TERMS OF SERVICE — Klearbox.net 

Effective Date: May 11, 2026

Version: 3.3

1            Introduction and scope

1.1    Parties and provider identity

These Terms of Service (“Terms”) govern the contractual relationship between Avestra-One GmbH, Aichhorngasse 10/3, 1120 Vienna, Austria, registered with the Commercial Court Vienna under FN 629016z (“Avestra-One”, “Klearbox”, “we”, “us”, “our”, “provider”), and the consumer user of the Klearbox service (“you”, “your”). Klearbox is a consumer email-management software service operated by Avestra-One GmbH under the Klearbox brand. Support and legal enquiries may be sent to support@klearbox.net. The service website is https://klearbox.net and the application is available at https://app.klearbox.net.

1.2    Acceptance of the Terms

These Terms become binding when you create an Account, place an order, or otherwise accept them through a registration, checkout, or in-product confirmation flow that we make available. Before conclusion of a paid contract, we will provide the legally required information and make these Terms available in a way that allows you to store and reproduce them. Mere browsing of our public website does not by itself create a paid contract. If you do not agree to these Terms, you must not create an Account, purchase a Plan, or use Klearbox.

1.3    Scope of the service and contract type

Klearbox is a consumer software-as-a-service digital service that helps users manage email inboxes by connecting to supported third-party email accounts and carrying out actions that the user requests or configures, such as identifying senders, supporting unsubscribe workflows, marking messages as read where required by the selected feature, and moving messages to the Trash folder or another destination made available by the service. Klearbox is not an email provider and does not host email infrastructure. In the ordinary course of operation, Klearbox does not permanently delete emails from your provider’s systems; instead, messages are moved to Trash, and any later deletion is governed by your email provider’s own systems and retention rules. Depending on the feature used, Klearbox may analyse email metadata and, where necessary to provide the requested feature, temporarily access limited email content, but Klearbox does not maintain a persistent archive of the full content of your emails.

1.4    Territorial scope and language version

Klearbox is intended only for users residing in the jurisdictions that Klearbox supports at the time of registration or purchase. As of the creation of these terms of service and backend-enforced registration rules, those jurisdictions are the member states of the European Union, Iceland, Liechtenstein, Norway, the United Kingdom, and Switzerland. If you are resident in another jurisdiction, Klearbox may be unavailable to you, and we may reject registration, suspend access, or decline to contract where this is necessary for legal, regulatory, payments, risk, or operational reasons

If we make these Terms available in more than one language, the language version displayed and accepted in the relevant registration or purchase flow governs that contract. If a translation is provided only for convenience, we will clearly state this before acceptance. Nothing in this clause limits mandatory information, language, or consumer-protection requirements that apply in your country of residence.

1.5    Order of precedence between documents

These Terms govern the contractual relationship for the use of Klearbox. Our Privacy Policy available at https://klearbox.net/privacy explains how personal data are processed, and our Cookie Policy available at https://klearbox.net/cookies explains cookies and similar technologies. If there is a conflict between these Terms and any other document:

• mandatory statutory provisions, including consumer protection law and data-protection law, shall prevail in all cases;
• for matters relating to the processing of personal data, the Privacy Policy provides the information required under applicable data-protection law and shall prevail within its subject matter; and
• nothing in these Terms limits or excludes any non-waivable rights you may have under applicable law.

Any region-specific notice, checkout disclosure, renewal notice, cancellation disclosure, or withdrawal instruction that we provide in order to comply with mandatory law forms part of these Terms to the extent required by that law.

1.6    Changes to the service or business model

Klearbox may evolve over time. We may make technical, security, legal, operational, compatibility, or third-party-dependency related changes to the Service, provided that such changes remain within the agreed scope of your Plan and do not materially reduce the functionality, security, interoperability, or value of the Service during an already paid access period.

Material changes that negatively affect your paid Plan, your access to core functionality, the scope of access to connected email accounts, or your essential contractual rights will be handled in accordance with Sections 10 and 23. Where legally required, we will give you advance notice, explain the reason and effect of the change, and provide a right to terminate the affected Plan free of charge before the change takes effect.

Nothing in this Section limits your statutory rights, including your rights in relation to non-conforming digital services.

 

2            Definitions 

2.1    “Account”

“Account” means the user account you create to access and use Klearbox, including associated credentials, settings, and connected email accounts.

2.2    “Application” or “App” 

“Application” or “App” means the Klearbox web application currently available at https://app.klearbox.net, as it may be updated or relocated from time to time.

2.3    “Consumer” 

“Consumer” means a natural person acting for purposes that are wholly or mainly outside their trade, business, craft, or profession, as understood under applicable EU and national consumer law.

2.4    “Digital service” 

“Digital service” means the software-based online service Klearbox provides, namely a consumer email‑management tool that runs on remote infrastructure and is supplied on a one‑time, time‑limited, or subscription basis via the internet.

2.5    “Klearbox”, “Service” 

“Klearbox” or the “Service” means the consumer email‑management service operated by Avestra‑One GmbH under the Klearbox brand, including any associated websites, applications, features, tools, and interfaces to supported email providers.

2.6    “Plan” or “Subscription” 

“Plan” or “Subscription” means any free tier, paid subscription, time‑limited access, one‑time purchase, or other pricing model offered for Klearbox, including any usage limits, feature sets, or renewal terms described at the time of purchase or in these Terms.

2.7    “One‑time purchase” / “Quick Clean” 

“One‑time purchase” or “Quick Clean” refers to a paid, time‑limited access option that provides expanded Klearbox usage for a defined period and/or capacity without automatic renewal, as described in the applicable offer at the time of purchase.

2.8    “Pro subscription” or “Pro plan” 

“Pro subscription” or “Pro plan” means a recurring paid Plan that unlocks additional Klearbox features and higher usage limits, billed on a monthly or annual basis (or as otherwise shown at checkout), with automatic renewal unless cancelled in accordance with these Terms.

2.9    “Connected email account” 

“Connected email account” means any third‑party email account that you connect to Klearbox using IMAP, OAuth, or another supported integration, and that Klearbox is authorised to access in order to perform the actions you request or configure.

2.10   “Credentials”, “IMAP credentials”, or “App password”

“Credentials”, “IMAP credentials”, or “App password” mean the application‑specific passwords, or other authentication data generated in your email provider’s security settings that allow Klearbox to connect to a connected email account via IMAP or another supported interface, which are stored and protected as described in these Terms and the Privacy Policy.

2.11   “Email metadata” 

“Email metadata” means non‑content information about emails such as sender, recipient, subject line, folder, timestamps, and technical header information, as distinct from the body text or attachments of the message.

2.12   “Email content” or “Email body content” 

“Email content” or “Email body content” means the readable body text and, where applicable, structured elements within an email that Klearbox may temporarily analyse when technically necessary to provide a requested feature (for example, to locate unsubscribe mechanisms), but does not store as a persistent archive.

2.13   “Rules”, “Cleanup rules” or “Automation rules” 

“Rules”, “Cleanup rules”, or “Automation rules” mean the configuration choices you make in Klearbox, including senders, labels, or patterns you select and the actions Klearbox should perform (such as moving to Trash, marking as read, or scheduling recurring clean‑up), which the service executes on your behalf.

2.14   “Trash” 

“Trash” means the folder or equivalent location in a connected email account designated by the email provider for deleted messages, where Klearbox moves emails as part of its clean‑up features but does not control the provider’s subsequent permanent deletion behaviour.

2.15   “Personal data” 

“Personal data” has the meaning given in the General Data Protection Regulation (GDPR), namely any information relating to an identified or identifiable natural person, and includes information processed in connection with your use of Klearbox as described in the Privacy Policy.

 

2.16   “Privacy Policy” and “Cookie Policy” 

“Privacy Policy” means the Klearbox Privacy Policy available at https://klearbox.net/privacy, which describes how personal data are processed in connection with Klearbox. “Cookie Policy” means the Klearbox Cookie Policy available at https://klearbox.net/cookies, which describes cookies and similar technologies used on Klearbox sites and applications.

