Terms of Service

Last updated: June 14, 2026

These Terms of Service (“Terms”, “Agreement”) constitute a legally binding agreement between you (“you”, “your”, “User”) and Cleanbox (“Cleanbox”, “we”, “us”, “our”), a product of Directbit, registered in the Netherlands (KvK: 69848440), Schoutlaan 28, 6002EA Weert, governing your access to and use of the Cleanbox platform, website, APIs, and all related services (collectively, the “Service”) available at cleanbox.app.

By creating an account, accessing, or using the Service in any way, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these Terms. If you do not agree to these Terms, you must not use the Service.

1. Description of Service

1.1 Overview

Cleanbox is an email alias and filtering management service. The Service allows you to create email aliases that receive messages on your behalf, apply filters and shields to incoming emails, manage sender contacts, and optionally forward messages to external mailboxes you control. Cleanbox acts as a technical intermediary in the email delivery chain.

1.2 Service components

The Service includes, but is not limited to:

Creation and management of email aliases
Inbound email reception, processing, and temporary storage
Spam detection and scoring
Configurable email filtering and shield rules
Contact management and categorization
Optional forwarding to external IMAP mailboxes
Optional cloud storage for email attachments
Custom domain configuration
Team-based collaboration features
API access for programmatic management
Web-based dashboard interface

1.3 Service nature

The Service is provided as a Software-as-a-Service (SaaS) platform. You access the Service via the Internet. The Service depends on third-party infrastructure, network providers, DNS systems, and external mail servers, none of which are under our exclusive control.

2. Eligibility and account registration

2.1 Age requirement

You must be at least 16 years of age to use the Service. By creating an account, you represent and warrant that you are at least 16 years old. We do not knowingly provide the Service to individuals under 16.

2.2 Account creation

To use the Service, you must register for an account by providing:

A valid email address
A password (minimum 8 characters)

You may optionally provide your first name, last name, timezone, and locale preferences. Your account must be verified by entering a verification code sent to your registered email address. Verification codes expire after 30 minutes.

2.3 Account accuracy

You agree to provide accurate, current, and complete information during registration and to update such information as necessary to keep it accurate, current, and complete. Providing false, misleading, or outdated information constitutes a breach of these Terms.

2.4 Account security

You are solely responsible for:

Maintaining the confidentiality of your account credentials, including your password and any API keys associated with your team
All activities that occur under your account, whether or not authorized by you
Notifying us immediately at legal@cleanbox.app if you become aware of any unauthorized use of your account or any other breach of security

We are not liable for any loss or damage arising from your failure to protect your account credentials. You acknowledge that we will never ask you for your password, and you should not disclose it to any third party.

2.5 One person, one account

Each account is for use by a single individual. You may not share your account credentials with others. Team features are provided for collaborative use within a single organization — each team member must have their own account.

3. Subscription plans and billing

3.1 Plans

The Service is offered under multiple subscription plans, including a free tier with limited functionality and paid tiers with enhanced capabilities. Plan details, including pricing and feature limits, are displayed on our website and within the Service dashboard.

3.2 Plan specifications

Each plan defines limits on the following, which may vary between plans:

Weekly message quota: The maximum number of emails processed per week (resets every Monday at 00:00 UTC)
Mailboxes: The maximum number of external mailboxes you can connect
Aliases: The maximum number of email aliases you can create
Custom domains: The number of custom domains you can configure (may not be available on all plans)
Filters: The maximum number of filter rules you can create
Message retention: The number of days raw email content is retained in storage before automatic deletion (default: 7 days)
Cloud storage: The amount of storage available for email attachments (may not be available on all plans)

A value of “unlimited” means no hard cap is enforced for that specification, though we reserve the right to impose reasonable limits to prevent abuse or protect infrastructure stability.

3.3 Free plan

The free plan provides basic access to the Service with limited quotas. We reserve the right to modify, restrict, or discontinue the free plan at any time, with or without notice. Free plan users have no contractual entitlement to continued free access.

