SpinUI Terms of Service

Effective date: 12 November 2026 Last updated: 12 November 2026

These Terms of Service ("Terms") are an agreement between Digiport OÜ, a private limited company (osaühing) registered in the Estonian Commercial Register under registry code 14584252 with its address at Sepapaja 6, 15551 Tallinn, Estonia ("SpinUI", "we", "us"), and the person or organization that uses SpinUI ("you", "Customer"). If you accept these Terms for an organization, you confirm that you can bind that organization.

SpinUI is an online service for automated testing of websites and web applications. It includes the web application at app.spinui.com, cloud runners, the private runner agent, the SpinUI Recorder browser extension, the command-line tool, the API, the MCP endpoint for AI agents, and related documentation (together, the "Service").

You accept these Terms when you tick the acceptance box at sign-up, or when you use the Service.

1. Definitions

Organization: a workspace in SpinUI that holds suites, tests, runs and settings. A user can belong to several organizations.
Client workspace: an organization created under an agency organization on plans that include it. It is billed to the agency organization.
Billing family: an organization together with its client workspaces. Plan limits are shared across the billing family.
Customer Content: everything you or your users put into the Service or cause the Service to collect. This includes test definitions, recordings, secrets, crawl results, screenshots, videos, traces, browser logs, received test emails, reports and notes.
Target: a website, application or system that the Service tests, crawls or visits for you.
Plan: the subscription level you choose (Free, Individual, Team or Business) and its limits and features.
Acceptable Use Policy (AUP): the policy at https://spinui.com/acceptable-use. It forms part of these Terms.
Privacy Policy: the policy at https://spinui.com/privacy.
DPA: the Data Processing Addendum at https://spinui.com/dpa. It applies where Section 9.4 says so.

2. Accounts and organizations

You must give accurate sign-up information and keep it current. You must verify your email address before some features work.
You can sign in with an email and password. Where offered, you can also sign in with Google or Microsoft. You can turn on two-step sign-in with an authenticator app (TOTP). We strongly recommend it.
You are responsible for all activity under your account and your organizations. Keep your passwords and tokens secret. Tell us at [email protected] without delay if you suspect misuse.
Organization Admins control membership, roles and settings for their organization. Roles (for example Admin, Editor and Viewer) limit what each member can do. Your Admins are responsible for who they invite.
An agency on a plan that includes client workspaces can create client workspaces. The agency is responsible for the client workspaces it creates and for having the right to put its clients' content in them.
You must be at least 18 years old, and old enough to form a binding contract where you live, to use the Service. The Service is meant for business and professional use.

