Terms of service

1. About these terms

Lumdeck is a service of Kinesis Lab, operated by Quietstack OÜ (registry code 17608504), Sepapaja tn 6, 15551 Tallinn, Estonia ("we", "us"). These terms are the contract between us and the person or business that uses Lumdeck ("you", the "customer"). They apply to the website, the app, share pages, live sessions, the REST API and the MCP server (together, the "service").

The following documents form part of these terms:

• the Acceptable use policy;
• the Data processing agreement and its list of sub-processors, for personal data we process for you;
• the Billing, refunds and cancellation policy;
• the notice-and-action and copyright procedures.

The Privacy notice explains how we handle personal data as a controller; it is information, not part of the contract. If documents conflict, a separately signed agreement wins, then the Data processing agreement (for personal data), then these terms, then the policies.

2. Personal and business use

Consumers and businesses may use Lumdeck. You must be at least 18 and legally able to enter this contract. If you act for a business, you must have authority to bind it. A consumer acts mainly outside their trade or profession; selecting a checkout option does not remove rights that apply to the actual transaction.

Our intended market is worldwide, subject to applicable laws, sanctions and payment availability. Payment-confirmed registration starts a 30-day trial at Free limits, followed by the selected paid subscription unless cancelled. Availability depends on the payment and registration options shown during signup.

Nothing in these terms removes mandatory consumer rights, including rights that apply to digital services supplied in exchange for personal data rather than money.

3. Accounts and workspaces

• Keep your sign-in details and API keys confidential. Take reasonable steps to protect your account and workspace keys. Responsibility for unauthorised use depends on the circumstances and applicable law.
• A workspace belongs to the customer that created it. Its owners decide who joins, which roles people have and what is shared. We follow the owners' instructions; if owners disagree, we may wait for agreement or a court order before acting.
• You are responsible for the members you invite and for their compliance with these terms. People who only view what you share are not parties to this contract.
• Tell us without delay at office@kinesislab.ai if you suspect unauthorised use of your account or keys.

4. Beta features

Features we mark as beta, early access or test are provided to try them out. They may change or end and may have gaps. The published support response target still applies; this clause does not remove mandatory consumer remedies. Production content is subject to the retention and deletion terms in these policies.

5. Your content

You keep all rights in the presentations, files and other material you or your members upload or submit through the API ("content"). You give us a worldwide, non-exclusive, royalty-free licence to host, store, copy, process and display content only as needed to provide the service to you: unpacking and validating bundles, generating previews and screenshots, indexing text for search, serving decks to the people you share them with, and keeping backups. The licence ends when the content is deleted, except for copies in backups until they expire and copies we must keep by law.

You are responsible for the content you upload and share, including its legality and the rights and permissions needed to use it. Lumdeck does not endorse user content. Subject to section 17 and to the extent permitted by applicable law, Quietstack OÜ excludes liability arising from user content. This does not exclude responsibility for our own conduct, mandatory consumer rights, or our obligations to address unlawful content.

You confirm that:

• you have the rights and permissions needed for the content and for sharing it;
• the content and your use of Lumdeck comply with the law and the Acceptable use policy;
• you have a lawful basis for any personal data in the content and for any data your decks collect from viewers.

Public links show who shared. Anyone who has a public share link can open the deck. The share page and link previews in chat and e-mail apps show the deck title and your workspace name. Choose names accordingly.

Code inside decks. Decks run in a sandbox on a separate origin. Decks may load fonts, scripts and images from the public sources listed on the developer page; those providers receive the viewer's IP address. You are responsible for what your decks load and collect.

If you send us feedback or suggestions, we may use them without obligation to you.

6. Acceptable use

Use Lumdeck only in line with the Acceptable use policy. In short: no illegal content; no phishing, malware or collection of passwords or payment details; no infringement of other people's rights; no spam; no attacks on the service or on other sites; no use of Lumdeck as a general file host or CDN; no attempts to get around plan limits or the viewer sandbox.

7. Content moderation

This section describes our content-moderation policies, procedures, measures and tools as Article 14 of the Digital Services Act (Regulation (EU) 2022/2065) requires.

7.1 What we check, and how

• We do not monitor or read content in general, and we do not use automated systems to judge whether content is lawful.
• Automated tools: every upload passes an automated validator that checks file types, sizes, archive structure and a list of technically dangerous constructs, and rejects bundles that break those rules before they are published. It does not assess meaning. Rate limits automatically slow down excessive requests, sign-in attempts and reports.
• Every decision to restrict content after a notice is taken by a person on our team.

7.2 Notices

Anyone can report content they believe is illegal or breaks these terms, using the "Report" link on every share page or the notice form. We confirm receipt when you give an e-mail address, review each notice diligently and objectively, and tell the notifier our decision and the available redress. We aim to review notices within one business day; reports of phishing, malware, threats to life and child sexual abuse material are handled first.