2.17   “Business day”

“Business day” means a day other than Saturday, Sunday, or an official public holiday in Vienna, Austria.

3            Provider and contact details 

3.1    Provider Identity

The Klearbox service is operated by Avestra‑One GmbH (“Avestra‑One”, “we”, “us”, “our”, “provider”), a company incorporated under the laws of Austria.

• Legal form: Gesellschaft mit beschränkter Haftung (GmbH)
• Registered office: Aichhorngasse 10/3, 1120 Vienna, Austria
• Commercial register: Commercial Court Vienna, FN 629016z

Additional legally required provider information, including any VAT identification number, competent authority, applicable chamber membership, and applicable professional or trade rules where relevant, is provided in our legal notice/imprint and forms part of the provider information for Klearbox. Prices shown to consumers are total prices including applicable VAT and mandatory charges, unless expressly stated otherwise in a clear and lawful manner before the order is placed.

3.2    Contact for support and contractual queries 

For general support, billing questions, contractual enquiries, complaints, cancellation requests, or withdrawal notices, you can contact us at support@klearbox.net. Our telephone contact number and any additional legally required provider information are provided in our legal notice/imprint and in the checkout flow where required by law.

3.3    Website and application 

Our main website is available at https://klearbox.net and the Klearbox application is currently available at https://app.klearbox.net. We may change URLs or add additional domains over time.

3.4    Data protection contact 

Questions about the processing of personal data in connection with Klearbox can be directed to support@klearbox.net or to any dedicated data‑protection contact that we indicate in the current Privacy Policy. You also have the rights and contact options described in the Privacy Policy and under applicable data‑protection law.

3.5    EU/UK representatives (if applicable)

If and when we appoint an EU or UK representative under the GDPR or UK GDPR, their identity and contact details will be set out in the then‑current version of our Privacy Policy and will apply in addition to the contact details above. Eligibility and consumer status

4            Eligibility and consumer status

4.1    Who may use Klearbox

Klearbox is intended for use by consumers only, meaning natural persons acting for purposes that are wholly or mainly outside their trade, business, craft, or profession, as understood under applicable EU and national consumer law.

You may use Klearbox only if you:

• are at least 18 years old (or have reached the age of full legal capacity in your country of residence),
• have legal capacity to enter into binding contracts, and
• use the service for consumer purposes.

4.2    Registration information and verification

You must provide accurate, current, and complete information when registering for an Account and keep it up to date. You must complete any required verification steps (such as email verification) before your Account is activated. We may refuse registration, restrict access, or suspend Accounts where we reasonably believe eligibility, legal, or security requirements are not met.

4.3    Ownership and control of connected email accounts

You may only connect email accounts that you own or are duly authorised to use. By connecting a third‑party email account to Klearbox, you confirm that you have the right to authorise Klearbox to access that account in accordance with these Terms and that your use of Klearbox with that account complies with your email provider’s terms and policies.

4.4    One account per person on free tiers

If we offer a free tier, we may limit it to one Account per natural person. Creating multiple free Accounts to circumvent usage limits, plan caps, or other restrictions is not permitted and may be treated as a prohibited use under these Terms.

4.5    Responsibility for your Account and security

You are responsible for maintaining the confidentiality of your Account credentials (including any passwords, app passwords stored in Klearbox, and multi‑factor authentication codes) and for all activity under your Account, except to the extent caused by our failure to maintain appropriate security. If you become aware of unauthorised access to your Account or connected email accounts in connection with Klearbox, you must notify us without undue delay using the contact details in Section 3 and, where applicable, revoke any app passwords or tokens in your email provider’s security settings.

5            Service description

5.1    What Klearbox does

Klearbox is a consumer email‑management digital service. It connects to your supported third‑party email accounts and helps you manage inboxes by carrying out actions that you request or configure, including:

• identifying senders and categories of messages (such as newsletters or promotions),
• supporting unsubscribe workflows,
• marking messages as read where required by the selected feature,
• moving messages to your Trash folder or another destination made available by the service, and
• running one‑time or recurring clean‑up operations based on rules you configure.

5.2    What Klearbox is not

Klearbox is not an email provider, does not host your email infrastructure, and does not control your email provider’s delivery, retention, or deletion policies. In the ordinary course of operation, Klearbox does not permanently delete emails from your provider’s systems; instead, messages are moved to Trash or an equivalent folder, and any later permanent deletion is governed exclusively by your provider’s own systems and retention rules.

5.3    How Klearbox processes mailbox data

To provide these features, Klearbox processes email metadata (such as sender, subject, timestamps, and folder information) and, where necessary to perform a requested feature, may temporarily access limited email content (for example, to identify unsubscribe mechanisms when they are not available from headers alone). Klearbox does not maintain a persistent archive of the full content of your emails and does not store email body text after the relevant operation has been completed, although it may retain derived data such as sender classifications, unsubscribe records, rule configurations, and clean‑up history as described in these Terms and the Privacy Policy.

5.4    User direction and responsibility

Klearbox is a tool for executing actions under your direction. All operations on your mailbox are initiated by:

• your explicit input (for example, selecting senders or launching a run), or
• automation or recurring runs based on rules and settings that you configure. Where Klearbox provides previews, recommendations, suggested rules, or sender lists, these are non‑binding technical suggestions. You remain responsible for reviewing previews, deciding which senders or rules to apply, and confirming actions before they are executed.

5.5    Technical limitations and dependencies

The operation of Klearbox depends on the availability and behaviour of third‑party email providers and other third‑party services (such as payment processors). Klearbox does not guarantee that all senders will be correctly classified, that unsubscribe mechanisms will always be detected or successfully executed, or that all unwanted messages will be identified. Email structures, provider policies, and interfaces vary and may change over time, and certain actions may fail, be delayed, or behave differently due to limitations or changes on the side of your email provider or other third parties.

6            Account registration and access

6.1    How Klearbox connects to your email account

To access a connected email account, Klearbox uses app‑specific passwords, OAuth tokens, or other authentication mechanisms supported by your email provider (“Credentials”). In many cases this will be an app password generated in your provider’s security settings and distinct from your main account password. You provide these Credentials in Klearbox so that the service can connect to your account via IMAP or another supported interface and perform the operations described in these Terms.

6.2    Permitted operations on your mailbox

By connecting an email account and providing Credentials, you authorise Klearbox to access that account solely to provide the Klearbox features you request or configure. This authorisation is limited to the following types of operations, as supported by your email provider:

• listing folders within your mailbox,
• searching and reading email metadata such as sender, subject line, folder, and timestamps,
• where technically necessary for a requested feature (for example, unsubscribe detection), temporarily accessing limited email content,
• identifying senders and message categories,
• marking messages as read where required by the selected feature,
• moving messages to the Trash folder or other locations that you select or that are presented by the service, and
• running one‑time or recurring clean‑up operations based on your configured rules.

6.3    App password handling and storage

Any Credentials (including app passwords) that Klearbox stores are stored in encrypted form using industry‑standard encryption at rest and are accessible only to systems that need them to provide the service. You may revoke Klearbox’s access at any time by:

• deleting the relevant Credential or disconnecting the account in Klearbox’s settings, and/or
• revoking the app password or OAuth grant directly in your email provider’s security settings.
• When you delete stored Credentials in Klearbox, disconnect a connected email account, or delete your Account, we will delete or render unusable the relevant Credentials from active production systems without undue delay, subject to legal retention obligations and limited technical logging necessary to evidence security-relevant operations. Encrypted backup copies, if any, are isolated from ordinary production use and are overwritten or deleted in accordance with our documented backup-retention schedule.

Where technically supported by the relevant email provider, we use access methods and permission scopes designed to limit Klearbox’s access to what is necessary for the requested Service functionality. Where an email provider offers only broader access methods, such as IMAP app passwords, we limit our actual use of that access within Klearbox to the operations described in these Terms and in the Privacy Policy. We do not use Credentials to access mailbox data for unrelated purposes.