3.4 Paid plans

Paid plans are billed on a monthly or yearly basis through our payment processor, Stripe. Yearly plans may offer a discounted rate compared to monthly billing. New paid subscriptions may include a 7-day trial period, during which you will not be charged. If you do not cancel before the trial period ends, your subscription will automatically convert to a paid subscription.

3.5 Payment

By subscribing to a paid plan, you authorize us (via Stripe) to charge the applicable subscription fees to the payment method you provide. You are responsible for keeping your payment information current. Failed payments may result in suspension or downgrade of your account.

3.6 Automatic renewal

Subscriptions automatically renew at the end of each billing period (monthly or yearly) at the then-current rate, unless you cancel before the renewal date. We may change subscription pricing upon reasonable notice (at least 30 days before the change takes effect for existing subscribers).

3.7 Cancellation

You may cancel your subscription at any time. Upon cancellation:

Your account will revert to the free plan at the end of the current billing period
All mailboxes, aliases, filters, and shields will be deactivated
Your data (contacts, message metadata, configurations) will be retained but inaccessible beyond free plan limits
Raw email messages will continue to be purged according to their existing retention schedule
No pro-rated refunds will be issued for unused portions of a billing period

3.8 Refunds

All fees are non-refundable except where required by applicable law. If you believe you have been charged in error, contact us at legal@cleanbox.app within 30 days of the charge. We will review your claim in good faith.

3.9 Taxes

All prices are exclusive of applicable taxes. You are responsible for any taxes, duties, or levies imposed by your jurisdiction in connection with your use of the Service. Stripe may collect applicable taxes on our behalf where legally required.

4. Use of the Service

4.1 License

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Service for your personal or internal business purposes during the term of your subscription.

4.2 Acceptable use

You agree to use the Service only for lawful purposes and in accordance with these Terms. You shall not:

Use the Service to send, receive, store, or facilitate the transmission of spam, phishing messages, malware, or any unsolicited or fraudulent communications
Use the Service to impersonate any person or entity, or falsely state or misrepresent your affiliation with any person or entity
Use aliases or the Service to engage in, facilitate, or promote any illegal activity, including but not limited to fraud, identity theft, harassment, stalking, or distribution of illegal content
Attempt to gain unauthorized access to the Service, other users’ accounts, or any systems or networks connected to the Service
Reverse-engineer, decompile, disassemble, or attempt to derive the source code of the Service, except to the extent expressly permitted by applicable law
Circumvent, disable, or otherwise interfere with any security-related features of the Service, including usage limits, spam filters, or access controls
Use automated means (bots, scrapers, crawlers) to access or interact with the Service, except through our documented API and within applicable rate limits
Resell, redistribute, or sublicense access to the Service without our prior written consent
Use the Service in a manner that could damage, disable, overburden, or impair our infrastructure or interfere with any other party’s use of the Service
Use the Service to process, store, or transmit content that infringes upon the intellectual property rights of any third party

4.3 Email size limits

The maximum size for a single inbound email message is 25 megabytes (MB). Messages exceeding this limit will be rejected by our SMTP server. We are not responsible for messages that fail to be delivered due to size constraints.

4.4 Quota enforcement

When your team’s weekly message quota is reached, additional incoming messages will be temporarily rejected until the quota resets on the following Monday at 00:00 UTC. We are not responsible for messages that are rejected due to quota limits. It is your responsibility to monitor your usage and select an appropriate plan.

4.5 API usage

If you use the Service’s API:

You must authenticate all requests using a valid Bearer token (team API key)
You are responsible for the security and confidentiality of your API keys
You must not share API keys with unauthorized third parties
We reserve the right to throttle, restrict, or revoke API access if we determine that usage patterns are abusive, excessive, or detrimental to the Service

5. Third-party credentials and integrations

5.1 IMAP mailbox connections

The Service allows you to connect external IMAP mailboxes so that incoming emails can be delivered to your existing email provider. To enable this feature, you must provide your IMAP server credentials (hostname, port, username, and password).