7.3 Measures

Depending on the case, and limited to what is necessary, we may:

• disable a share link or a public gallery;
• take a presentation down: all its links stop working, it is no longer served and live sessions end;
• revoke API keys;
• suspend a workspace, or block an account (see section 11);
• report content to the authorities where the law requires it.

7.4 Statement of reasons and complaints

When we restrict content, we e-mail the person who uploaded it and the workspace owners a statement of reasons (Article 17 DSA): what we restricted, for how long and where, the facts we relied on, whether automated means were involved, the legal or contractual ground, and how to challenge the decision. You can contest a decision by replying to that e-mail or writing to office@kinesislab.ai within six months. A person reviews the complaint, and we reverse the decision without delay if it was wrong.

You may also use any certified out-of-court dispute settlement body available to you, lodge a complaint with the Estonian Digital Services Coordinator (Tarbijakaitse ja Tehnilise Järelevalve Amet, TTJA), or go to court (section 23).

7.5 Authorities and misuse

We act on orders from competent authorities under Articles 9 and 10 DSA. If content suggests a criminal offence involving a threat to the life or safety of a person, we inform the competent law enforcement authorities (Article 18 DSA). After a warning, we may for a reasonable period stop processing notices from someone who frequently submits manifestly unfounded notices, and suspend accounts that frequently provide manifestly illegal content.

8. API and MCP server

• API keys belong to a workspace, carry the scopes chosen when they were created and are available on the plans listed on the pricing page. Treat keys as passwords; revoke a key you no longer trust.
• You authorise the agents and MCP clients you connect to use your keys within their permissions. Mandatory rules on responsibility for unauthorised activity still apply. Check what an agent publishes and shares on your behalf.
• Respect the limits published on the developer page. Do not get around rate limits, use undocumented endpoints, or use the API to scrape other workspaces' content.
• We may throttle or revoke keys that endanger the service, other customers or viewers, and tell the workspace owners why.
• The API is versioned (/api/v1). We announce breaking changes to a stable version at least 90 days ahead, except where security or the law requires a faster change. Additive changes can happen at any time.

9. Plans, payment and taxes

Registration for a new workspace requires a verified email and a payment method confirmed by Stripe. The 30-day trial starts on that confirmation and uses Free limits. The chosen Pro or Team plan starts and charges automatically when the trial ends unless cancelled beforehand. Existing accounts keep their current access and are not automatically enrolled or charged. Paid plans are billed per workspace, monthly or yearly in advance, and renew automatically until cancelled. USD and EUR list prices are fixed separately, not converted daily. Stripe may offer other checkout currencies and payment methods with the applicable conversion and renewal terms shown before confirmation. Invited teammates can join an existing workspace without their own payment method, within its member limit.

The pricing page and checkout show the plan and billing interval. Checkout shows the applicable total, taxes, trial end date and renewal interval before you agree. Cancel in Billing → Manage subscription before the trial ends to avoid the first charge. See Billing, refunds and cancellation for renewal, changes, withdrawal and refund rights.

We give at least 30 days' notice of price changes, effective no earlier than the next renewal. You may cancel before then. For consumers, any additional consent or notice required by applicable law takes precedence.

10. Plan limits

Each plan has the limits shown on the pricing page. Above a limit, for example after a downgrade, a workspace becomes read-only for new content of that kind: existing decks keep working, and we never delete content because a plan ended or changed. We may change the Free plan's limits with 30 days' notice.

11. Suspension

We may suspend a share link, a presentation, API access, a workspace or an account if:

• it is used in breach of these terms or the Acceptable use policy;
• it creates a security risk for the service, other customers or viewers;
• a court or authority requires it; or
• it puts the stability of the service at material risk.

We choose the narrowest measure that addresses the problem. We give notice before suspending where we reasonably can; otherwise we suspend first and send the statement of reasons straight away. Suspension does not delete content. We lift it once the cause is fixed. You can contest a suspension as described in section 7.4. Unpaid invoices lead to a downgrade to Free, not to suspension.

12. Term, termination and your data

• These terms apply from the moment you accept them until your account is deleted or the contract ends.
• You can end the contract at any time by deleting your workspaces and your account. Download the decks you want to keep first; deletion cannot be undone.
• We can end the contract with 60 days' notice, and refund prepaid fees for the unused period. We can end it immediately if you seriously or repeatedly breach these terms, or do not fix a material breach within 14 days of our notice.
• When we end the contract, other than for illegal content, you have 30 days to download your content. After that we delete it; deleted data leaves our backups as they expire.
• Sections 5 (licence for backups), 13, 16, 17, 18 and 23 survive the end of the contract.

13. Confidentiality and access by our staff

Each party keeps the other's non-public information confidential and uses it only for this contract. Our staff do not open customer decks except when you ask for support, to investigate a notice or a security incident, or when the law requires it. The platform console shows workspace names, deck titles and counts; for a reported deck it shows a still picture, not the deck.