6.4    No persistent storage of email body content

Klearbox processes email metadata and, where required to perform a requested feature, may temporarily access limited email content (for example, to locate unsubscribe mechanisms) during an active connection to your mailbox. Klearbox does not maintain a persistent stored archive of full email body content. After the relevant operation is completed, Klearbox does not retain email body text as content; what may be retained are derived records such as sender classifications, unsubscribe status, rules, and clean‑up history, as described in these Terms and the Privacy Policy.

6.5    Your responsibilities regarding Credentials and provider terms

You are responsible for:

• generating and managing app passwords or other Credentials in accordance with your email provider’s security guidance,
• keeping Credentials confidential and not sharing them with unauthorised persons,
• ensuring that your use of Klearbox with each connected email account complies with your provider’s terms of service and acceptable‑use policies, and
• revoking Klearbox’s access and informing us without undue delay if you suspect that Credentials have been compromised or used without authorisation.

7            Subscription model, plans and pricing

7.1    Types of plans and access models

Klearbox may offer different access models from time to time, which can include free tiers, time‑limited access, one‑time purchases, and recurring paid subscriptions, as well as promotional offers or trials. The specific plan types, names, included features, usage limits, and access periods available at any given time are described in the current offer at checkout and, where applicable, on the Klearbox pricing page or in-product plan overview.

7.2    Plan features and usage limits

Each plan has its own feature set and usage limits (for example, numbers of emails processed, numbers of rules, or numbers of connected email accounts) as described in the applicable offer at the time of sign‑up or upgrade. Those descriptions form part of your contract for the relevant plan. We may adjust features or limits for new sign‑ups or renewals; any such changes will not reduce features or limits already paid for in a current, pre‑paid access period unless required by law, security, technical, or operational reasons, in which case we will apply the protections and notices described in these Terms.

7.3    Free access

If we offer a free tier or free trial, we may restrict it to one Account per natural person and may apply reduced features or usage limits compared with paid plans. We may modify or discontinue any free tier or trial at any time, or convert a trial to a paid plan with your consent, provided that we comply with any advance notice, consent, and renewal requirements under applicable consumer law and with any clear disclosures we make at sign‑up.

7.4    Paid plans and billing cycles

For paid plans, you agree to pay the price and any applicable taxes shown at checkout or in the in‑product purchase flow at the time you place your order. Paid plans may be billed on a recurring basis (for example, monthly or annually) or as a one‑time charge for a defined access period, as indicated in the offer. The applicable billing cycle, renewal pattern, and access period are shown in the purchase flow and form part of your contract for that plan.

7.5    Automatic renewal

Paid subscription Plans renew automatically only if this was clearly disclosed to you before you placed the order. The checkout or purchase flow will state the initial price, billing period, renewal period, renewal price or the method for calculating it, payment method, and cancellation options.

Unless the applicable offer states otherwise, paid subscription Plans renew at the end of each billing period until cancelled. You may cancel a recurring subscription at any time using the cancellation method made available in your Account settings or another clearly indicated cancellation channel. Cancellation takes effect at the end of the then-current prepaid billing period unless mandatory law or the applicable offer provides otherwise.

For subscriptions with automatic renewal, we will send you a renewal reminder before the cancellation deadline where required by law or where stated in the applicable offer. The reminder will state that the subscription will renew if not cancelled, the renewal date, renewal price, renewal period, payment method, and the deadline and method for cancellation.

The order screen for paid subscriptions will provide the legally required pre-contractual information immediately before you place the order, including the total price, billing period, renewal period, and any minimum commitment period.

7.6    Price changes

We may change prices prospectively for future purchases, new Plans, upgrades, or renewal periods. A price change will not affect the current prepaid period of an existing paid Plan.

If a price increase affects your existing recurring subscription, we will notify you in advance on a durable medium before the cancellation deadline. The notice will state the new price, the effective date, the renewal period affected, and your right to cancel before the price increase applies.

If you cancel before the price increase takes effect, your current prepaid period will continue under the previous price and you will not be charged the increased price. If mandatory law requires express consent for a price change, we will obtain that consent before the changed price applies.

7.7    Payment processing

Payments for Klearbox are currently processed by Lemon Squeezy as merchant of record. If payments are processed by a different third-party merchant of record or payment processor in the future, that provider’s terms and privacy notices apply in addition to these Terms for the payment transaction, and we do not store full payment card details in our own systems. You authorise the relevant payment provider to charge the applicable amounts using the payment method you select.

7.8    No refunds beyond statutory rights and disclosed policies

Payments are refundable where required by mandatory law, including statutory withdrawal rights, remedies for non-conforming digital services, or any refund policy expressly stated in the applicable offer. Your rights under Section 8 (Statutory right of withdrawal and immediate performance) and Section 11 (Digital conformity and remedies) remain unaffected.

Except where mandatory law or an expressly stated refund policy provides otherwise, paid access periods are not refundable merely because you stop using Klearbox before the end of the access period, provided that Klearbox has been made available and conforms to the contract. This does not limit any right you may have to price reduction, termination, refund, or other remedies if Klearbox is not provided, is not made available as agreed, or does not conform to the contract.

Where you validly withdraw during a statutory withdrawal period after expressly requesting immediate performance, we may charge a proportionate amount for the service already provided only to the extent permitted by applicable law and only if the legal conditions for such charge are met.

8            Statutory right of withdrawal and immediate performance

8.1    Statutory withdrawal right for consumers

If you are a consumer and conclude a paid distance contract for Klearbox, you may have a statutory right to withdraw from the contract within 14 days without giving any reason. This right applies to the extent provided by the mandatory law applicable to you, including Austrian and EU consumer law where applicable.

8.2    Withdrawal period and start date

Unless a longer period applies under mandatory law, the withdrawal period is 14 days from the day on which the contract is concluded. The contract is concluded when we confirm your order or otherwise accept your paid subscription or purchase in the checkout or purchase flow.

8.3    Effects of withdrawal

If you validly withdraw from this contract within the applicable withdrawal period and the conditions for loss or reduction of the withdrawal right under Section 8.4 do not apply:

• we will refund all payments we have received from you in connection with the withdrawn contract, including standard delivery costs where applicable, without undue delay and in any event no later than 14 days from the day we receive your withdrawal notice; and
• we will make the refund using the same means of payment you used for the initial transaction, unless we have expressly agreed otherwise with you; you will not incur any fees as a result of the refund itself.

8.4    Immediate performance and proportionate charges

If you purchase a paid Plan and want Klearbox to begin before the end of the 14-day withdrawal period, we will ask you in the checkout or purchase flow to expressly request immediate performance before the end of the withdrawal period. Where required by law, we will also ask you to acknowledge the legal consequences for your withdrawal right before performance begins.

For recurring subscriptions, you retain your statutory right to withdraw within the withdrawal period where mandatory law grants this right. If you withdraw after the Service has begun and the legal requirements for immediate performance and proportionate payment have been met, we may charge a proportionate amount for the Service provided up to the time you notify us of your withdrawal. Unless a different calculation is required by mandatory law, this amount is calculated pro rata on a daily basis by reference to the price of the relevant billing period.

For a one-time digital service or time-limited digital access, your withdrawal right may expire once the service has been performed, but only if all legal requirements for such expiry have been met, including your prior express consent to begin performance before the end of the withdrawal period, your acknowledgement that the withdrawal right will be lost upon full performance, and confirmation on a durable medium.

We will provide you with confirmation of the contract, your request for immediate performance, and any legally required acknowledgement on a durable medium without undue delay. No proportionate charge will be imposed, and no expiry of the withdrawal right will be relied on, unless the applicable legal requirements have been met.

