Terms of Service

These Terms of Service (“Terms”) are an agreement between you and Inorise Co., Ltd., a company registered in Thailand that operates Box (“Box”, “we”, “us”). They cover the Box website, the dashboard, and the S3-compatible storage API (together, the “Service”).

By creating an account or using the Service, you agree to these Terms. If you use Box for an organisation, you confirm that you are allowed to accept these Terms on its behalf, and “you” means that organisation.

1. Early access

Box is in early access. We are still building it, so features, limits, and prices may change, and some features described on our website may not be available yet. We will tell you before any change that materially affects you, as described in section 13.

2. Your account

• You must be legally able to enter into a contract under Thai law, and you must give us a working email address.
• Keep your password and access keys secret. You are responsible for everything done with your account and keys, including by anyone you share them with.
• If you think your password or a key has been exposed, revoke the key and contact us straight away.

3. Your data

• You keep all rights to the files and other content you store with Box (“Customer Data”). We do not claim any ownership of it.
• You allow us to store, copy, encrypt, split, and move Customer Data only as needed to run the Service for you, keep it secure, and comply with the law.
• We encrypt every file with AES-256 before storing it, then spread the encrypted pieces across independent storage providers. Those providers only ever receive encrypted data. Box holds the encryption keys so that it can return your files to you.
• Our staff do not access your raw files or Customer Data contents. Even when you ask us to help with a support request, staff only inspect necessary technical metadata and logs, and never access or view your raw data unless strictly required by law.
• If Customer Data includes personal data about other people, you are the data controller and we process it on your behalf, as explained in our Privacy Policy.
• You are responsible for having the right to store your Customer Data, and for keeping your own copies of anything you cannot afford to lose.

4. Deleting data

When you delete an object or a bucket, it is removed from Box straight away, and the encrypted data is then erased from our storage providers in the background. Deleted data cannot be recovered, so please check before you delete.

5. Acceptable use

You must not use the Service to:

• store or share anything that is illegal in Thailand or where you operate, including child sexual abuse material, or anything that infringes someone else’s intellectual property or privacy rights;
• distribute malware, host phishing pages, or support spam;
• try to access other customers’ data, test or break our security, or get around our usage metering or billing;
• put a load on the Service that disrupts it for others, including load testing, unless we have agreed to it in writing;
• break Thailand’s Computer Crime Act B.E. 2550 (2007) or any other law that applies to you.

If we reasonably believe that you have broken this section, we may remove the content concerned or suspend your access, and we may report illegal content to the authorities.

6. Prices and payment

• Our prices are listed on our website in Thai baht. They exclude 7% VAT, which we add where it applies.
• Storage is charged by the GB-hour, with a minimum of six hours per object. Each month includes free downloads up to twice your average stored volume. Downloads beyond that are charged per GB. Downloads served from our cache count half toward the free allowance and cost half the usual rate beyond it.
• Charges are deducted from your prepaid credit as you use the Service. Prepaid credit does not expire. If we agree to invoice you instead, payment is due by the date shown on the invoice.
• Charges are based on our own usage records. If you think a charge is wrong, tell us within 30 days of the charge and we will review it.
• Unused prepaid credit is not refundable, except where the law requires it or where we end the Service under section 10 for a reason other than your breach of these Terms.
• We may change our prices by giving you at least 30 days’ notice. New prices apply from the first full calendar month after the notice period ends.

7. Availability and durability

• We commit to at least 99.99% availability of the storage API in each calendar month. Availability is the share of minutes in the month in which the storage API responds to valid requests without a server error. Maintenance we have announced at least 48 hours in advance, and events outside our reasonable control, do not count as downtime.
• If we miss that target, you can request a service credit by contacting us within 30 days after the end of the month. The credit is 10% of that month’s charges if availability was below 99.99%, 25% if below 99.9%, and 50% if below 99.0%. Service credits are added to your prepaid credit and are your only remedy for unavailability.
• Box is designed for 99.999999999% (eleven nines) durability. This is an engineering target, not a commitment covered by service credits.

8. Suspension

We may suspend your access to the Service if:

• your prepaid credit runs out or an invoice is overdue;
• you break section 5; or
• we need to, in order to protect the Service or other customers, or to comply with the law.

Where we can, we will warn you first and give you a reasonable time to fix the problem. While your account is suspended, your access keys stop working and you cannot create buckets or keys, but your stored data is not deleted because of the suspension alone. If the problem is not fixed, we may end these Terms under section 10.

9. Closing your account

You can stop using the Service at any time. To close your account, delete the data you no longer need, download anything you want to keep, and email us at legal@inorise.co.th. We will close the account once any outstanding charges are settled, and then delete its remaining Customer Data.

10. Ending these Terms

• We may end these Terms for any reason by giving you at least 30 days’ notice. You can download your Customer Data during the notice period.
• We may end these Terms straight away if you seriously or repeatedly break them, or if the law requires us to stop providing the Service to you.
• When these Terms end, your access stops and we delete your Customer Data. Sections 6, 11, 12, and 14 continue to apply after the Terms end.

11. Disclaimers and liability

• Apart from the commitments set out in these Terms, the Service is provided “as is”. We do not promise that it will be uninterrupted or free of errors.
• To the extent the law allows, we are not liable for indirect or consequential loss, or for loss of profit, revenue, business, or data.
• To the extent the law allows, our total liability to you for all claims in any 12-month period is limited to the amount you paid us for the Service in that period.
• Nothing in these Terms limits liability that cannot be limited under Thai law, including liability for fraud or gross negligence.

12. Your responsibility to us

You will compensate us for any loss, costs, or claims made against us by others that arise from your Customer Data or from your breach of section 5.

13. Changes to these Terms

We may update these Terms from time to time. If a change materially affects you, we will tell you by email or in the dashboard at least 30 days before it takes effect, unless we need to make it sooner for legal or security reasons. If you continue using the Service after that date, you accept the updated Terms. If you do not accept them, you can close your account under section 9.

14. Governing law and language

These Terms are governed by the laws of Thailand, and the courts of Thailand have jurisdiction over any dispute about them. These Terms are published in English and Thai. If the two versions differ, the English version applies.

15. Contact

Inorise Co., Ltd., Thailand. For questions about these Terms, email legal@inorise.co.th.