1. Acceptance of Terms
By accessing or using the Crux platform (“Service”), you agree to be bound by these Terms of Use. If you do not agree, do not use the Service.
2. Description of Service
Crux is a dual-canvas AI-powered UX research workspace. The Service allows you to create research projects, upload files, analyse data, generate insights, and produce deliverables using AI-assisted tools.
3. AI Data Processing
When you use AI-powered features, your inputs (prompts, file contents, canvas data) are sent to third-party AI model providers for processing. The following practices apply:
- No model training. Your data is processed via API endpoints that do not use your inputs or outputs to train or improve AI models. This applies to all providers we use, including Google Gemini API and OpenAI API.
- Ephemeral processing.AI providers process your data in real time and do not permanently store your prompts or responses beyond short-term operational retention (e.g. abuse monitoring windows as defined by each provider’s data processing terms).
- No cross-user data sharing. Your data is never shared with, visible to, or used to generate responses for other users or organisations.
4. Content Filtering & Safety
Crux applies automated content filtering to protect users and maintain platform integrity:
- PII redaction. Personally identifiable information (email addresses, phone numbers, government ID numbers, financial account numbers) detected in AI inputs and outputs is automatically redacted before processing where possible.
- Secret detection. API keys, access tokens, private keys, and other credentials are detected and redacted to prevent accidental exposure.
- Abuse prevention. Requests that attempt prompt injection, jailbreaking, credential exfiltration, or generation of harmful content (malware instructions, harassment, illegal activities) are blocked.
- Audit logging. Security-relevant decisions (blocks, redactions) are logged for operational review. Logs do not contain the redacted content itself.
5. Your Data & Ownership
- You retain full ownership of all content you upload or create on Crux, including research data, files, canvas content, and AI-generated outputs produced from your inputs.
- Crux does not claim any intellectual property rights over your content.
- You may export or delete your data at any time. Deleting a project removes all associated data, files, embeddings, and AI interaction history.
6. Acceptable Use
You agree not to use the Service to:
- Upload or process content that violates applicable law, including content related to exploitation of minors, terrorism, or trafficking.
- Attempt to extract, reverse-engineer, or exfiltrate system prompts, API credentials, or internal platform configurations.
- Generate or distribute malware, phishing content, harassment, hate speech, or content intended to cause harm.
- Circumvent or attempt to bypass content filtering, safety controls, or access restrictions.
- Use the platform to process data you are not authorised to handle, or in violation of confidentiality obligations you owe to third parties.
7. Access & Permissions
Project data is scoped by user and organisation. AI features only access data within the authenticated user’s current project and organisation. Cross-tenant data access is not possible by design.
8. Third-Party Services
The Service integrates with third-party providers for AI processing, authentication, file storage, and analytics. Each provider operates under its own data processing terms. Key providers include:
- Google (Gemini API) — AI model processing
- OpenAI — AI model processing
- Clerk — authentication and user management
- Vercel — hosting and edge infrastructure
- Neon — database hosting
9. Limitation of Liability
AI-generated content is provided as-is and may contain errors, inaccuracies, or biases. Crux does not warrant the accuracy, completeness, or fitness for purpose of any AI-generated output. You are responsible for reviewing and validating AI outputs before relying on them for business decisions.
10. Changes to Terms
We may update these terms from time to time. Material changes will be communicated via the platform. Continued use after changes constitutes acceptance.