8.5    Exercising and handling your withdrawal right

You may exercise your statutory right of withdrawal by sending us a clear statement of your decision to withdraw, for example by email to support@klearbox.net or through any online withdrawal function we make available. The withdrawal declaration is not bound to a specific form. Where a statutory withdrawal right applies, we will provide the legally required withdrawal instructions and the model withdrawal form. You do not have to use the model form; any clear statement of withdrawal sent within the withdrawal period is sufficient.

Upon receiving your withdrawal request, we will acknowledge receipt on a durable medium without undue delay and process the withdrawal in accordance with this Section 8 and applicable law. Where a refund is due, we will refund using the same means of payment you used for the original transaction, unless you expressly agree otherwise, and you will not incur fees as a result of the refund itself.

We may retain records of withdrawal requests, confirmations, acknowledgements, refund outcomes and related communications to comply with legal obligations, evidence consumer-law compliance, handle disputes, and meet data-protection accountability obligations, in each case subject to the retention periods described in the Privacy Policy.

If you withdraw from a paid Plan, we will stop further paid-plan performance and automated or scheduled mailbox operations associated with that Plan as soon as reasonably practicable after receiving and processing the withdrawal, except where a shorter period is required by mandatory law.

8.6    Relationship with cancellation of subscriptions

Your statutory withdrawal right under this Section 8 is separate from your contractual right to cancel a subscription for future billing periods under Section 9. Cancelling a subscription stops future renewals but does not, by itself, operate as a withdrawal from a contract that has already been fully or partially performed; withdrawal, where available, must be exercised in accordance with this Section 8.

9            Performance and availability

9.1    Service commencement

Unless we state otherwise at checkout or in a specific offer, access to Klearbox is granted as soon as your registration or purchase has been successfully completed and any required verification (for example email verification) has been performed. For paid plans, service performance may begin immediately after successful payment if you have requested immediate performance as described in Section 8.

9.2    Availability target and best‑efforts obligation

Klearbox is provided using reasonable skill and care, but on a “best‑efforts” and “as available” basis. We do not guarantee uninterrupted availability, error‑free operation, or compatibility with every possible email provider, client, or configuration. Availability may be affected by maintenance work, technical issues, or outages on our own infrastructure or on the side of third‑party providers (such as email providers or hosting providers).

9.3    Maintenance and planned downtime

We may carry out planned maintenance or upgrades that temporarily affect the availability or performance of Klearbox. Where reasonably possible, we will schedule such work at times designed to minimise impact and will provide advance notice (for example via status pages, in‑product messages, or email) if the maintenance is expected to result in significant downtime or functional limitations.

9.4    Unplanned outages and incidents

From time to time, Klearbox or parts of the service may be unavailable or degraded due to unplanned outages, security incidents, or failures in third‑party systems that we rely on (such as email providers, DNS providers, network carriers, hosting providers, or payment processors). In such cases, we will use reasonable efforts to restore service and to mitigate impact, taking into account the nature of the incident and the technical and legal constraints we face.

9.5    Force majeure and events outside our control

We are not responsible for any failure to perform, or for any delay in performing, any non‑essential obligations under these Terms that is caused by events outside our reasonable control, such as natural disasters, war, terrorism, civil unrest, strikes, internet or telecoms outages, government actions, or failures or material changes on the side of third‑party email providers or infrastructure providers. Your statutory rights, including your remedies for non‑conforming digital services, remain unaffected.

9.6    No guarantee of specific outcomes

Klearbox does not guarantee that specific messages will always be identified, moved, or unsubscribed in a particular way, or that all unwanted emails will be detected. Sender classifications and unsubscribe workflows depend on technical patterns and third‑party systems and may be incomplete or inaccurate. This does not affect any statutory rights you may have if the service does not conform to the contract.

10    Updates and changes

10.1   Functional and security updates

We may provide updates, upgrades, patches, and other changes to Klearbox from time to time, including for security, stability, compatibility, legal, technical, or performance reasons. Where updates are necessary to keep Klearbox in conformity with the contract or with applicable law, we may apply them automatically.

Such updates may change how features look or behave, but they will not materially reduce the overall functionality, security, interoperability, or value of your current paid Plan in a way that is inconsistent with the contract or mandatory consumer law. Your statutory rights in relation to necessary updates and non-conforming digital services remain unaffected.

10.2   Feature evolution and deprecation

We may add, improve, replace, modify, or discontinue individual features where there is a valid and objective reason, such as security, legal or regulatory requirements, technical feasibility, compatibility with third-party providers, low usage of non-core functionality, abuse prevention, or the need to maintain the security, stability, interoperability or operability of the Service.

Free features and free tiers may be changed, limited or discontinued with greater flexibility, provided that we do not mislead you about the nature of the Service and do not restrict mandatory statutory rights.

For paid Plans, we will not materially reduce core functionality already paid for during the current prepaid access period unless the change is required by law, security, technical necessity, abuse prevention, or a third-party dependency outside our reasonable control, or unless you expressly agree. If such a change materially and negatively affects your ability to use the paid Plan as agreed, Section 10.4 applies.

10.3   Changes required by third‑party providers

Klearbox depends on third-party email providers, authentication providers, browsers, operating systems, hosting providers, payment providers, and other infrastructure. These third parties may change, restrict, suspend, or discontinue interfaces, protocols, authentication methods, rate limits, policies, or technical requirements at any time.

Where such a third-party change affects Klearbox, we may adapt, restrict, suspend, replace, or discontinue affected features to the extent reasonably necessary. We are not responsible for the underlying third-party change itself. However, where an affected integration is presented by us as a supported feature of your paid Plan, we will use reasonable efforts to maintain or restore compatibility, provide a workaround, or update our product information.

If no reasonable workaround is available and a paid feature can no longer be provided as agreed, your mandatory rights in relation to non-conforming digital services remain unaffected.

10.4   Material changes to the service model

If we make a material change to the Service model that negatively affects your paid Plan, your essential contractual rights or obligations, the price or renewal logic of your Plan, the scope of access to connected email accounts, or the core functionality included in your current paid Plan, we will provide advance notice on a durable medium before the change takes effect, unless immediate action is required for legal, security, abuse-prevention or urgent technical reasons.

The notice will describe the change, the reason for it, the effective date, the practical effect on your Plan, and your available options. If the change materially and negatively affects a paid Plan during a current prepaid period, you may terminate the affected Plan free of charge before the change takes effect. If you terminate for this reason, we will refund any prepaid fees for the period after the termination becomes effective, unless mandatory law provides a more favourable remedy.

A material negative change will not apply during the current prepaid period of a paid Plan unless it is required by law, security, abuse prevention, urgent technical necessity, a change by a third-party provider that directly prevents continued provision of the affected feature, or unless you expressly agree. Your statutory rights in relation to non-conforming digital services remain unaffected.

10.5   Relationship with changes to these Terms

Functional, technical, security, compatibility, or third-party-dependency changes to the Service are governed by this Section 10, provided that they remain within the scope of these Terms and applicable law.

Changes to the legal wording of these Terms are governed by Section 23. If a change to the Service also requires a change to these Terms, we will follow the process in Section 23 in addition to this Section 10.

10.6   Duty to install necessary updates

During your subscription or access period, we will provide updates that are necessary to keep Klearbox in conformity with this contract and applicable law, including security updates. Where such updates require action on your side, for example use of a supported browser, acceptance of permissions, or technical adjustments, we will clearly inform you about the availability of the update, the fact that it is necessary to maintain conformity or security, the steps reasonably required from you, and the consequences of not implementing it. Where legally required, or where the update materially affects paid functionality, we will provide this information on a durable medium.

If you, without good reason, fail to implement such a necessary update within a reasonable time after receiving the information described above, we are not liable for the specific lack of conformity caused by that failure, provided that the lack of conformity is solely attributable to your failure to implement the update and was not caused by deficient instructions from us. This does not affect any lack of conformity that would exist independently of the missing update.

