Acceptable Use Policy

Effective date: August 27, 2026

This Acceptable Use Policy (“AUP”) sets the basic rules for using the Panel website, forms, communications, research activities and any private test environment.

It forms part of the Panel Terms of Service. Panel is provided by Panel Labs s.r.o. Reports may be sent through https://www.panel.design/contact or hello@panel.design.

1. General rule

Use Panel lawfully, respectfully and only for its intended informational, communication, research or invited-testing purpose.

You are responsible for the information, files, examples and other materials you submit, and for having the rights and permissions needed to share them.

The examples below are not exhaustive. Conduct with a substantially similar harmful purpose or effect is also prohibited.

2. Illegal activity and harm

Do not use Panel to:

  • violate applicable law, a court order, sanctions or export controls;

  • facilitate fraud, phishing, trafficking, exploitation, unlawful weapons activity or another crime;

  • threaten, harass, stalk, intimidate or encourage violence against a person or group;

  • distribute malware, malicious code or instructions intended to compromise a system;

  • create or distribute child sexual abuse material or content that sexually exploits a minor;

  • share non-consensual intimate material; or

  • fabricate evidence, identity documents or communications for deceptive or unlawful use.

Lawful fictional, journalistic, documentary, historical, educational or artistic discussion is not prohibited merely because it addresses difficult subjects.

3. Rights, privacy and confidentiality

Do not submit, disclose or use material in a way that infringes or misappropriates:

  • copyright, trademarks, design rights, database rights or trade secrets;

  • privacy, data-protection, publicity or personality rights;

  • contractual confidentiality; or

  • another person’s ownership or legal rights.

Do not impersonate another person or organization, falsely claim affiliation or endorsement, or provide misleading identity or eligibility information.

Do not send passwords, payment-card data, government identifiers, medical records, confidential client files or other highly sensitive information unless Panel has expressly confirmed that a particular research activity is designed to receive it.

4. Website and infrastructure abuse

Do not:

  • gain or attempt to gain unauthorized access to an account, test, system, network or data;

  • probe, scan or test vulnerabilities without Panel’s prior written authorization;

  • bypass access controls, rate limits or security measures;

  • introduce malware or interfere with availability or performance;

  • scrape, crawl, copy or send automated requests at a volume that burdens the website or infrastructure;

  • use bots or automation to submit forms, spam, manipulate research recruitment or create false demand;

  • conceal the origin of malicious traffic; or

  • use Panel infrastructure to attack, monitor or disrupt another service.

Ordinary search-engine indexing and reasonable use of standard browser features are not prohibited.

5. Private-test access

If you receive private test access, you must:

  • use it only for the invited purpose and period;

  • keep credentials and access links secure;

  • not share, sell or transfer the invitation or access;

  • follow reasonable test and security instructions;

  • use only test content you are permitted to provide;

  • not attempt to access another participant’s information; and

  • stop using the test when access expires or Panel asks you to stop.

Do not publicly demonstrate, publish, benchmark or disclose a non-public prototype, unreleased feature, screenshot, recording or test instruction if it is marked confidential or is obviously non-public from the circumstances.

A test is not a production service or permanent storage system. Do not use it for safety-critical decisions, regulated processing, unlawful surveillance, or activity where a failure or loss could cause serious harm.

6. Communications and research conduct

Do not use Panel forms, interviews or communication channels to:

  • send unsolicited bulk messages or repetitive promotional material;

  • submit knowingly false reports or fraudulent applications;

  • abuse, threaten or harass participants or Panel personnel;

  • record a session secretly where consent is required;

  • solicit credentials or confidential information from another person; or

  • disrupt a session or prevent others from participating.

Good-faith criticism, negative product feedback and responsible reporting of a problem are allowed.

7. Security and rights reports

If you discover a security issue, do not exploit it, access more data than necessary to demonstrate the issue, alter data, disrupt the service or disclose the issue in a way that creates avoidable harm.

Report security concerns, suspected misuse, privacy issues or rights infringements through:

Include the relevant URL or test identifier, a clear description, and supporting information that you are legally permitted to share. Do not include unnecessary personal or sensitive data.

8. Enforcement

Depending on the context and severity, Panel may:

  • ask for clarification or correction;

  • reject or remove a submission;

  • restrict or revoke test access;

  • preserve evidence needed for security, legal or rights purposes;

  • block abusive traffic;

  • report a matter to a competent authority where required or lawfully necessary; or

  • take another proportionate step permitted by the Terms and applicable law.

Urgent action may be taken without advance notice where reasonably necessary to address a security threat, unlawful content, serious harm or a valid legal request.

Where appropriate, you may ask us to reconsider an action through the contact details above.

9. Changes

We may update this AUP when Panel’s public activities, private tests, risks or legal obligations change. The effective date identifies the current version. Material changes apply prospectively and will be communicated where appropriate.