By providing IMAP credentials, you acknowledge and agree that:

You are solely responsible for providing accurate and authorized credentials for mailboxes you own or have legitimate authority to access
You grant Cleanbox permission to connect to your IMAP server and deliver email messages on your behalf
We encrypt your IMAP credentials at rest using industry-standard authenticated encryption
To the maximum extent permitted by applicable law, we are not liable for unauthorized access to, or compromise of, your external mailbox or IMAP credentials, except where such access or compromise results directly from our intent or conscious recklessness. This exclusion applies in particular to compromise resulting from factors outside our reasonable control, including weak, reused, or previously leaked credentials, compromise of your own devices or email account, or the acts of third parties
Where your email provider supports application-specific passwords or scoped credentials, you must use them. If you instead provide your primary mailbox password, you do so at your own risk
You are responsible for periodically rotating your credentials and revoking access if you no longer use the Service

5.2 Custom domains

When you configure a custom domain with the Service, you must verify ownership by adding specific DNS records (MX and TXT). By using this feature:

You represent and warrant that you are the authorized owner or administrator of the domain
You acknowledge that DNS records are publicly queryable
We verify domain ownership through standard DNS lookups; we do not use third-party verification services
You are responsible for maintaining correct DNS configuration

5.3 Third-party service providers

The Service relies on third-party infrastructure and service providers, including but not limited to Stripe (payment processing), Mailgun (transactional email delivery), DigitalOcean (hosting and object storage), and CloudFlare (security and bot protection).

6. Intellectual property

6.1 Our intellectual property

The Service, including its design, source code, algorithms, user interface, documentation, trademarks, logos, and all associated intellectual property, is and remains the exclusive property of Cleanbox.

6.2 Your content

You retain ownership of all data, content, and configurations you create or upload through the Service. By using the Service, you grant us a limited, non-exclusive license to process, store, transmit, and display your User Content solely as necessary to provide the Service.

6.3 Email content

Emails received at your aliases are content originated by third parties. We do not claim any intellectual property rights over the content of messages received through the Service.

7. Privacy and data protection

7.1 Privacy Policy

Our collection, use, storage, and protection of your personal data is governed by our Privacy Policy, which is incorporated into these Terms by reference.

7.2 Data processing role

For your account data, billing data, connected-mailbox (IMAP) credentials, and contact records, Cleanbox acts as the data controller. For the content of email messages that pass through the Service, Cleanbox acts as a data processor on your behalf, and you remain the data controller for that content.

7.3 Your responsibilities as data controller

As the data controller for email content processed through the Service, you are responsible for ensuring compliance with applicable data protection laws.

7.4 Sensitive data

The Service is not designed for the processing of sensitive personal data as defined under GDPR Article 9, HIPAA, or equivalent laws.

8. Security

8.1 Our security measures

We implement commercially reasonable technical and organizational measures to protect the data stored on our systems. For details on our security measures, see our Privacy Policy.

8.2 Your security responsibilities

You are responsible for choosing a strong password, not reusing passwords, securing your devices, and using application-specific passwords for IMAP connections.

9. Availability and service levels

9.1 No guaranteed uptime

The Service is provided on an “as available” basis. We do not guarantee any specific level of uptime, availability, or performance.

9.2 No guaranteed delivery

We do not guarantee that any email sent to your aliases will be successfully received, processed, stored, or forwarded.

9.3 Service modifications

We reserve the right to modify, update, suspend, or discontinue any aspect of the Service at any time, with or without notice. For material changes affecting paid subscribers, we will provide at least 30 days’ advance notice.

10. Disclaimer of warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.

11. Limitation of liability

11.1 Exclusion of damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CLEANBOX SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES.

