Box by ASCII

Terms of Service

These Terms govern your use of Box, Ascii Box, and Box by Ascii, the cloud sandbox service provided by Dedale AI, Corp..

Effective: June 18, 2026Version: 2026-06-18Support: support@ascii.dev

TOS-1

Agreement and Scope

These Terms of Service (the "Terms") are a legal agreement between you and Dedale AI, Corp. ("Dedale," "we," "us," or "our"). They apply only to Box, Ascii Box, and Box by Ascii (collectively, "Box"), including the Box website, dashboard, CLI, APIs, documentation, hosted virtual machines, snapshots, desktop access, public service URLs, and related services.

By creating an account, starting a trial, using Box, clicking to accept these Terms, or otherwise accessing Box, you agree to these Terms. If you use Box on behalf of a company or other organization, you represent that you have authority to bind that organization, and "you" includes that organization.

If you do not agree to these Terms, do not use Box.

Our Privacy Policy explains how we collect and process personal information related to Box.

TOS-2

Eligibility, Age, and Accounts

You must be at least 18 years old and old enough to form a binding contract in your jurisdiction to use Box. By using Box, you represent that you meet this age requirement and that the information you provide is accurate and complete.

You are responsible for your account, credentials, API keys, CLI sessions, payment methods, hosted workloads, public service URLs, and all activity under your account. You may not share, sell, rent, transfer, or resell access to your account, trial, credentials, API keys, or Box resources without our written approval.

We may refuse registration, require additional verification, limit access, or suspend or terminate accounts if we believe account information is false, misleading, incomplete, underage, risky, abusive, or used to evade these Terms.

TOS-3

The Box Service

Box provides cloud sandbox environments for development, automation, agents, testing, demos, and other lawful computing workloads. Box resources may include virtual machines, networking, public URLs, snapshots, filesystems, desktop streaming, SSH, APIs, and integrations with third-party services.

Box is a managed cloud service, not a dedicated hosting contract. We may modify, rate limit, throttle, queue, migrate, archive, delete, stop, suspend, or change resources to protect Box, users, providers, infrastructure, security, cost, availability, and compliance.

We may change limits, features, machine types, regions, networking, included usage, quotas, APIs, and pricing for future use. We may also apply stricter or additional limits to free, trial, suspicious, or high-risk usage.

TOS-4

Trials, Billing, Cancellation, and Refunds

Box currently offers a 7-day free trial for eligible users. After the trial, Box is billed at the price, billing interval, and usage terms shown to you at checkout or in the applicable pricing page unless you cancel before the trial ends. Your card statement may show DEDALE AI or another descriptor configured by our payment processor.

You authorize us and our payment processor to charge your payment method for subscriptions, usage, credits, taxes, and other applicable fees. Subscription fees renew monthly until canceled. You are responsible for canceling before the next charge if you do not want renewal.

Payments are non-refundable except where required by law or where we approve a refund case by case. Credits, trials, promotions, gifted access, and included usage may expire, may be revoked for abuse, and have no cash value unless we say otherwise in writing.

TOS-5

Free Trial Abuse and Circumvention

Free trials are limited to one per person, organization, payment method, and identity unless we approve otherwise in writing. You may not create or use multiple accounts, email aliases, disposable emails, shared accounts, VPN or proxy evasion, payment method rotation, identity manipulation, automated signup, or other circumvention methods to obtain additional trials, credits, limits, quota, or compute.

You may not use free or trial compute for cryptomining, idle parking, unrelated hosting, continuous background workloads, spam, scanning, credential attacks, scraping abuse, resale, shared access, or workloads designed primarily to consume compute rather than evaluate or use Box as intended.

We may use account, billing, email, login, usage, networking, device, browser, IP, identity, and behavioral signals to detect trial abuse and related accounts. We may block trial access, revoke trials or credits, suspend accounts, archive or delete Boxes, block related identities, and refuse future service when we believe trial abuse or circumvention has occurred.

