Terms of Service
These general terms and conditions apply to all offers, quotations and agreements of DaVince Investments B.V., trading as Mistra.io, having its registered office in Hoofddorp, registered with the Dutch Chamber of Commerce under number 72365919 (hereinafter: ‘Mistra’).
These terms govern the documents you publish, host, and view through Mistra — a private, show-only HTML sharing service built for AI assistants and their users. By using the service you agree to them. Our company and contact details are on the contact page.
1. What Mistra is
Mistra hosts a single, self-contained HTML page (or a page plus its own local assets) per share, and serves it to specific people you choose, gated by a one-time code or link sent to their email address. It is reachable both through a browser dashboard and through the Model Context Protocol (MCP), so an AI assistant can publish and manage shares on your behalf when you authorise it to. It is not a general website host, a document-editing tool, or a public publishing platform.
2. Acceptable use
You may not upload, host, or share content that is illegal, infringes others' rights, or depicts the abuse or exploitation of any person. Illegal imagery is strictly prohibited; uploaded images are checked against known-illegal-content hash sets at publish time, and matches or reports are escalated and, where the law requires, reported to the authorities. You may not use the service to attempt to defeat the show-only sandbox or the access gate, to probe or attack the service or other tenants' data, to send unsolicited bulk email through the viewer gate, or as a general website, application, or file-hosting platform for content unrelated to sharing a document you authored or are authorised to share.
3. Show-only delivery
A published page renders live inside a locked browser sandbox: its script can run, animate, and respond to clicks, but the sandbox is sealed so the page cannot read cookies or local storage outside itself, make a network request of any kind (no fetch, form submission, or similar), navigate the viewer's tab, open a popup, or trigger a download of its own accord. This means a shared page cannot capture or transmit what a recipient does on it. Downloads of the underlying file are off by default and can be enabled per share by the publisher; enabling downloads is a separate, explicit choice and does not change how the page behaves while viewed. Show-only is a data-collection and network-egress guarantee about the sandbox the page runs in — it is not a copy-protection measure, and it does not stop a viewer from seeing, screenshotting, or otherwise using content that is visibly on their screen.
4. Your account and access
Sign-in for publishers and for viewers is passwordless, by a one-time code or link sent to the relevant email address. You are responsible for the addresses you grant access to a document and for keeping your own mailbox secure — anyone with access to a granted mailbox can view that document. During the current invite-only phase, publisher access is limited to allowlisted accounts.
5. Plans, add-ons, and billing
The free plan and paid plans, and any add-ons you choose (such as extra custom domains or extended archive retention), are described on the pricing page. Paid plans and add-ons are billed on a recurring basis through our payment provider. Plan limits (active shares, viewers per share, custom domains, retention, and similar) apply as shown there and are enforced by the service. Changing, downgrading, or cancelling a plan takes effect according to your current billing period; see the pricing page and your dashboard's billing section for the current terms and pricing.
6. Your content
You retain ownership of what you publish. You grant us only the limited rights needed to store, scan for illegal content, and serve your document to the recipients you choose, for as long as the share (and, if applicable, its retention window) is live. You are responsible for having the right to share the content you publish, including any personal data about others that it contains.
7. Enforcement, illegal content, and notice-and-action
We may disable or remove any document, and suspend or delete any account, that breaches these terms, and we report illegal content to the competent authorities where required by law. Anyone — a recipient, a publisher, or a third party — can report a document as illegal or in breach of these terms via the report page (which identifies the specific document where one is known) or by emailing our abuse address, shown on the contact page. We review reports under a notice-and-action process, act promptly once we have enough information to identify the content and the concern, and maintain the named point of contact given on the contact page, consistent with the EU Digital Services Act's notice-and-action and point-of-contact duties for hosting services.
8. Availability, warranties, and liability
The service is provided on a best-effort basis and is still in an early release; features, plans, and limits may change with notice on the pricing or dashboard pages. To the extent permitted by law, the service is provided "as is" and "as available", without warranties of any kind, and our liability for any claim relating to the service is limited to the greatest extent the law allows.
9. Governing law
These terms are governed by the law of the Netherlands, without regard to its conflict-of-law rules, and disputes are subject to the exclusive jurisdiction of the competent Dutch courts, except where mandatory local consumer-protection law says otherwise. We may update these terms from time to time; material changes will be reflected on this page, and continued use of the service after a change means you accept the updated terms.