Terms of Service

Last updated November 10, 2026

These terms are the agreement between you and us about using mostra. Please read them before you create an account or comment through an invite link. You can save or print this page at any time.

Who we are

In these terms, "we" and "us" mean mostra.

• Email: [email protected]

Email is the quickest way to reach us about anything, including complaints and reports of unlawful content. We answer in English.

What these terms cover

Some words used here:

• Customer: the person or organization that holds a workspace.
• Workspace: the place for a customer's projects, created when the customer's first builder signs up.
• Project: one website or web app with the mostra script installed.
• Builder: someone with a mostra account, who can open the dashboard, create projects and invite links, and manage API keys.
• Reviewer: someone who joins a project through an invite link to give feedback, without an account.
• Talk: the feature that turns a reviewer's spoken feedback into comments.
• Content: everything put into mostra, such as comments, replies, verdicts, names, the page details the script records with a comment, and what is said through Talk.

What the terms cover:

• These terms apply to everyone who uses mostra: builders and reviewers. Parts that apply to only one of them say so.
• The Data Processing Agreement is part of these terms. It covers the personal data we process for customers in their workspaces. The Privacy Policy explains what we do with personal data we're responsible for ourselves.
• If you use mostra for an organization, you accept these terms for it and confirm that you're allowed to. "You" then also means the organization.

The service

mostra helps teams collect feedback on a live website or web app and act on it. It includes:

• the dashboard at mostra.design, where builders manage projects, invite links, comments and API keys;
• the mostra script, which a customer adds to its own site. It does nothing for ordinary visitors. For people who open an invite link, it shows a panel where they can pin comments to parts of the page, reply, and approve a version or ask for changes;
• Talk (see Talk and AI);
• an API and an MCP server, through which coding agents work with comments, projects and invite links.

All of this is on the free plan. Paid plans are described in Plans and payment. The script's source code is published under the MIT license, which governs that code. These terms govern the hosted service.

mostra is in beta

mostra is new and still changing. We don't promise any level of availability, speed or support, and there is no service level agreement. Features can change, move between plans or go away. If we remove a feature from a plan you pay for, we'll email you at least 30 days before, the same notice as for a price change, so you can cancel first. Keep your own copies of anything you can't afford to lose. While your account is active, you can read your comments through the API.

What you need

• An internet connection and a current version of Chrome, Edge, Firefox or Safari, with JavaScript on.
• For builders: an email address you can receive mail at, and cookies allowed for mostra.design.
• To install the script: the ability to add a script tag to your site. If your site has a Content Security Policy, it has to allow mostra's script, its connections and, for on-device speech, the speech model.
• For Talk: a microphone, and permission for the site to use it. On-device speech downloads a speech model the first time and is slower on older computers.
• For agents: an MCP client, or anything that can make HTTPS requests.

Accounts

This section is for builders.

• Accounts are for business or professional use. By creating one, you confirm that you're at least 18 and that you use mostra for your business or profession, not as a consumer.
• Use an email address you control, and keep it up to date. We send login links there, and it's how we reach you about your account.
• Keep login links, your password and API keys to yourself. Anyone who has them can act as you. Tell us at once if you think someone else has used them.
• An account is for one person. Each builder needs their own.
• You're responsible for what happens under your account and in your workspace, including what your coding agents do with your API keys.

Reviewers

• Reviewers use mostra free of charge and without an account. Opening an invite link keeps you signed in to that project, in that browser, for 30 days.
• The customer who invited you controls the project. Its builders can read, answer, close and delete your comments, and its coding agents can read them.
• For your personal data in a project, the customer decides how it is used (the GDPR calls this the controller), and we process it on the customer's behalf. Send questions and requests about it to the person who invited you. The Privacy Policy explains what happens to it in mostra.
• The rules in Acceptable use apply to you too.

Acceptable use

Don't use mostra to:

• post or send unlawful content, or content that infringes someone else's rights, such as their privacy, copyright or trademarks;
• harass, threaten or deceive anyone;
• spread malware, or try to get into accounts, projects or systems that aren't yours;
• install the script on a site you aren't allowed to change;
• collect personal data you have no right to collect, or record anyone with Talk without their knowledge;
• process sensitive personal data, such as data about health, religion, sex life or criminal records. Mark the parts of your pages that show such data with data-mostra-mask, so the script never records them;
• overload or disrupt the service, get around its limits (such as Talk minutes or API rate limits), or scrape it;
• resell or rent out the hosted service, or copy it to build a competing one;
• break the law in any other way.