11.2 Aggregate liability cap

OUR TOTAL CUMULATIVE LIABILITY SHALL NOT EXCEED THE GREATER OF (A) THE TOTAL AMOUNT YOU PAID TO US DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED EUROS (EUR 100.00).

11.3 Basis of the bargain

You acknowledge that the limitations of liability are a fundamental element of the bargain.

11.4 Jurisdictional variations

Some jurisdictions do not allow the exclusion or limitation of liability for certain types of damages.

11.5 Mandatory exceptions

NOTHING IN THESE TERMS EXCLUDES OR LIMITS OUR LIABILITY WHERE SUCH EXCLUSION OR LIMITATION IS NOT PERMITTED BY APPLICABLE LAW. THIS INCLUDES LIABILITY FOR DAMAGE CAUSED BY OUR INTENT (OPZET) OR CONSCIOUS RECKLESSNESS (BEWUSTE ROEKELOOSHEID), FOR DEATH OR PERSONAL INJURY CAUSED BY OUR NEGLIGENCE, AND FOR ANY LIABILITY THAT CANNOT BE EXCLUDED UNDER MANDATORY CONSUMER-PROTECTION LAW OR UNDER THE GDPR. WHERE YOU USE THE SERVICE AS A CONSUMER, THE LIMITATIONS IN THIS SECTION 11 APPLY ONLY TO THE EXTENT PERMITTED BY MANDATORY LAW.

12. Indemnification

12.1 Your indemnification obligations

You agree to indemnify, defend, and hold harmless Cleanbox from and against any claims arising from your use of the Service, violation of these Terms, or violation of any third-party right.

12.2 Indemnification procedure

We will promptly notify you of any claim and cooperate in the defense.

13. Account suspension and termination

13.1 Termination by you

You may stop using the Service at any time. You can delete your account and all associated data through the Service dashboard. Team owners may delete their teams. If you need assistance, contact legal@cleanbox.app.

13.2 Suspension or termination by us

We reserve the right to suspend or terminate your account if you are in material breach of these Terms.

13.3 Effect of termination

Upon termination, your right to access the Service ceases immediately and your data will be handled according to our retention policies.

13.4 Survival

Sections on Intellectual Property, Privacy, Disclaimers, Limitation of Liability, Indemnification, and Governing Law survive termination.

14. Force majeure

Neither party shall be liable for failure or delay caused by events beyond reasonable control.

15. Governing law and dispute resolution

15.1 Governing law

These Terms are governed by and construed in accordance with the laws of the Netherlands, without regard to its conflict-of-law rules. Where you use the Service as a consumer, this choice of law does not deprive you of the protection of the mandatory provisions of the law of your country of habitual residence (Article 6 Rome I Regulation).

15.2 Informal resolution

Before formal proceedings, contact legal@cleanbox.app and attempt informal resolution for at least 30 days.

15.3 Jurisdiction

Disputes shall be submitted to the competent courts of the Netherlands, except where mandatory consumer law grants you the right to bring or defend proceedings before the courts of your place of residence.

15.4 Consumer rights

Nothing limits your right to lodge a complaint with a supervisory authority or seek judicial remedy.

16. General provisions

16.1 Entire agreement

These Terms and our Privacy Policy constitute the entire agreement.

16.2 Severability

Invalid provisions do not affect the validity of remaining provisions.

16.3 Waiver

Failure to enforce any right does not constitute a waiver.

16.4 Assignment

You may not assign these Terms without our consent.

16.5 No third-party beneficiaries

These Terms do not create third-party beneficiary rights.

16.6 Notices

Notices via the Service, email, or website are deemed received when delivered.

16.7 Headings

Section headings are for convenience only.

16.8 Language

The English version prevails in case of inconsistency.

17. Changes to these Terms

We may revise these Terms with at least 30 days advance notice for material changes.

18. Contact us

If you have questions or concerns about these Terms, you may contact us at:

Email: legal@cleanbox.app
Website: cleanbox.app