3. Plans, prices and billing

Plans. The current plans, prices and limits are on our pricing page at https://spinui.com/pricing, which is the current reference. Prices are listed in US dollars. Where we also offer a price in euros or pounds sterling, it is the same number in that currency, and you are charged in the currency shown at checkout. Prices exclude VAT and sales tax. Any tax due is added at checkout.
"Unlimited" suites do not mean unlimited executions, storage, queue entries or client workspaces. Platform safety limits always apply.
Included minutes. Each paid Plan includes cloud execution minutes each month. We count measured execution time, not queue time or browser start-up time. When you reach your allowance, running work finishes, queued cloud work waits until the allowance resets or you upgrade, and new cloud work is refused. There are no automatic overage charges. Runs on your own private runners use no cloud minutes. On annual plans, minutes and the AI allowance still reset monthly.
Payment through our reseller. Paid Plans are sold through Stripe Managed Payments. For these sales, Stripe acts as our reseller and as the merchant of record, through its affiliate Link, LLC (the "Reseller"). Checkout shows this as "Sold through Link", and the selling entity is named at checkout and on your receipt. This means:
- You buy the subscription from the Reseller, not from Digiport OÜ. The Reseller charges your payment method, issues your invoices and receipts, and calculates, collects and remits sales tax, VAT or similar taxes.
- The Reseller's own terms of sale, shown at checkout, apply to the purchase, the payment, tax and the handling of refunds and payment disputes. If they conflict with these Terms on those points, the Reseller's terms apply.
- We provide the Service to you under these Terms, and we remain responsible for the Service and for support.
- We do not receive or store your full card number.
Auto-renewal. Paid Plans renew automatically at the end of each billing period (monthly or yearly) until you cancel. By buying a paid Plan you authorize recurring charges at the then-current price for your Plan and billing interval. Cancel at any time; see Section 5.
Payment methods. You manage your card and invoices in the billing portal linked from the Billing page. Under Managed Payments, card changes are made in that portal.
Upgrades. An upgrade applies once its payment is confirmed. You are charged a prorated amount for the rest of the current period. The new Plan's allowance replaces the old one for that period; it is not added to it. Moving from monthly to yearly billing is an immediate prorated upgrade.
Price changes. We may change prices for new purchases. Existing subscribers keep their price unless we tell you in advance that it will change. A price change for an existing subscription takes effect at the start of a later billing period, and we will email you at least 30 days before the new price applies. You can cancel before it takes effect.
Limit changes. We may increase Plan limits at any time. We apply decreases from your next billing period. Existing suites, members and client workspaces above a lowered limit stay usable; only growth beyond the limit is blocked.
Failed payments. If a renewal payment fails, you keep your Plan for a grace period of 14 days from the first failure. If the invoice is still unpaid after 14 days, the account is suspended for payment: new runs and crawls are refused, queued work (including work on private runners) is paused, and only account security and billing recovery stay available. Paying the overdue invoice restores access. Cancelling during a payment suspension does not lift the suspension. We do not delete your data because of a payment suspension alone. If an account stays suspended for payment for more than 90 days, we may close it under Section 14 after giving at least 30 days' notice by email.
Taxes. Under Managed Payments the Reseller calculates, collects and remits the VAT, sales tax or similar taxes that apply to your purchase, and adds them at checkout. You remain responsible for any tax that the law requires you to account for yourself, for example under a reverse-charge rule.
Complimentary plans. We may grant a complimentary Plan, for example for beta testing, with or without an end date. When it ends, the organization moves to Free unless an Admin buys a paid Plan. We do not charge you automatically when a complimentary Plan ends.

4. Free trial

When we offer it, eligible accounts may start one 14-day free trial of the monthly Team Plan from the Billing page. The offer is shown there only while it is available.
No payment card is needed to start the trial, and nothing is charged during it. You need a verified email address.
During the trial, usage is capped at 500 cloud minutes, 2 tests at a time and $1 of AI usage, whatever the Team Plan normally includes.
If you have not added a payment card by the end of the trial, the organization moves to Free and nothing is charged.
If you add a payment card during the trial and do not cancel, the Team Plan continues at the monthly Team price, and your card is charged when the trial ends. We send reminder emails before the trial ends.
One trial is allowed per person, per email address and per billing account. Creating another organization or account, or using a variant of the same email address, does not give another trial. Client workspaces cannot start a trial.
If you cancel during the trial, you keep trial access until the trial end date, then move to Free.
If you upgrade to another paid Plan during the trial, the trial ends and you are charged in full for the new Plan.
If the first payment after the trial fails, the organization moves to Free at once. There is no grace period for that payment.
No other Plan or billing interval has a trial. We may change or withdraw the trial offer for future sign-ups.

5. Cancellation and downgrades

You can cancel a paid Plan at any time from the billing portal. Cancellation takes effect at the end of the current billing period. You keep your paid Plan until then, and then move to Free.
You can downgrade to a lower paid Plan with the in-app "Downgrade at period end" option. The downgrade takes effect at the end of the current billing period. Moving from yearly to monthly billing takes effect at the end of the billing year.
After a downgrade or a move to Free:
- your suites, members and client workspaces are kept and stay usable;
- you cannot add more suites, members or client workspaces than the new Plan allows;
- features the new Plan does not include (for example private runners, CI tokens or AI agent access) stop;
- artifacts (screenshots, traces, videos) follow the new Plan's retention. Artifacts created before the change keep their old expiry for up to 7 days after the change, but never longer than their old expiry.
Refunds are covered by the Refund Policy at https://spinui.com/refunds. A refund does not by itself cancel a subscription.

