← Back to all vendors
storage

Box

box.com

13 flagged clauses across 7 risk dimensions

D
⏱️
0min

to read this ToS

Box's fine print is longer than you think.

πŸ“šLonger than your AP Lang summer reading.

Caffeine required:
β˜•β˜•β˜•β˜•β˜•β˜•

The 5 things you actually need to know

  • 1

    They can change the terms anytime and keep your data if you don't cancel within 14 days of notice.

  • 2

    Your content is yours, but you grant them a broad license to use it for providing the service.

  • 3

    They might train AI on your data, but only if you explicitly consent to it.

  • 4

    If you leave, you have 14 days to get your data back, or it's gone.

  • 5

    They can suspend or terminate your account for pretty much any reason, or no reason at all.

Generated by AI from the actual contract β€” but for the lawyer-level breakdown, scroll down πŸ‘‡

πŸ€–

AI training

clear

No flags in this category.

πŸ”„

Auto-renewal

3 flags
  • Severity 3
    "An annual subscription plan ("Annual Subscription Plan"). The subscription period for the Annual Subscription Plan will be for one year and will automatically renew (without the need to go through the Services-interface "check-out" or execute a renewal Order Form) for additional periods equal to one (1) year each year on the anniversary unless you cancel at least three (3) business days prior to your renewal date."

    Box automatically renews your annual subscription unless you cancel at least 3 business days before renewal.

    You could be locked into another year at the current price if you miss the cancellation window by a few days.

  • Severity 3
    "If you do not cancel in accordance with these Terms, the subscription for the Service will automatically renew at the then-current price and term length for the next subscription period."

    Box automatically renews your subscription at the current price and term length if you don't cancel.

    You will be charged for another term at the current price if you forget to cancel before the renewal date.

    βš–οΈMatches FTC v. Amazon (Iliad Flow / Prime Enrollment) (2023)
  • Severity 3
    "A monthly subscription plan ("Monthly Subscription Plan"). The subscription period for the Monthly Subscription Plan will be for one month and will automatically renew (without the need to go through the Services-interface "check-out" or execute a renewal order form) unless you cancel your Monthly Subscription Plan at least three (3) business days prior to the renewal date."

    Box automatically renews your monthly subscription unless you cancel at least 3 business days before renewal.

    You could be charged for another month if you forget to cancel just a few days before the renewal date.

    βš–οΈMatches FTC v. Amazon (Iliad Flow / Prime Enrollment) (2023)
πŸ’Έ

Price hikes

1 flag
  • Severity 3
    "Box reserves the right to change its prices at any time, however, if we have offered a specific duration and Fee for your use of the Service, we agree that the Fee will remain in force for that duration. After the offer period ends, your use of the Service will be charged at the then-current Fee(s)."

    Box can change its prices after your initial offer period ends, charging you the new rate thereafter.

    Your costs will increase after your initial term, and you'll pay whatever new price Box sets.

    βš–οΈMatches FTC v. MoviePass / Helios and Matheson Analytics (2021)
🌍

Data residency

1 flag
  • Severity 3
    "The Services are provided from the United States. By using and accessing the Services, you understand and agree to the storage of Content and any other personal information in the United States. However, you understand that you (or other people that you collaborate with) can access the Services (including Content) from outside of the United States (subject to applicable law) and that nothing prohibits the processing of other information outside of the United States."

    Box provides services from the United States and stores your content there, but you and collaborators can access it from outside the US.

    Your data may be stored in the US, which could have implications for privacy and compliance depending on your location.

    βš–οΈMatches Schrems II (Data Protection Commissioner v. Facebook Ireland) (2020)
πŸšͺ

Termination friction

2 flags
  • Severity 3
    "We reserve the right to suspend or terminate your access to the Service at any time in our sole discretion or disable any Content if a) you are in breach of these Terms; or b) your use of the Services could cause a risk of harm or loss to Box or our other users; or c) Box declines to renew your Subscription Period. When reasonable and as permitted by law, Box will provide you reasonable advance notice of this change as well as an opportunity to correct any actions that led to Box’s decision. We will not be able to provide this advance notice if you are in material breach of these Terms, or if such notice would lead to civil or criminal liability for Box, or if providing notice would compromise our ability to provide the Services to our other users."

    Box can suspend or terminate your access at any time if you breach the terms, if your use poses a risk, or if they decide not to renew.

    Box can cut off your access to your data with little notice if they decide you've violated their terms.

  • Severity 3
    "You understand that if your account is suspended or terminated, you may no longer have access to the Content that is stored with the Services.Upon termination you may request access to your Content, which we will make available, except in cases where we have terminated your account due to your violation of these Terms or the Acceptable Use Policy terms in Section 10. You must make such request within fourteen (14) days following termination otherwise, any Content you have stored with the Services may not be retrievable and we will have no obligation to maintain Content stored in your account after this fourteen (14) day period."