Your content

• Content belongs to whoever created it, or to whoever they agreed it belongs to. We don't claim ownership of it.
• You give us a worldwide, non-exclusive, royalty-free license to store, copy, transmit, display and otherwise process your content, only as far as we need to run mostra for you, keep it secure and meet our legal obligations. That includes sending it to the providers listed in the Data Processing Agreement. The license ends when the content is deleted, except for copies the law requires us to keep.
• Reviewers: your comments are feedback for the team that invited you. You allow the customer to use them freely in its work.
• You're responsible for your content and for having the rights and permissions it needs. Customers in particular need the right to install the script on their site, to invite their reviewers, and to have their reviewers' data processed.
• We don't use your content to train AI models, and our AI providers' terms with us don't let them train on it either. With browser speech recognition, your browser's maker handles the audio under its own terms.
• We don't look at your content, except when you ask us to (for example in a support request), when we need to keep mostra secure or fix a fault, or when the law requires it.
• If you send us ideas for improving mostra, we may use them without owing you anything.

Talk and AI

• Talk records a reviewer only after they press Talk, and shows that it's recording.
• A project's builders choose how speech becomes text: browser speech recognition or on-device speech. The default, browser speech recognition, may send the audio to the browser's maker (Chrome does). What was said, with what the reviewer pointed at and text from the pages, then goes to our AI provider, named in the Data Processing Agreement, whose model turns it into comments pinned to parts of the page.
• Comments from Talk are posted under the reviewer's name as soon as the recording stops, without a review step. The reviewer can edit or delete them afterwards.
• AI output can be wrong. Words can be misheard, points split, merged, reworded or left out, and comments pinned to the wrong element. Check what Talk posts, and what your coding agent changes, before you rely on it.
• Talk has a monthly allowance of minutes per workspace, shown with each plan. When it runs out, Talk pauses until the next calendar month. Talk also has limits that guard against abuse, and pauses while one of them is reached.

Plans and payment

• The free plan costs nothing.
• Each paid plan is one flat price for a workspace, billed monthly or yearly. What a plan includes is described where you choose it.
• You pay on Stripe's checkout. The seller is Link, a Stripe service, which acts as the merchant of record. Your purchase, payment, tax, receipts, refunds and payment disputes are with Link, under the terms it shows at checkout. When these terms say we'll refund you, we pay that refund ourselves, through Link. The checkout shows the price, any tax and the total before you pay.
• A paid plan renews automatically at the end of each month or year until you cancel it. Link charges your payment method for each renewal.
• You can cancel at any time on the Billing page, through Stripe's customer portal. Canceling stops the next renewal. You keep the plan until the end of the period you paid for, and then the workspace moves to the free plan. We don't delete content because a plan ended.
• If mostra isn't for you, email us at [email protected] within 30 days of your first payment and we'll refund it in full and end the plan.
• If a renewal can't be charged, Stripe asks you to update your payment details. If it stays unpaid, the plan ends and the workspace moves to the free plan.
• If we change a price, we'll email you at least 30 days before it applies to your subscription. If you don't want to pay it, cancel before the next renewal.
• If the law treats you as a consumer in the purchase, your statutory rights in it, such as the right of withdrawal, are part of your contract with Link, and Link handles them.

How the contract starts and ends

• For builders, the contract starts when you create an account. For reviewers, it starts when you first give feedback through an invite link. It runs for an indefinite period.
• You can end it at any time, free of charge. Builders: cancel any paid plan first on the Billing page. Deleting your account does not cancel it, and you would keep being charged. Then email [email protected] from your account's address and ask us to delete the account. Reviewers: stop using the invite link, and ask the person who invited you to delete your comments, or email us and we'll pass your request on.
• We can end the contract by email, with at least 30 days' notice, for an important reason: we stop running mostra or its free plan; a change in the law or a decision of an authority stops us offering it on these terms; or a provider we depend on stops offering what we need.
• We can suspend your access or end the contract at once if you seriously or repeatedly break these terms, post unlawful content, put the security of mostra or of other people at risk, or if the law requires it. Where it's reasonable, we'll warn you first and give you time to fix the problem. We'll always tell you why, and how you can object (see Complaints).
• When a builder's contract ends, we delete the account and its workspace, with everything in it, within 30 days, except what the law requires us to keep. If you asked for a copy of your data, the 30 days start after we've sent it and the 30 more days in Leaving, and taking your data with you have passed. Copies in our database backups are deleted when those backups expire, at most 28 days after the data itself is deleted.
• If we end the contract for any reason other than your breach of these terms, we'll refund the unused part of the period you paid for, through Link.

Leaving, and taking your data with you

This section is for builders.

• You can leave mostra for another service, or for your own systems, at any time. You don't have to give notice, and we charge nothing for leaving or for your data.
• What you can take: everything in your workspace's projects, which means the comments, replies and verdicts, the people in each project, and its versions and invites. Nothing in your projects is held back. Our own software and design aren't part of it.
• How: while your account is active, you can read your comments through the API. For a full copy, email [email protected] from your account's address. We send it in a machine-readable format (JSON) within 30 days, and answer your questions about it so you can move it.
• After we send the copy, your data stays in mostra for 30 more days, so you can ask again if something is missing. After that we delete it within 30 days, as How the contract starts and ends describes. If you'd rather we delete it without waiting, say so.
• Your projects are stored on servers in Finland, in the European Union, under its law. The Data Processing Agreement says when data leaves the European Economic Area, and how it's protected then.