6. Your content and the licence you give us

You own your Customer Content. We claim no ownership of it.
Licence to us. You give us a worldwide, non-exclusive, royalty-free licence to host, copy, process, transmit and display Customer Content only as needed to provide, secure and support the Service, to prevent abuse, and to comply with law. This includes sending limited Customer Content to our sub-processors as described in the Privacy Policy and the DPA.
Your responsibilities. You are responsible for your Customer Content and for having all rights and consents needed for us to process it. This includes any personal data that appears on the Targets you test.
Secrets. You can store secrets (for example test passwords or API keys) for use in tests. We encrypt them at rest and send them only to the runner that executes your test. Only store credentials you are authorized to use (see the AUP).
Retention. Customer Content is kept for the periods in the Privacy Policy and your Plan. Shorter retention applies to artifacts (7, 14 or 30 days by Plan), run and crawl report history (about 90 days), and received test emails (72 hours for the full message). These are maximum periods; we may remove artifacts earlier when storage limits require it. Keep your own copies of anything you need to keep.
Aggregate data. We may use usage counts and other data that does not identify you or any person (for example minutes used or error rates) to run, secure and improve the Service.

7. Acceptable use

You must follow the AUP. In short:
- test only Targets you own or are authorized to test;
- do not use the Service for load or denial-of-service testing, for scraping third parties, or to get around limits;
- use test inboxes only to test your own applications.
You are responsible for your users' compliance with the AUP.

8. Testing, Targets and private runners

Authority over Targets. You confirm that you have the right to run the tests and crawls you set up against each Target. The Service acts on Targets only on your instructions. You are responsible for the effects of your tests on the Target, including form submissions, purchases, emails sent and data created there.
Cloud runners. Our cloud runners run in our hosting environment. They block access to private and internal network addresses. To test a site that is only reachable inside your network, use a private runner.
Private runners. On Team and Business you can install the SpinUI private runner agent on a computer or container in your own network. When you do:
- you run it on your own infrastructure, at your own cost and risk, and you are responsible for that host, its security, its patching and its network access;
- the runner makes only outbound HTTPS connections to SpinUI. It registers with a one-time token, then receives your organization's jobs, including the secrets those tests use, and uploads results;
- the Windows service version updates itself automatically when idle unless you turn this off. We may require a minimum runner version; older runners stop receiving work until updated;
- the Windows runner may not be code-signed yet. If it is not, Windows may show an "unknown publisher" warning when you start it. Download the runner only from the Runners page of your SpinUI organization. The runner checks its own updates against a SHA-256 checksum published by the SpinUI server over HTTPS;
- private runners follow your own network's egress rules, not our cloud egress guard;
- you can revoke a runner at any time in Settings > Runners.
Crawls. Crawls follow the Target's robots.txt and stop at the Plan's page and time limits.

9. AI features

What they are. The Service offers AI features on the Plans shown on our pricing page: suggested checks, failure explanations, summary polish, accessibility code-fix suggestions, "Describe a test", suggested selector fixes and coverage suggestions.
Provider. These features use a third-party AI model provider, Anthropic (Claude Haiku by default). To produce a result, the Service sends the provider a limited, minimised extract of Customer Content. The Privacy Policy describes what is sent. Secrets, typed passwords and screenshots are not sent.
Usage budget. Each Plan that includes AI features has a monthly AI usage budget. The pricing page shows it as an estimated number of suggestions; the actual number depends on the size of each request. When the budget is used up, AI features pause until it resets. We may also apply a platform-wide limit.
Review the output. AI output can be wrong. It is a suggestion, not advice. Review it before you rely on it. The Service never changes a test on its own because of AI output: a suggested selector fix is used only on the retry and flagged for your review, and drafts need your confirmation.
Your output. As between you and us, you own the suggestions generated for you, to the extent any rights exist in them.
Training. We do not use your Customer Content to train AI models. Under its commercial terms, our AI provider may not use the data we send it to train its models. The Privacy Policy describes how long the provider keeps that data.

10. SpinUI Recorder browser extension

The SpinUI Recorder is a Chrome extension that records your actions on pages you choose and saves them as tests in your SpinUI organization.
It works only on a site after you start a recording there and Chrome grants access to that site.
It redacts password fields and fields recognised as sensitive by rule. It does not detect every sensitive field: for example, a card-number field without the right attributes is recorded as typed. Do not record pages that show real payment card data or other people's data you are not allowed to process.
The Recorder's data practices are described in the Privacy Policy section "SpinUI Recorder".
Use of the extension is also subject to the Chrome Web Store terms.

