contractual clauses and forms part of these terms. The subprocessors page lists who helps us.

Governing law and courts

These terms are governed by the law of the Republic of Croatia, without its rules on conflicts of law. For disputes between us and a business customer, the courts in Zagreb have exclusive jurisdiction. If you are located outside Croatia, mandatory laws of your own country that cannot be waived by contract still apply, and nothing here takes away a right you have under them.

Contact

Questions about these terms: support@critlab.app. Our full company details are in the Imprint.