Reporting content, and how we moderate

• We don't monitor content. We act when we're told about content that may be unlawful or break these terms.
• To report content, email [email protected] with: where it is (the project's site, and the comment's number or link); why you think it's unlawful or breaks these terms; and your name and email address. Tell us that you believe your report is accurate and complete.
• We confirm that we received your report, look at it without undue delay, and tell you what we decided.
• If we remove content or restrict an account, we tell the person affected what we did, why, and how to object. Objections go through Complaints.
• Authorities can reach us at the same address, in English or Polish.

Liability

• We take reasonable care, but mostra is in beta and provided as is, as far as the law allows.
• If you use mostra for your business or profession, then, as far as the law allows:
  • we aren't liable for lost profits, lost data or indirect damage;
  • we aren't liable for failures of the providers we rely on (hosting, networks, email, AI models), or for anything else outside our reasonable control;
  • we aren't liable for what an AI model writes, leaves out or places on the wrong part of the page;
  • our total liability for all claims connected with mostra is limited to what you paid for it in the 12 months before the event that caused the claim.
  These limits don't apply to damage we cause intentionally, or where the law doesn't allow liability to be limited.
• If you're a consumer, or a sole trader for whom the contract has no professional character (in Poland, judged mainly by the business activity in your CEIDG entry), the limits above don't apply to you. Nothing in these terms limits your rights under mandatory law.
• We aren't responsible for services we don't run: your site and its hosting, your browser and its speech service, your coding agent and its AI provider, and Link and Stripe.
• If you use mostra for your business and someone makes a claim against us, or an authority acts against us, you'll cover the damages, settlements and fines we have to pay, and our reasonable costs of dealing with it, including legal fees. This applies to the extent the claim or action comes from your content, your site or your breach of these terms.

Our rights

The hosted service, its server software, its design and the mostra name belong to us or our licensors. Beyond using mostra as these terms describe, they give you no rights in them. The script is open source, under the MIT license.

Risks, and the software we put on your devices

Like any online service, mostra carries risks: malware, phishing (for example an email posing as our login link), someone getting hold of your login link or API key, and data being read on an insecure network. Keep your browser and devices up to date. Check that login emails come from [email protected] and lead to mostra.design, and don't share login links or API keys.

What mostra puts on your devices, and why:

• On mostra.design: the cookies and browser storage described in the Privacy Policy, which keep you logged in and remember your theme.
• On a customer's site: the mostra script. For ordinary visitors it only checks the page address and the site's browser storage for an invite, then does nothing. When someone opens an invite link, it loads the comment panel and keeps a sign-in token, panel settings and unsent drafts in that browser's storage for that site.
• With Talk: audio that is waiting to be turned into text is kept in the browser's storage, and deleted once it's used, or after 24 hours if the tab was closed first. On-device speech downloads a speech model and keeps it in the browser's cache.

Complaints

• If mostra doesn't work as these terms describe, or you disagree with a decision we made about your content or account, email [email protected]. Include your account's email address (or, as a reviewer, the site and the invite link you used), what happened, and what you'd like us to do.
• We answer by email as soon as we reasonably can, and within 14 days if you're a consumer.
• If you're a consumer, you can also get free help from a municipal or district consumer ombudsman (rzecznik konsumentów) or a consumer organization, and use out-of-court dispute resolution, for example at a Voivodeship Inspectorate of Trade Inspection. Information is at uokik.gov.pl. You can always go to court instead.

Changes to these terms

• We may change these terms for an important reason: a change in the law or a decision of an authority; a change in how mostra works, such as new or removed features or plans; keeping mostra secure; a change in the services of a provider we depend on; or making the terms clearer without changing your rights.
• We'll publish the new version here and email builders at least 14 days before it takes effect, or 30 days before a price change or a removed feature applies to a paid plan. Notice can be shorter only where the law requires it, or to deal with a security risk.
• If you don't agree, you can end the contract before the change takes effect, free of charge (see How the contract starts and ends). If you keep using mostra after that, the new terms apply.

Law and courts

• Polish law governs these terms. If you're a consumer living in another EU country, you keep the protection of that country's mandatory law.
• Disputes with businesses go to the common court in Kraków. Consumers can go to any court the law allows them to.

General

• These terms, with the Data Processing Agreement, are the whole agreement between us about mostra. A paid plan's purchase also follows Link's terms.
• If any part of these terms is invalid, the rest still applies.
• If we don't enforce a right straight away, we haven't given it up.
• We may transfer this contract to a business that takes over running mostra. We'll tell you by email first, and you can end the contract if you don't agree. You may transfer your rights under these terms only with our consent.