Terms of Service

1. Access & authorised users

Workspaces are issued per customer organisation. Customer administrators are responsible for user invitations, role assignment, and removing access for departing team members. Credentials and API keys must not be shared outside the organisation or used to build a competing product. We may suspend access if there is suspected unauthorised use or security risk.

2. Subscription, billing & taxes

All billing is processed through Stripe on behalf of IndexBox S.a r.l. Subscriptions renew automatically each billing cycle unless cancelled. Fees are quoted exclusive of VAT or other taxes; applicable taxes are calculated at checkout based on your billing address. All charges are non-refundable and non-creditable except where Luxembourg law requires otherwise. By upgrading, you authorise recurring card debits until the subscription is cancelled in Stripe or via our support team.

3. Cancellations, late payments & sanctions

Cancellations take effect at the end of the current term, and service will continue until that date. Failure to pay outstanding invoices within 14 days of notice may result in suspension of access and permanent removal of data. IndexBox reserves the right to assess collection costs and remove trial or paid access for sanctioned entities or jurisdictions in line with EU and Luxembourg compliance requirements.

4. Acceptable use

• No automated scraping, security probing, or redistribution of raw datasets outside the permitted API/export features.
• Customer content must comply with procurement, export control, anti-corruption, and privacy regulations applicable to your organisation.
• High-volume API consumption or abnormal behaviour may trigger rate limits or suspension to protect platform stability.

5. Data ownership & confidentiality

Customer retains ownership of uploaded materials and derived work product. IndexBox processes such data solely to deliver contracted functionality and applies industry-standard security controls. Aggregated statistics never reveal customer-identifiable information. Stripe and other sub-processors only receive data necessary to fulfil their role and operate under GDPR-compliant agreements.

6. Warranty & liability

Services are provided “as available” with commercially reasonable uptime targets. Our aggregate liability is limited to fees paid during the 12 months preceding the claim. Neither party is liable for indirect, incidental, or consequential damages, and neither party is liable for delays caused by events outside their reasonable control (force majeure).

7. Governing law & contact

These Terms are governed by the laws of the Grand Duchy of Luxembourg and disputes fall under the exclusive jurisdiction of the courts of Luxembourg City. Questions can be directed to tenders@indexbox.io or by post to IndexBox S.a r.l., 29 Boulevard Grande-Duchesse Charlotte, L-1331 Luxembourg.