TOS-6

Acceptable Use

You may use Box only for lawful, authorized, non-abusive purposes. You may not use Box to:

  • violate laws, regulations, court orders, sanctions, export controls, privacy rights, intellectual property rights, or third-party rights;
  • create, host, transmit, store, or facilitate child sexual abuse material, non-consensual sexual content, illegal sexual content, terrorist or violent extremist material, or content that is illegal to possess, host, distribute, or access;
  • operate malware, botnets, phishing, credential theft, spam, scams, fraud, ransomware, command-and-control systems, or deceptive services;
  • launch or facilitate denial-of-service attacks, abusive scraping, credential stuffing, account takeover, unauthorized vulnerability scanning, intrusion, exploitation, or network abuse;
  • mine cryptocurrency or perform other compute-intensive workloads primarily designed to extract value from our infrastructure rather than use Box as a development or sandbox service;
  • park idle compute, bypass rate limits, evade abuse controls, hide or misrepresent activity, or intentionally degrade Box or third-party networks;
  • share, rent, sublicense, resell, broker, or provide third-party access to Box accounts, trials, credentials, API keys, or compute without our written approval;
  • violate the rules, terms, or acceptable-use policies of our infrastructure, network, payment, identity, email, or hosting providers.

TOS-7

Public Services and Hosted Content

Box may allow you to expose services publicly from a Box environment. You are responsible for everything you host, expose, proxy, transmit, or make available through Box, including any public URL, port, website, API, app, file, preview, demo, tunnel, or background service.

Public hosting is permitted only for legal, authorized, non-abusive purposes. We may remove, block, throttle, suspend, or terminate public access or the related Box if we believe the service is illegal, abusive, unsafe, infringing, misleading, harmful, resource-intensive, provider-policy violating, or likely to create risk for Box, Dedale, users, providers, or third parties.

You must promptly respond to abuse, security, copyright, law enforcement, or takedown notices relating to your hosted content or services. We may act without notice when we believe action is necessary.

TOS-8

User Content, Secrets, and Data Retention

You retain ownership of code, files, prompts, outputs, repositories, secrets, data, applications, hosted content, and other materials you submit to or create with Box ("User Content"). You grant us the rights needed to provide, secure, maintain, troubleshoot, monitor, bill, improve, and enforce Box, including the right to host, process, copy, transmit, snapshot, cache, display, and store User Content as needed for the service.

You are responsible for the legality, security, backup, confidentiality, and permissions for your User Content and secrets. Do not submit highly regulated, sensitive, or legally restricted data to Box unless you have confirmed that Box is appropriate for that use and you have a separate written agreement with us if one is required.

When a Box is stopped, archived, deleted, suspended, or otherwise terminated, we may stop or delete the underlying virtual machine. We may retain snapshots, backups, logs, account records, billing records, abuse-prevention records, and security records for operational, legal, billing, security, and abuse-prevention purposes. Box snapshots are generally retained for a limited period, currently up to approximately 30 days, unless deleted earlier or retained longer as needed for security, abuse prevention, legal compliance, dispute resolution, or service recovery.

TOS-9

Security, Monitoring, and Abuse Prevention

We may monitor, collect, inspect, log, analyze, and process account activity, billing status, resource usage, network metadata, IP-derived signals, errors, system logs, public service behavior, provider events, CLI/API usage, and other operational signals to provide Box, prevent abuse, enforce these Terms, protect infrastructure, debug issues, calculate billing, comply with law, and maintain reliability.

We may use automated and manual systems to detect abuse, trial farming, resource exhaustion, malicious workloads, illegal hosting, provider-policy violations, fraud, risk, and security threats. We are not required to disclose detection methods, thresholds, signals, or evidence if doing so could reduce security, reveal sensitive systems, or help users evade enforcement.

You may not probe, bypass, disable, reverse engineer, interfere with, or evade Box security, usage limits, metering, logging, fraud controls, abuse controls, throttling, identity checks, billing checks, or access controls.

TOS-10

Suspension, Termination, and Enforcement

We may suspend, restrict, throttle, archive, delete, or terminate any account, Box, public service, credential, API key, session, trial, credit, subscription, feature, or access if we believe you violated these Terms, created risk, abused Box, attempted circumvention, failed to pay, violated provider rules, violated law, or used Box in a way that may harm Dedale, Box, users, providers, networks, systems, reputation, or third parties.

Enforcement may include revoking trials or credits, stopping or deleting virtual machines, archiving Boxes, deleting or preserving snapshots, revoking API keys or sessions, blocking related accounts or identities, refusing future service, removing public access, notifying providers, preserving records, or reporting to law enforcement where appropriate.