Nothing in this Section 10.6 limits your mandatory statutory rights under applicable consumer and digital-services law, including your rights in relation to non-conforming digital services

 

11    Digital conformity and remedies

11.1   Conformity of the digital service

Klearbox must conform to this contract and to the requirements of applicable digital‑service and consumer law. Conformity is assessed against:

• the description, functionality, compatibility, interoperability, and other characteristics of Klearbox as set out in these Terms and in the essential information we provide to you in the purchase or registration flow; and
• the level of performance that is normal for digital services of the same type and that you may reasonably expect, taking into account the nature of Klearbox as a best‑efforts consumer email‑management tool and its dependence on third‑party email providers.

11.2   Your duties to enable conformity

To allow Klearbox to conform, you must:

• use Klearbox on a compatible device, operating system, browser, and network connection that meet the minimum technical requirements we publish from time to time;
• use Klearbox only with supported and correctly configured email accounts and authentication methods; and
• follow reasonably clear instructions we provide for connecting and configuring your accounts.
• There is no lack of conformity where a problem is solely due to your digital environment (for example, unsupported software, misconfigured email accounts, or local security tools) if we informed you of the relevant technical requirements in a clear and comprehensible manner before the contract was concluded and you did not cooperate in checking compatibility

11.3   Remedy: bringing the service into conformity

If Klearbox does not conform to the contract and applicable law, your primary remedy is to have Klearbox brought into conformity. We will, free of charge and within a reasonable time after you inform us, use reasonable efforts to correct the non-conformity, for example by providing updates, configuration guidance, workarounds, or adjustments to the Service, without significant inconvenience to you, taking into account the nature of the Service and the purpose for which you use it.

We may refuse to bring Klearbox into conformity only if this would be impossible or would impose disproportionate costs on us, taking into account the value of Klearbox if there were no lack of conformity and the significance of the lack of conformity, in line with applicable digital-services law. In that case, you remain entitled to the remedies described in Section 11.4.

11.4   Price reduction or termination

If we are not required or permitted to bring Klearbox into conformity, if we fail to bring it into conformity within a reasonable time and without significant inconvenience to you, or if the lack of conformity is sufficiently serious or recurring, you may, to the extent provided by mandatory law, be entitled to a proportionate price reduction and/or termination of the contract with a corresponding refund.

Where the conditions under applicable law are met and we reasonably assess that bringing Klearbox into conformity would be impossible or disproportionate in the sense described in Section 11.3, we may propose termination with the applicable refund as an alternative to further remedial measures. Any such proposal does not limit your statutory rights.

11.5   Effect of termination for non‑conformity

If the contract is terminated due to non‑conformity in accordance with applicable law:

• we will stop providing access to Klearbox;
• you will be entitled, where required by law, to a refund of the portion of the price corresponding to the period during which Klearbox was not in conformity;
• we may deduct an amount for any period during which Klearbox was provided in conformity before non‑conformity arose, where this is permitted by law; and
• we will handle your personal data and any exports of configuration or other data in line with our Privacy Policy, legal retention obligations, and Section 26 (Data portability, retrieval and switching).

11.6   Relationship with limitations of liability

Your rights under this Section 11 exist in addition to any other statutory consumer rights you may have. Contractual limitations of liability in Section 19 apply only to the extent they are compatible with these mandatory rights and are not intended to exclude or limit remedies for non‑conformity where such exclusion or limitation would be unlawful.

12    Acceptable use and prohibited uses

12.1   General acceptable‑use principle

Klearbox is intended to help you manage your own email inboxes in a lawful, honest, and reasonable way. You must not use Klearbox in any manner that violates these Terms, applicable law, third‑party rights, or your email provider’s policies, or that could damage, disable, or impair Klearbox or interfere with other users’ enjoyment of the service.

12.2   Unauthorised access to inboxes

You must not use Klearbox to access, scan, manage, or attempt to access email accounts that you do not own or are not duly authorised to use. Using Klearbox to access third‑party inboxes without their explicit, legally valid authorisation is strictly prohibited and may result in immediate suspension or termination and, where appropriate, notification to relevant providers or authorities.

12.3   Circumventing usage limits and account restrictions

You must not:

• create multiple free Accounts or otherwise attempt to bypass plan‑specific usage limits, free‑tier caps, or other in‑product restrictions, or
• use any technical or non‑technical means to circumvent, disable, or tamper with mechanisms that enforce plan limits, rate limits, or access controls.

12.4   Automated account creation and abuse

You must not create Accounts or perform actions in Klearbox by automated means (such as bots, scripts, or mass sign‑up tools), except where we explicitly provide an API or automation interface and allow such use in separate terms. You must not engage in behaviour that places unreasonable load on our infrastructure, including automated mass operations beyond the configured plan limits.

12.5   Security testing, reverse engineering, and interference

Except where non‑waivable law expressly permits it, you must not:

• reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of Klearbox or its credential storage mechanisms;
• attempt to probe, scan, or test the vulnerability of our systems or networks without our prior written consent; or
• interfere with or disrupt the integrity, security, or performance of Klearbox or any related systems.

12.6   False information and impersonation

You must not provide false, inaccurate, or misleading information at registration, in your Account profile, or in communications with us, including about your identity, residence, or authority to use a connected email account. You must not impersonate any other person or misrepresent your affiliation with any person or entity in connection with your use of Klearbox.

12.7   Unlawful, fraudulent, or abusive use

You must not use Klearbox:

• for unlawful, fraudulent, deceptive, or abusive purposes,
• to send, facilitate, or manage spam, phishing, malware, or other harmful or unsolicited communications, or
• in a way that infringes or misappropriates third‑party rights, including privacy and data‑protection rights.

12.8   Resale and commercial exploitation

You must not resell, sublicense, rent, lease, or otherwise commercially exploit Klearbox or provide it as a service to third parties without our prior written permission, other than as permitted by these Terms for your own consumer use.

12.9   Consequences of breach of acceptable use

If we reasonably believe that you have breached this Section 12, we may, depending on the severity and circumstances:

• issue a warning and request that you cease the offending conduct,
• temporarily suspend access to Klearbox or to specific features, or
• terminate your Account with or without notice in serious cases (for example, where there is unauthorised access to third‑party inboxes, security abuse, or intentional fraud).
• Where suspension or termination occurs for reasons other than a serious breach, and you have prepaid for a subscription period, we will act in accordance with Section 9 and applicable law, including any obligation to provide a proportionate refund.

13    User content and customer data

13.1   Ownership of your emails and other content

You retain all rights, title, and interest (including any intellectual‑property rights) in and to:

• the emails and other content stored in your connected email accounts, and
• any other content you submit to or through Klearbox (for example, labels, notes, or configuration names), insofar as such rights exist under applicable law. Klearbox does not claim ownership of your emails.

13.2   Licence to process mailbox data to provide the service

By connecting an email account and using Klearbox, you authorise Avestra-One GmbH to access and process mailbox data only to the extent necessary to provide the Klearbox features you request or configure, to operate and secure the Service, to troubleshoot technical issues, to comply with legal obligations, and to maintain evidence of legally relevant actions such as consent, withdrawal, cancellation, security, and support records.

This contractual authorisation includes access to email metadata and, where technically necessary for a requested feature, temporary access to limited email content. It does not transfer ownership of your emails to us.

This contractual authorisation is separate from the legal bases for processing personal data under data-protection law. The applicable data-protection roles, legal bases, purposes, retention periods, recipients, and rights are described in the Privacy Policy.

The Privacy Policy identifies the applicable lawful basis for each processing purpose. In general, processing necessary to create and manage your Account, connect supported email accounts, perform mailbox-cleanup functions that you request or configure, operate paid Plans, and provide support is carried out where necessary for the performance of the contract. Processing required for tax, accounting, withdrawal, consumer-law, security-incident, and legal-compliance records is carried out where necessary to comply with legal obligations or to establish, exercise or defend legal claims. Processing for fraud prevention, service security, abuse prevention, product diagnostics, and limited product-quality improvement may be carried out on the basis of our legitimate interests, subject to a documented balancing assessment and your rights under data-protection law. Processing based on consent, such as optional analytics or marketing where applicable, will occur only where valid consent has been obtained and may be withdrawn as described in the Privacy Policy.