14. Data protection

Where you act as a controller of personal data in your workspace and we process it on your behalf, we are your processor and the Data processing agreement applies automatically; no signature is needed. A person using the service solely for private household activity does not become a business controller just by accepting these terms. A countersigned copy is available on request at office@kinesislab.ai. For account, billing and support data we are a controller, as the Privacy notice explains.

15. Our intellectual property

The service, its software, design and documentation belong to us and our licensors. You get a non-exclusive, non-transferable right to use the service during the contract under these terms. "Kinesis Lab" and "Lumdeck" are our trade names; do not use them in a way that suggests endorsement without our permission. Reverse engineering is not allowed except where the law permits it.

16. Service quality and remedies

We provide the service with reasonable skill and care and the functionality and security described in the plan. Keep your own copies of important material. We cannot promise that a deck will look identical in every browser or that there will never be an interruption.

Consumers retain statutory conformity and update rights for digital services. If the service does not conform, contact support. You may be entitled to a correction without charge, a proportionate price reduction or termination and reimbursement, depending on applicable law. A Test or beta label does not remove those rights.

17. Liability

For consumers, liability is determined by applicable law. We do not impose the business loss exclusions or monetary cap below on consumers. Nothing excludes liability that law does not allow us to exclude, including for fraud, intentional breach, gross negligence, death or personal injury.

For business customers only, to the extent permitted by law, neither party is liable for indirect or consequential loss or lost profits. Each party's aggregate liability in a twelve-month period is limited to the greater of EUR 100 and the fees paid in the preceding twelve months. The cap does not cover payment obligations, fraud, intentional breach, gross negligence or other liability that cannot lawfully be limited.

18. Claims about your content

Consumers have no contractual obligation to defend or indemnify us under this section; ordinary legal responsibility for unlawful conduct still applies.

Business customers must reimburse reasonable third-party damages and defence costs to the extent caused by their culpable infringement of intellectual property through uploaded content. We notify you promptly, cooperate and take reasonable steps to reduce the loss. No settlement binds you without your reasonable consent. This does not shift responsibility for our own conduct or regulatory fines to you.

19. Events outside our control

Neither party is liable for delays or failures caused by events beyond its reasonable control, such as natural disasters, war, acts of authorities, large-scale network or power failures, or failures of hosting providers not caused by the affected party. This does not remove consumer remedies for a service that is not supplied, or require payment where applicable law provides otherwise.

20. Changes to the service and to these terms

Lumdeck evolves; we may add, change or remove features. We give at least 30 days' notice by e-mail or in the app of changes to these terms or of feature removals that materially reduce what you pay for. When the terms change, you are asked to accept the new version when you next sign in. If you do not accept, you can end the contract before the change takes effect and we refund prepaid fees for the unused period. Changes required by law or to address security can take effect sooner. For consumers we make changes to a digital service only on a lawful contractual basis and for a valid reason, such as security, legal compliance or technical compatibility, without additional cost. Where required, we give advance notice on a durable medium and a right to terminate without charge if access or use is adversely affected beyond a minor degree. Mandatory rights prevail.

21. Notices

We send notices to the e-mail address of your account or of the workspace owners, or show them in the app. Send notices to us at office@kinesislab.ai. Telephone: +19406016358. WhatsApp: +19406016358. Or by post to Quietstack OÜ (registry code 17608504), Sepapaja tn 6, 15551 Tallinn, Estonia.

22. Transfer of the contract

We may transfer this contract to a company that takes over the service, with notice to you, without reducing consumer guarantees or other mandatory rights. You may transfer it only with our written consent, except to a successor of your business.

23. Governing law, complaints and courts

Estonian law governs these terms. Consumers keep the mandatory protection and court rights of their country of habitual residence where applicable; no exclusive Tallinn venue or compulsory negotiation period applies to them. Business disputes may be brought in Harju County Court, Tallinn, subject to mandatory rules.

Send complaints to office@kinesislab.ai. We aim to respond within 12 business hours during weekdays, 09:00–17:00 CET/CEST. Statutory complaint, withdrawal and refund deadlines take priority. Consumers may approach a competent consumer authority or dispute-resolution body, including Estonia's Consumer Disputes Committee where eligible: TTJA. You may also go directly to a competent court.

24. General

• These terms, with the documents in section 1, are the entire agreement about the service and replace earlier versions.
• If a provision is invalid, the rest stays in force and the invalid provision is replaced by a valid one closest to its purpose.
• Not enforcing a right is not a waiver of it.
• Do not use Lumdeck in breach of sanctions or export controls applicable to the transaction. Availability may be restricted where required by law or our payment providers.
• These terms are written in English. Translations are for convenience; the English text prevails.

25. Contact

Support: office@kinesislab.ai. Legal notices, the Digital Services Act contact point and copyright notices: office@kinesislab.ai. Postal address: Quietstack OÜ (registry code 17608504), Sepapaja tn 6, 15551 Tallinn, Estonia.