So, I go on the "Support" section to send them a message..:

  Hi, two things:

  1- The key <enter> should submit forms. (It didn't work in the signup form, the login form and some dialog box popping in).

  2- You sent me my password by e-mail.. which means you've got it in cleartext in the database. How can you then say it's secure..?

And, I get an infinite loop of javascript alert with "parsing error" and a bunch of html in it.

Seriously, not really professional. I mean, I can understand for other kinds of apps; but this is backup and highly confidential information.. this shouldn't happens. A little bit like you can judge a whole building based on the bathroom, a website with flaws everywhere talks a lot about the quality of the backend.