13.3   Derived data and operational records

Klearbox may generate and retain derived data and operational records based on your use of the Service, such as:

• sender lists and classifications, for example classifications such as “newsletter” or “promotions”;
• unsubscribe history and unsubscribe status;
• rule configurations and clean-up run metadata;
• Account jurisdiction, Plan and usage-limit information;
• technical, security and operational logs; and
• consent records, withdrawal records, cancellation records, support records, audit logs and records relating to data-subject requests.

Derived data and operational records may still qualify as personal data where they relate to an identified or identifiable user, Account, connected email account, sender relationship, rule, preference, or mailbox operation. Where such data qualify as personal data, we process them only for the purposes and lawful bases described in the Privacy Policy, apply appropriate retention limits, and respect applicable data-subject rights.

We may use derived data and operational records to provide, operate, secure, troubleshoot, maintain and improve Klearbox, to prevent abuse or fraud, to evidence legally relevant actions, to comply with legal obligations, and to establish, exercise or defend legal claims, in each case only to the extent permitted by applicable law and as further described in the Privacy Policy.

Where reasonably possible, we use aggregated or anonymised data for analytics, service statistics and product improvement. We do not treat data as anonymised unless re-identification is no longer reasonably likely using means reasonably available to us or to another party. We do not use readable email body content for advertising, sale of data, unrelated profiling, or training general-purpose artificial-intelligence models unless we separately inform you and obtain any consent required by law.

13.4   No persistent archive of email body content

Klearbox does not maintain a persistent stored archive of the full content of your emails. Email body content may be temporarily accessed during an active connection to your mailbox where required to perform a requested feature (such as identifying unsubscribe links), but the readable body text of your emails is not stored by Klearbox after the relevant operation completes, beyond any transient technical storage necessary for carrying out that operation.

13.5   Data retention and deletion of mailbox‑related data and Credentials

Klearbox stores Credentials (including app passwords and tokens) for connected email accounts in encrypted form for as long as:

• your Klearbox Account remains active, and
• the relevant email account remains connected in Klearbox,
• so that Klearbox can perform the actions you request or configure, including automated or scheduled clean‑up operations that may run while you are not actively logged in.
• If you disconnect a connected email account in Klearbox or delete the stored Credentials for that account via the settings, Klearbox will cease using those Credentials and will delete or render them unusable in active production systems without undue delay, subject to legal retention obligations and limited technical logging necessary to evidence the deletion or security operation. Encrypted backup copies, if any, are isolated from ordinary production use and are overwritten or deleted in accordance with our documented backup-retention schedule. Automated or scheduled operations for that email account will no longer be performed once Credentials are removed or access is revoked at the email provider.

If you request deletion of your Klearbox Account, we will:

• deactivate your Account and stop all further automated or scheduled operations,
• delete stored Credentials for all connected email accounts without undue delay, and
• delete or anonymise other personal data derived from your use of Klearbox (such as rule configurations, sender classifications, and run history) in accordance with our Privacy Policy and legal retention obligations, while retaining consent records, audit logs, and other legal‑evidence records only for the periods and in the form permitted or required by law.

The Privacy Policy sets out the applicable retention periods or retention criteria for the main categories of Account data, Credentials, mailbox metadata, derived service records, support records, security logs, legal-compliance records, and backup copies. We retain identifiable mailbox-related data only for as long as necessary for the relevant purpose, unless a longer period is required for legal compliance, security, dispute resolution, or establishment, exercise or defence of legal claims.

13.6   User responsibility for content and permissions

You are responsible for ensuring that your use of Klearbox with any connected email account, and the actions Klearbox performs on your behalf (including unsubscribe requests and clean‑up rules), are lawful and permitted under applicable law and your email provider’s terms and policies. You are solely responsible for the content of emails in your connected accounts, and for obtaining any permissions that may be required to allow Klearbox to process that content in accordance with these Terms.

This Section does not limit our own obligations as controller under applicable data-protection law for processing carried out by Klearbox.

13.7   No monitoring of content for legal compliance

Klearbox does not monitor the content of your emails for legal compliance and does not provide legal advice. Where Klearbox temporarily analyses limited email content, it does so only for specific technical functions you request or configure, such as detecting unsubscribe mechanisms where this cannot be achieved from headers or metadata alone. We do not use readable email content for unrelated monitoring, profiling, advertising, or product analytics unless separately disclosed and legally permitted.

14    Privacy and data protection

14.1   General data‑protection framework

Avestra‑One GmbH processes personal data in connection with Klearbox in accordance with the General Data Protection Regulation (GDPR), the Austrian Datenschutzgesetz (DSG), and any other applicable data‑protection laws in your jurisdiction. Details of the personal data we process, the purposes and legal bases, retention periods, recipients, international transfers, your rights, and contact points are set out in our Privacy Policy, available at [insert current Privacy Policy URL], as updated from time to time in accordance with applicable law.

14.2   Roles under data‑protection law

For ordinary consumer use of Klearbox, Avestra-One GmbH acts as an independent controller for personal data processed in connection with the Service. This includes Account data, subscription and billing-related data, support data, Credentials, service configuration, mailbox metadata, temporary mailbox-content access where technically necessary for a requested feature, derived service records, operational logs, security logs, and legal-compliance records.

We determine the purposes and essential means of this processing in order to provide, secure, maintain, bill, support, troubleshoot, protect and improve Klearbox, and to comply with legal obligations. User settings, rules and confirmations determine which Service functions are applied to a connected mailbox, but they do not make us a processor or joint controller with you for ordinary consumer use.

We do not use readable email body content for advertising, sale of data, unrelated profiling, or training general-purpose artificial-intelligence models unless we separately inform you and obtain any consent required by law.

We do not act as a processor for consumers unless we expressly agree separate processor terms that satisfy Article 28 GDPR. If a different data-protection role applies to a specific business product, integration or enterprise use case, this will be stated separately before that use case applies.

 

14.3   Categories of data and main purposes

In connection with Klearbox we may process, among others, the following personal data categories:

• account and identification data (such as email address, name if provided, and account identifiers),
• authentication data and Credentials for connected email accounts (such as app passwords or tokens, stored encrypted),
• email metadata and, where technically necessary, limited email content accessed temporarily to provide specific features (for example, unsubscribe detection),
• configuration data (such as rules, preferences, and plan information),
• derived metadata (such as sender classifications, cleanup run logs, and unsubscribe records), and
• technical and security data (such as log entries, consent records, and withdrawal or DSAR handling records). 

These data are processed for purposes including providing and maintaining Klearbox, operating automated or scheduled cleanup jobs, handling support, fulfilling legal obligations, and improving security and product quality, as further described in the Privacy Policy.

We do not use readable email body content for advertising, profiling unrelated to the requested Service, sale of data, or training general-purpose artificial-intelligence models unless we separately inform you and obtain any consent required by law. Because email accounts may contain sensitive information, including special categories of personal data, we limit mailbox-content access to what is technically necessary for the requested feature and apply the safeguards described in the Privacy Policy.

Klearbox is not designed to identify, infer, classify, or intentionally process special categories of personal data. However, because email accounts may contain such information, limited incidental access may occur when Klearbox technically processes mailbox data to provide a feature you request or configure. We minimise such access and do not use special-category information to create sensitive profiles or for advertising, unrelated analytics, or model training. Where processing of special-category data cannot be avoided, the applicable Article 9 GDPR condition and safeguards are described in the Privacy Policy and, where legally required, reflected in the relevant consent or permission flow.

Product-quality improvement does not involve the use of readable email body content unless we separately inform you and obtain any consent required by law. Unless otherwise stated in the Privacy Policy, product-quality improvement is limited to aggregated, anonymised or, where necessary, pseudonymised operational metrics, error information, feature usage, sender-classification performance indicators, and security or reliability signals.

