Terms of service

Provider and agreement

Nivora Works, enterprise/VAT number BE 1041.516.417, Julius en Maurits Sabbestraat 15, 8000 Bruges, Belgium provides Box. Contact box@nivoraworks.com. If you use Box for an organisation, you confirm that you can bind that organisation; “you” then includes it. Any signed order or enterprise agreement takes priority over these online terms where it expressly says so.

Our Privacy Policy describes controller processing. When Nivora processes customer communication on behalf of a business customer, the Data Processing Addendum at box.nivoraworks.com/dpa forms part of this agreement.

Eligibility, accounts and security

You must be at least 18 or have legal capacity to enter this agreement. Account information must be accurate and kept current. You may connect only accounts, inboxes, pages, teams and business assets you are authorised to access and process.

Keep credentials and devices secure, use a unique password and available multi-factor authentication, and tell us promptly about suspected compromise. You are responsible for activity under your account until you notify us, except to the extent caused by our breach of duty. Administrators are responsible for team membership and role assignments.

Licence and customer content

We grant you a limited, non-exclusive, non-transferable right to use Box during the subscription for your internal communication purposes. Box software, branding and documentation remain ours or our licensors’. Feedback may be used without identifying you or disclosing customer content.

You retain rights in the messages, files, prompts and other content you provide. You instruct us to host, transmit, transform and display that content only as needed to provide, secure and support Box. You confirm you have the necessary rights and lawful basis for customer, employee and contact data you place in Box.

Acceptable use

Do not use Box for spam, harassment, unlawful surveillance, credential theft, malware, prohibited scraping, deceptive automation, illegal content, infringement, bypassing provider rules, security testing without written authorisation, or activity that harms another person or the service.

Comply with applicable communications, marketing, employment, records and data-protection law and with Google, Microsoft, Meta, WhatsApp, Apple and other connected-provider terms. We may rate-limit, reject or quarantine activity needed to protect users, providers or infrastructure.

Connected services

Connected services are controlled by their providers. Their APIs, permissions, messaging windows, eligibility rules and availability can change. You authorise Box to take only the actions you request through the interface and can withdraw that access by disconnecting the service.

A linked-device WhatsApp feature, if offered, is not the official WhatsApp Business Cloud API and carries no Meta service-level commitment. The provider may disconnect it. Use an official provider route where contractual availability or regulated archiving is required.

We are not responsible for a provider outage, suspension or policy change outside our reasonable control, but we will not use that clause to avoid responsibility for our own integration or security failures.

AI features

AI output can be inaccurate, incomplete or unsuitable. Review it before sending, moving or relying on communication. Do not use Box AI as the sole basis for legal, medical, employment, credit or other high-impact decisions.

You may submit content to AI only where you have authority to do so. Box shows confirmation before supported external actions; you remain responsible for the final instruction. Model and usage limits may vary by plan to protect reliability and cost.

Plans, billing and cancellation

Prices, included usage, billing interval, taxes and renewal terms are shown before checkout. Paid plans renew until cancelled. Stripe processes payment details; Box does not receive full card numbers. You authorise the displayed recurring charge and must keep payment details valid.

You can cancel in the billing settings or Stripe customer portal. Unless the checkout or mandatory law says otherwise, cancellation stops the next renewal and access continues through the paid period; already-started periods are not refunded. We will provide any mandatory consumer withdrawal, refund or price-change rights that apply to you.

We may change future prices with advance notice. A price change applies no earlier than your next renewal after the notice period. Non-payment may result in a downgrade or suspension after reasonable notice where practicable.

Confidentiality and data protection

Each party must protect non-public information received from the other and use it only for this agreement, except where disclosure is authorised or legally required. Nivora personnel and providers are bound by confidentiality appropriate to their access.

The Privacy Policy and Subprocessor Register explain Box data handling. Business customers must provide required notices to their users and contacts and answer controller-level rights requests; Nivora will provide reasonable processor assistance under the DPA.

Availability, support and changes

We aim to operate Box reliably and securely but do not promise uninterrupted or error-free availability. Preview and beta features may change or be withdrawn. Any separate signed service-level commitment controls over this paragraph.

We may change features where needed for security, law, provider compatibility or product improvement. We will give reasonable notice if a change materially removes paid core functionality, unless urgent security or legal action prevents advance notice.

Suspension and termination

You can stop using Box, disconnect services or delete your account at any time. We may suspend access reasonably necessary to address a security incident, unlawful use, material breach, provider requirement or non-payment. Where safe and lawful, we will explain and allow a reasonable cure.

We may terminate an account for an uncured material breach or if the service is discontinued. On termination, access ends and customer content is deleted under the Privacy Policy and DPA, except for lawful retention. Export important data before closing the account.

Responsibility and liability

Nothing in these terms excludes liability that cannot legally be excluded, including liability for fraud, wilful misconduct, gross negligence, death or personal injury caused by negligence, or mandatory consumer and data-protection rights.

For business customers, to the extent the law permits and unless a signed agreement says otherwise, neither party is liable for indirect or consequential loss, lost profit or lost opportunity. Each party’s aggregate contractual liability in a twelve-month period is limited to fees paid or payable for Box in that period. This limit does not apply to the non-excludable matters above, your intentional misuse, or infringement of the other party’s intellectual-property rights.

Consumer rights under mandatory law remain unaffected. These terms do not make you responsible for loss caused by a defect or security failure for which Nivora is legally responsible.

Law, disputes and changes to terms

Belgian law governs these terms. Courts in Bruges have jurisdiction for business disputes, while consumers may use any mandatory court or dispute right available where they live. Before filing, please send the issue to box@nivoraworks.com so the parties can try to resolve it.

We may update these terms for legal, security or product reasons. We will give prominent advance notice of material changes. Continuing after the effective date means acceptance; if a material change is unacceptable, you may cancel before it takes effect. The version date above identifies the agreement you accepted.