    If your account is terminated, you have 14 days to retrieve your content, after which Box will delete it.

    You risk losing all your data if you don't act quickly to download it after your account is terminated.

βš–οΈ

Liability caps

3 flags
  • Severity 4
    "TO THE EXTENT NOT PROHIBITED BY LAW, BOX AND ITS AFFILIATES (AND ASSOCIATED SERVICE PROVIDERS) (A) PROVIDE THE SERVICES "AS IS", "WITH ALL FAULTS" AND "AS AVAILABLE", (B) MAKE NO REPRESENTATIONS OR WARRANTIES OR CONDITIONS WHETHER EXPRESS OR IMPLIED (E.G. WARRANTY OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT), AND (C) DO NOT GUARANTEE THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE OR FREE OF HARMFUL COMPONENTS, OR THAT THE CONTENT WILL BE SECURE OR NOT OTHERWISE LOST OR DAMAGED."

    Box provides services 'as is' without guarantees of being uninterrupted, error-free, or secure.

    You have no recourse if the service is down, has errors, or if your data is lost or compromised.

  • Severity 4
    "TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT WILL YOU OR BOX AND ITS AFFILIATES, RESELLERS, OFFICERS, EMPLOYEES, AGENTS, PARTNERS, SUPPLIERS OR LICENSORS BE LIABLE FOR: ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, COVER OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOST PROFITS, REVENUE, GOODWILL, USE OR CONTENT) HOWEVER CAUSED, UNDER ANY THEORY OF LIABILITY, INCLUDING, WITHOUT LIMITATION, CONTRACT, TORT, BUSINESS INTERRUPTION, LOSS OF OPPORTUNITY, WARRANTY, NEGLIGENCE OR OTHERWISE, EVEN IF BOX HAS BEEN ADVISED AS TO THE POSSIBILITY OF SUCH DAMAGES."

    Box and its affiliates are not liable for any indirect, special, or consequential damages, even if they've been warned about the possibility.

    You cannot recover lost profits or other indirect damages if Box's service causes you financial harm.

    βš–οΈMatches Capital One Data Breach Class Action β€” settled for $190M (2022)
  • Severity 4
    "THE AGGREGATE LIABILITY OF YOU OR BOX AND ITS AFFILIATES, OFFICERS, RESELLERS, EMPLOYEES, AGENTS, SUPPLIERS OR LICENSORS, RELATING TO THE SERVICES, SAVE IN RESPECT OF LIABILITY ARISING UNDER SECTION 16 OF THESE TERMS, WILL BE LIMITED TO THE GREATER OF: (A) ONE AND A HALF (1.5) TIMES THE MOST RECENT MONTHLY OR YEARLY FEE THAT YOU PAID FOR THAT SERVICE; OR (B) ONE HUNDRED DOLLARS ($100 U.S.D.)."

    Box's total liability for any issue is capped at 1.5 times your most recent payment or $100, whichever is greater.

    If Box causes significant financial damage, your recovery is severely limited to a small amount.

    βš–οΈMatches Capital One Data Breach Class Action β€” settled for $190M (2022)
πŸ›‘

Indemnification

1 flag
  • Severity 3
    "To the extent not prohibited by law, you will defend Box against any cost, loss, damage, or other liability arising from any third party demand or claim that any Content or information provided by you, or your use of the Services: (a) infringes a registered patent, trademark, copyright, or other intellectual property right of a third party, or misappropriates a trade secret (to the extent that such misappropriation is not the result of Box's actions); or (b) violates applicable law or these Terms."

    You must defend Box against claims that your content or use of the service infringes on third-party rights or violates the law.

    You could be responsible for legal costs if your content or usage leads to a lawsuit against Box.

πŸ‘»

Silent term changes

2 flags
  • Severity 4
    "Box may make deployments of changes, updates or enhancements to the Services or modifications to Box’s default settings at any time. We may also add or remove functionalities or features, or we may suspend or stop the Services altogether."

    Box can add or remove features, or stop the service entirely, at any time.

    Key functionalities you rely on could disappear or change without notice.

    βš–οΈMatches X Corp. Verified User Class Action (2024)
  • Severity 4
    "We reserve the right to modify these Terms. We will post the most current version of these Terms at www.box.com (the "Site"). If we make material changes to these Terms, we will notify you via the Services and/or by email to the address associated with your account. If you do not accept the changes, you must stop using and cancel your account by emailing cancel@box.com. Your continued use of our Services after we publish or send a notice about our changes to these Terms means that you are consenting to the updated terms."

    Box can change the terms of service at any time, and continuing to use the service means you accept the new terms.

    You could agree to one set of terms today and a totally different set next week with no warning.

    βš–οΈMatches Italian DPA (Garante) v. WhatsApp β€” settled for $6M (2022)

Better alternatives

Higher-rated vendors in storage that may be safer than Box.