11. API, CLI, CI and agent tokens

You can create tokens for the API, the command-line tool, CI pipelines, trigger URLs, the Recorder and AI agents (MCP). Some token types depend on your Plan.
Tokens act with the permissions of the user and organization they belong to. Anyone who holds a token can use it. Keep tokens secret, store them in a secret store, and revoke them when no longer needed.
Tokens are shown once, are stored by us only in hashed form, and can expire. For example, agent connections that use sign-in (OAuth) use access tokens valid for at most one hour; Recorder tokens expire after 90 days without use and never last more than 365 days.
AI agents (MCP). If you connect an AI agent or coding assistant to SpinUI, that agent is your tool, not ours. It acts with your token's permissions. Content it reads from SpinUI (including website text and test emails) is passed to that agent and its provider under your arrangements with them, not ours. Write actions require a preview and confirmation and are recorded in the audit log and test history. You are responsible for what your agent does with your token.
We may rate-limit or revoke tokens to protect the Service.

12. Availability and support

We aim to keep the Service available, but we do not offer a service-level agreement (SLA). The Service may be unavailable for maintenance, updates or events beyond our control. Where practical, we will announce planned maintenance and significant incidents by email or in the Service.
Some parts depend on others. For example, test-email delivery depends on the sending mail server and our mail receiver, and cloud runs depend on our hosting provider.
Support is by email at [email protected]. Business Plans receive priority in our email queue. We answer on business days and aim to reply within two business days. This is a target, not a guarantee.
We may change, add or remove features. If we remove a material feature of a paid Plan during your billing period, we will tell you in advance where practical.

13. Suspension

We may suspend all or part of your access, with notice where practical, if:
- you breach these Terms or the AUP;
- your use creates a security risk, harms a Target or third party, or threatens the Service or other customers;
- payment is overdue (see Section 3.10);
- we must do so by law.
We will limit a suspension to what is reasonably needed and lift it when the reason is resolved.

14. Term and termination

These Terms apply from when you accept them until your account and organizations are closed.
You may stop using the Service and cancel paid Plans at any time (Section 5). To close an account or organization and have its data deleted, an organization Admin emails [email protected] from their account address. Deletion is handled on request; there is no self-service deletion in the product. For an organization:
- cancel any paid Plan first, and close its client workspaces first, each on its own request;
- we provide an export file of the organization's test content and run history before deletion, unless you tell us you do not need it;
- the organization is locked for a 7-day waiting period, during which you can withdraw the request, and is then deleted;
- deletion is completed within 30 days of your request.
We may terminate these Terms or close an account for a material breach that is not cured within 30 days of notice, or at once for serious or repeated AUP breaches, or as required by law. We may also stop offering the Service with at least 60 days' notice. Prepaid fees for the unused period after the Service ends are then refunded, through the Reseller.
After termination you lose access. We delete Customer Content within 30 days, except where law requires us to keep it and except backups, which expire on their normal cycle. The Privacy Policy and the DPA list the few records we keep after deletion.
Sections that by their nature should survive termination survive, including Sections 6.6 and 15 to 21.

15. Intellectual property

We and our licensors own the Service, including the software, the Recorder, the runner agent, the CLI, the agent skills, documentation, designs and trademarks. These Terms give you only the rights they state.
While you comply with these Terms, you may use the Service, and install and run the Recorder, the private runner agent and the CLI, for your internal business purposes.
You must not copy, modify, sell, rent or sublicense the Service, or reverse-engineer it except where law allows. The Recorder, the private runner agent, the CLI and the agent skills are proprietary software. They are licensed to you only under Section 15.2, unless a package states a different licence. Open-source components inside them keep their own licences; see the third-party notices that come with each package.

16. Feedback

If you send us ideas or suggestions, we may use them without any obligation to you. This does not give us rights in your Customer Content.