We may act without prior notice where we believe immediate action is needed. If you believe enforcement was a mistake, contact support@ascii.dev. We are not obligated to reinstate access, preserve data, provide refunds, or disclose internal abuse-detection details.

TOS-11

Third-Party Services and Providers

Box may depend on third-party services and infrastructure providers, including OVH, Stripe, GitHub, Cloudflare, Resend, Google, Hetzner, and others. Your use of Box may require or interact with third-party accounts, networks, services, payment processors, identity providers, repositories, APIs, email systems, and infrastructure.

We are not responsible for third-party services, and Box may be affected by their outages, limitations, rules, decisions, fees, security incidents, data practices, or policy changes. You must comply with applicable third-party terms when using Box with those services.

TOS-12

Dedale Intellectual Property and Feedback

Box, Ascii Box, Box by Ascii, Ascii, the Box website, software, APIs, CLI, documentation, design, names, logos, marks, infrastructure, and related technology are owned by Dedale or its licensors. These Terms do not transfer any Dedale intellectual property to you.

If you provide feedback, suggestions, ideas, bug reports, or improvements, you grant us a perpetual, irrevocable, worldwide, royalty-free right to use them without restriction or compensation.

TOS-13

Disclaimers

Box is provided "as is" and "as available." To the maximum extent permitted by law, Dedale disclaims all warranties, express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, availability, uptime, security, accuracy, data retention, performance, and error-free operation.

We do not guarantee that Box will be uninterrupted, secure, compliant with your specific requirements, free from data loss, free from provider failures, or suitable for production, regulated, high-risk, life-safety, emergency, mission-critical, or legally sensitive workloads.

TOS-14

Limitation of Liability

To the maximum extent permitted by law, Dedale and its affiliates, directors, officers, employees, contractors, agents, licensors, and providers will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or lost-profit damages, or for lost data, lost revenue, lost business, business interruption, replacement services, reputational harm, or unauthorized access, even if we were advised that such damages were possible.

To the maximum extent permitted by law, our total liability for all claims relating to Box or these Terms will not exceed the greater of $100 or the amounts you paid to Dedale for Box in the three months before the event giving rise to the claim.

TOS-15

Indemnity

You will defend, indemnify, and hold harmless Dedale and its affiliates, directors, officers, employees, contractors, agents, licensors, and providers from and against claims, damages, losses, liabilities, costs, and expenses, including reasonable attorneys' fees, arising from or relating to your use of Box, User Content, hosted services, public URLs, violation of these Terms, violation of law, infringement or misappropriation of rights, payment disputes, abuse, fraud, or misuse of Box.

TOS-16

Governing Law, Arbitration, and Class Waiver

These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws rules. Before filing a claim, you and Dedale agree to try to resolve disputes informally by sending written notice to the other party and allowing 30 days for informal resolution.

Except for claims that may be brought in small claims court, claims seeking injunctive or equitable relief for intellectual property, security, unauthorized access, abuse, or circumvention, and claims that cannot legally be arbitrated, disputes arising from or relating to Box or these Terms will be resolved by binding individual arbitration administered by the American Arbitration Association under its applicable rules. The arbitration will occur in Delaware, remotely, or in another location the parties agree to.

You and Dedale agree that disputes must be brought only on an individual basis, and not as a plaintiff, class member, or representative in any class, collective, consolidated, private-attorney-general, or representative proceeding. You may opt out of arbitration by emailing support@ascii.dev within 30 days after you first accept these Terms, with the subject line "Arbitration Opt-Out" and your account email.

TOS-17

Changes to These Terms

We may update these Terms from time to time. If we make material changes, we may notify you through Box, email, the website, or another reasonable method. The updated Terms will be effective when posted or when stated in the notice. Your continued use of Box after the effective date means you accept the updated Terms.

If you do not agree to updated Terms, you must stop using Box and cancel any subscription before further renewal.

TOS-18

Company Information and Contact

Box is provided by Dedale AI, Corp., a Delaware corporation. Our mailing address is 1111B S Governors Avenue, Dover, Delaware, United States. For support, legal notices, privacy questions, abuse reports, account disputes, or refund requests, contact support@ascii.dev.

These Terms are written in English. If a translated version conflicts with the English version, the English version controls.