14.4   International transfers and service providers

We may use third-party service providers, processors, independent controllers, and other recipients to host and operate Klearbox, process payments, provide analytics, support, security, communications, and other operational services. Their role depends on the service they provide and is described in the Privacy Policy.

Some recipients may process personal data outside the EEA, the United Kingdom, or Switzerland. Where personal data are transferred to a country that does not benefit from an applicable adequacy decision, we use appropriate safeguards, such as standard contractual clauses and supplementary measures where required. The Privacy Policy provides further information about the relevant recipient categories, transfer locations, safeguards, and how you can obtain or access information about those safeguards.

14.5   Your data‑protection rights

You have the rights granted to you by applicable data‑protection law, which may include the right of access, rectification, erasure, restriction, data portability, and objection, as well as the right to withdraw consent where processing is based on consent. You can exercise these rights via the mechanisms described in the Privacy Policy (for example, via an in‑product rights request portal or by emailing the contact address provided there). You also have the right to lodge a complaint with your local supervisory authority, in particular the Austrian Data Protection Authority or the authority in your country of residence.

The Privacy Policy explains how each right can be exercised, any practical limitations that may apply, how we verify requests, and how exercising a right may affect the availability of Klearbox features that require the relevant data.

14.6   Cookies and similar technologies

We use cookies and similar technologies on our websites and in Klearbox for purposes such as authentication, security, session management, fraud prevention, user experience, and, where applicable, analytics. Cookies and similar technologies that are not strictly necessary will be used only in accordance with applicable consent and transparency requirements. The types of technologies used, their purposes, storage periods, providers, and your choices are described in the Cookie Policy.

14.7   Relationship between these Terms and the Privacy & Cookie Policies

These Terms govern the contractual relationship between you and Avestra‑One GmbH for the use of Klearbox. The Privacy Policy governs how personal data are processed, and the Cookie Policy governs cookies and similar technologies. If there is a conflict between these Terms and the Privacy Policy or Cookie Policy concerning data‑protection or cookie disclosures required by law, the Privacy Policy or Cookie Policy prevails within its subject matter.

15    Third‑party services and integrations

15.1   Email providers and integrations

Klearbox relies on integrations with third‑party email providers and other third‑party services (such as IMAP servers, OAuth providers, and payment processors) to function. These third‑party services are operated independently of Avestra‑One GmbH and are governed by their own terms, privacy policies, and acceptable‑use rules, which you must review and comply with. We are not responsible for the availability, performance, or policies of third‑party providers, and we do not control their retention or deletion behaviour once messages have been moved to Trash or other folders.

15.2   Your relationship with third‑party providers

By connecting a third‑party email account or using Klearbox with any third‑party service, you instruct and authorise Klearbox to interact with that service on your behalf within the scope described in these Terms and in the relevant connection or consent flow. You remain responsible for your relationship with each third‑party provider, including for:

• complying with their terms and policies,
• managing your security settings (such as app passwords, OAuth grants, and multi‑factor authentication), and
• revoking Klearbox’s access when you no longer wish to use Klearbox with that service.

15.3   Changes or discontinuation of integrations

Third-party providers may change, restrict, suspend, or discontinue their services, interfaces, authentication methods, rate limits, terms, policies, or technical requirements. Such changes may affect whether and how Klearbox can connect to or operate with a connected email account or other third-party service.

We are not responsible for the independent acts, omissions, outages, policy decisions, retention practices, or technical changes of third-party providers. You remain responsible for your relationship with each third-party provider, including compliance with its terms and security requirements.

Where a third-party integration is described by us as supported for your paid Plan, we will use reasonable efforts to maintain or restore compatibility, provide a workaround, or update the affected product description. If no reasonable workaround is available and the affected paid feature can no longer be provided as agreed, your mandatory rights in relation to non-conforming digital services remain unaffected.

15.4   No endorsement of third‑party services

References to third‑party services, email providers, or integrations in Klearbox, our documentation, or our marketing materials are for identification purposes only and do not constitute endorsement or responsibility for those services. Any issues, disputes, or failures relating to the underlying third‑party service itself (for example, delays in message delivery, provider‑side outages, or provider‑initiated account suspensions) must be resolved between you and the third‑party provider. This does not affect any statutory rights you may have against us in relation to the Klearbox service itself.

16    Security

16.1   Our security measures

We apply reasonable technical and organisational measures designed to protect Klearbox and the personal data we process against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. These measures include encrypted storage of Credentials for connected email accounts, access controls, logging of security‑relevant events, and separation of production and administrative access, as further described in our Privacy Policy and internal security documentation.

Given the sensitivity of mailbox access and Credentials, we maintain internal security and data-protection documentation appropriate to the risk of the processing, including access-control, key-management, logging, incident-response, retention, and vendor-management measures.

16.2   Credential protection

Credentials (such as app passwords and tokens) that you provide to Klearbox for connecting email accounts are stored in encrypted form and are accessible only to systems that need them to perform the operations described in these Terms. We do not store your primary email account password. You can revoke our access at any time by removing Credentials in Klearbox or revoking them at your email provider. Once Credentials are deleted or revoked, automated and scheduled operations on that account will cease.

16.3   Your security responsibilities

You play an important role in keeping your Account and connected email accounts secure. In particular, you are responsible for:

• choosing strong passwords and keeping them confidential,
• securing any devices and browsers you use to access Klearbox,
• enabling and managing multi‑factor authentication where available,
• generating and managing app passwords or other Credentials in line with your email provider’s security guidance, and
• promptly revoking Credentials and notifying us if you suspect unauthorised access or misuse in connection with Klearbox.

16.4   Security incidents and notifications

If we become aware of a security incident that has a significant impact on your personal data or your use of Klearbox, we will investigate and take appropriate steps to mitigate any harm. Where required by law, we will also notify the relevant supervisory authorities and affected users, including by email or in‑product notices, without undue delay and in accordance with our legal obligations.

16.5   Penetration testing and responsible disclosure

We welcome responsible security research and vulnerability reporting. However, you must not conduct penetration testing, vulnerability scanning, or other security testing against Klearbox systems without our prior written consent. If you believe you have discovered a security vulnerability, you should notify us using the contact details in Section 3 or any dedicated security contact we publish, and you should not publicly disclose the vulnerability until we have had a reasonable opportunity to investigate and address it.

17    Intellectual property

17.1   Ownership of the service

All rights, title, and interest in and to Klearbox, including the software, code, design, interfaces, documentation, and all other materials and content provided as part of the service (excluding your emails and other user content as defined in Section 13), are owned by Avestra‑One GmbH or its licensors. These elements are protected by copyright and other intellectual‑property laws.

17.2   Limited licence to use Klearbox

Subject to your compliance with these Terms and any applicable plan limitations, Avestra‑One GmbH grants you a limited, non‑exclusive, non‑transferable, non‑sublicensable licence to access and use Klearbox for your own consumer purposes during the term of your plan. You may not use Klearbox for any commercial or resale purpose unless we have given you prior written permission.

17.3   Restrictions on use

Except where non‑waivable law allows it, you must not:

• copy, modify, adapt, translate, or create derivative works based on Klearbox or any part of it;
• reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of Klearbox, except to the extent expressly permitted by mandatory law and then only after giving us prior written notice;
• remove, alter, or obscure any copyright, trademark, or other proprietary notices on or in Klearbox; or
• use any trademarks, trade names, or logos of Avestra‑One GmbH or Klearbox without our prior written permission.

17.4   Feedback

If you provide us with feedback, suggestions, or ideas about Klearbox (“Feedback”), you grant us a perpetual, irrevocable, worldwide, royalty‑free licence to use that Feedback for any lawful purpose in connection with our business, including to improve and develop Klearbox and other services, without any obligation to compensate you. This does not affect your rights with respect to your personal data, which are governed by the Privacy Policy.