17. Confidentiality

"Confidential Information" means non-public information that one party shares with the other and that is marked confidential or is clearly confidential. Customer Content is your Confidential Information.
The receiving party will use the other party's Confidential Information only for this agreement, protect it with reasonable care, and share it only with staff, contractors and sub-processors who need it and are bound by similar duties.
This does not apply to information that is public through no fault of the receiver, was already known to it, was received lawfully from someone else, or was developed independently.
A party may disclose Confidential Information when law requires it, after giving notice where lawful.

18. Warranties and disclaimers

Each party confirms that it has the authority to enter into these Terms.
You confirm that you have the rights and authority described in Sections 6.3 and 8.1.
Except as these Terms expressly state, the Service is provided "as is" and "as available". To the extent law allows, we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, title and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, that tests will find every defect, or that AI output will be accurate.
Free Plans and beta features are provided without any warranty.
Nothing in these Terms excludes or limits a warranty or right that the law applying to you does not allow to be excluded or limited. If you use the Service as a consumer (for personal use), you keep the mandatory rights of the country where you live.

19. Limitation of liability

To the extent law allows, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, even if told they were possible.
To the extent law allows, each party's total liability arising out of or relating to these Terms in any 12-month period is limited to the amount you paid for the Service in the 12 months before the claim arose, or USD 100 if you paid nothing in that time.
The limits in this section do not apply where the law does not allow liability to be limited. This includes liability for intent, gross negligence, death or personal injury. They also do not limit your obligation to pay fees, or your obligations under Section 20.1.

20. Indemnity

You will defend and indemnify us against third-party claims arising from your Customer Content, your Targets and tests (including tests run against Targets you were not authorized to test), your breach of these Terms or the AUP, or your use of private runners or AI agents.
If a third party claims that the Service itself, as we provide it, infringes its intellectual property rights, we will defend you against that claim and pay the damages finally awarded against you or agreed by us in a settlement, up to the limit in Section 19.2. We may also change the Service so that it no longer infringes, obtain the right for you to keep using it, or end the affected Service and have prepaid fees for the unused period refunded. This does not cover claims that arise from your Customer Content, your Targets, your changes to the Service, or its use with things we did not provide or against these Terms. It does not apply to Free Plans. This Section 20.2 states all we owe you for such claims.
The indemnified party must give prompt notice, reasonable cooperation and control of the defence to the indemnifying party, which may not settle a claim that imposes obligations on the indemnified party without its consent.

21. General

Changes to these Terms. We may update these Terms. For material changes we will give at least 30 days' notice by email or in the Service before they take effect. If you do not agree, you may cancel before the change takes effect. Continued use after that date means you accept the change.
Governing law and venue. These Terms are governed by the laws of the Republic of Estonia, without regard to conflict-of-law rules. The courts of Estonia, with Harju County Court (Harju Maakohus) in Tallinn as the court of first instance, have exclusive jurisdiction. This does not take away any mandatory protection you have under the law of the country where you are established. If you are a consumer, you keep the mandatory protections of the country where you live, and you may also bring proceedings in the courts of that country.
Assignment. You may not assign these Terms without our consent, except to a successor of your business. We may assign them to an affiliate or a successor.
Force majeure. Neither party is liable for delays caused by events beyond its reasonable control (other than payment obligations).
Export and sanctions. You must comply with the export control and sanctions laws that apply to your use. You confirm that you are not located in, or ordinarily resident in, a country or territory under a comprehensive embargo of the European Union, the United Nations, the United Kingdom or the United States, and that you are not on a sanctions list of any of them. You must not use the Service for, or on behalf of, anyone who is.
Entire agreement. These Terms, the AUP, the Privacy Policy, the Refund Policy and, where it applies, the DPA are the entire agreement on this subject. If they conflict, the DPA prevails on data protection, then these Terms.
Severability and waiver. If a provision is unenforceable, the rest stays in effect. A failure to enforce a provision is not a waiver.
Notices. We send notices to your account email or in the Service. Send legal notices to [email protected] and Sepapaja 6, 15551 Tallinn, Estonia.

22. Contact

Digiport OÜ Sepapaja 6, 15551 Tallinn, Estonia Support: [email protected] Legal notices: [email protected] Security reports: [email protected]