18    Term, suspension and termination

18.1   Contract term

These Terms apply from the time you first register for, access, or use Klearbox and remain in force for as long as you have an active Klearbox Account or are otherwise using the service, subject to any specific plan duration and renewal terms described in Section 7.

18.2   Term of plans and renewals

The term of each plan (for example, subscription period or time‑limited access period) and any automatic renewal are described in the applicable offer at checkout and in Section 7. Unless otherwise stated, subscriptions renew automatically at the end of each billing period until cancelled by you or us in accordance with these Terms.

18.3   Cancellation by you

You may cancel a recurring subscription at any time via your Account settings or through another cancellation method that we clearly make available. Unless we state otherwise in the applicable offer or required law provides different, cancellation takes effect at the end of the current pre‑paid billing period; you will not be charged for subsequent periods and you will retain access until the end of the current period. This is separate from any statutory withdrawal rights described in Section 8.

18.4   Account deletion by you

You may request deletion of your Klearbox Account at any time using the mechanisms we provide (for example, via an in‑product deletion or DSAR flow). Upon a valid deletion request, we will:

• deactivate your Account and stop further automated or scheduled operations;
• delete stored Credentials for connected email accounts without undue delay; and
• delete or anonymise other personal data associated with your Account in accordance with our Privacy Policy and legal retention obligations, as described in Sections 13 and 14.

18.5   Suspension or termination by us for cause

We may suspend or terminate your Account or access to Klearbox, in whole or in part, if:

• we reasonably believe that you have materially breached these Terms, including by unauthorised access to third-party inboxes, serious misuse of the Service, security abuse, intentional circumvention of usage limits, or repeated violations of the acceptable-use rules;
• your use of Klearbox creates a material security, legal, operational, or abuse risk for us, for other users, for third-party providers, or for third parties;
• we are required to do so by law, by a court or regulatory order, by a competent authority, or by a binding requirement of a third-party provider necessary for the operation of the Service; or
• continued provision of Klearbox, or a material part of it, becomes impossible or objectively unreasonable for legal, security, technical, or operational reasons outside our reasonable control.

Where the reason is capable of remedy and the circumstances allow it, we will give you notice, explain the reason, and provide a reasonable opportunity to remedy the issue before suspension or termination. In serious cases, including obvious fraud, deliberate abuse, unlawful use, security threats, unauthorised access to third-party inboxes, or urgent legal or technical risk, we may suspend or terminate immediately.

If we terminate a paid Plan for reasons not caused by your serious breach and not caused by your unlawful or abusive use, we will refund prepaid fees for the period after termination in which the paid Service is no longer provided, unless mandatory law provides a different remedy.

18.6   Consequences of termination

Upon termination of your Account or of the relevant plan for any reason:

• your right to access and use Klearbox under these Terms will cease;
• all automated or scheduled operations will stop;
• we will process your data as set out in Sections 13 and 14 and in the Privacy Policy, including deletion or anonymisation of personal data and deletion of stored Credentials, subject to legal retention requirements; and
• if termination is not due to your serious breach and you have prepaid for a period of service that has not yet been provided, we will handle any pro‑rata refunds in accordance with Sections 7, 8, and 11 and applicable law.

18.7   Survival

Sections of these Terms that by their nature should continue to apply after termination (such as sections on intellectual property, derived data, withdrawals and refunds already processed, limitations of liability, governing law and disputes, and this survival clause) will continue to apply to the extent necessary

 

19    Liability and warranty

19.1   Service availability and specific outcomes

Klearbox is provided using reasonable skill and care. We do not guarantee uninterrupted availability, error-free operation, compatibility with every email provider, client, or configuration, or that every unwanted email will be identified, moved, or unsubscribed. These limitations describe the technical nature of the Service and do not exclude or limit your statutory rights, including your rights in relation to non-conforming digital services.

19.2   Mandatory liability 

Nothing in these Terms excludes or limits liability where such exclusion or limitation would be unlawful. This includes liability for intent, gross negligence, injury to life, body or health, mandatory product-liability claims, mandatory consumer-protection remedies, mandatory digital-service conformity remedies, and mandatory liability under applicable data-protection law.

19.3   Liability for slight negligence

In cases of slight negligence, Avestra-One GmbH is liable only for breach of essential contractual obligations. Essential contractual obligations are obligations whose fulfilment is necessary for the proper performance of the contract and on which a consumer may reasonably rely, taking into account the nature of Klearbox as a consumer email-management digital service.

In such cases, our liability is limited to damage that was typical and reasonably foreseeable for this type of Service at the time the contract was concluded. This limitation does not apply to damage resulting from injury to life, body or health, claims under mandatory product-liability law, claims arising from mandatory digital-service conformity remedies, mandatory data-protection liability, or any other case in which liability cannot be limited against consumers under mandatory law.

For clarity, the secure handling of Credentials and the implementation of reasonable technical and organisational security measures for personal data processed through Klearbox are essential contractual obligations where they are necessary for the proper performance of the Service.

19.4   Responsibility for user instructions, third-party systems and external causes

To the extent permitted by law and subject to Section 19.2, we are not liable for damage to the extent it is caused by circumstances outside our responsibility, including:

• rules, settings, sender selections, confirmations, bulk actions, or automations that you set, approve or enable, provided that we presented the relevant action and its reasonably foreseeable effect in a clear manner before execution;
• your failure to review previews, recommendations, warnings, sender selections, or rule settings before confirming an action, where such review was reasonably possible and clearly presented;
• permanent deletion, retention changes, folder handling, spam filtering, account suspension, authentication restrictions, rate limits, or other technical or policy decisions of your email provider or another third-party provider, where these are outside our reasonable control;
• unsupported devices, browsers, networks, email-account configurations, authentication methods, extensions, local security tools, or provider settings, provided that we informed you of relevant technical requirements in a clear and comprehensible manner before contract conclusion where required by law; or
• unauthorised access, misuse, or compromise caused by your failure to keep your own devices, email-provider accounts, authentication factors, or app passwords secure, except to the extent the issue was caused by our breach of security obligations.

This Section does not exclude or limit liability where the damage was caused by a defect in Klearbox for which we are responsible, by our breach of mandatory duties, by our failure to apply reasonable care or security measures, or where a limitation would be unlawful. Where damage is caused partly by circumstances within our responsibility and partly by circumstances outside our responsibility, liability is determined according to the legally applicable principles of causation and contributory responsibility.

19.5   Your responsibility for configuration and review

Klearbox operates based on the connected accounts, rules, sender selections, settings, confirmations and automations that you configure or approve. You are responsible for reviewing the information presented to you before confirming bulk actions, rules, recurring cleanups, sender selections or other mailbox operations.

Where Klearbox provides previews, recommendations, classifications or suggested rules, these are technical assistance features intended to support your decision. They do not replace your review of the relevant action before confirmation. We remain responsible for providing the Service with reasonable skill and care and for complying with mandatory digital-service conformity, consumer-protection and data-protection obligations.

We are not responsible for loss or issues to the extent they are caused by your confirmed configurations, your unsupported digital environment, your email provider’s systems, or your failure to follow clear technical instructions, provided that we have complied with our information duties and mandatory legal obligations.

 

19.6   Relationship with digital‑service remedies

The limitations and exclusions in this Section 19 apply only to the extent compatible with mandatory law. They do not exclude, restrict, or make more difficult any mandatory remedies you may have for non-conforming digital services, including the right to have Klearbox brought into conformity, price reduction, termination, refund, or other remedies provided by applicable consumer law. If this Section conflicts with mandatory statutory rights, the statutory rights prevail.

20    Warranty and statutory rights

20.1   No additional commercial guarantees

Unless we expressly state otherwise in a specific offer or written guarantee statement, we do not provide additional commercial guarantees in respect of Klearbox beyond what is required by law. In particular, we do not guarantee a specific reduction in inbox size, a specific classification accuracy, or a specific outcome of unsubscribe workflows.

20.2   Statutory digital‑service and consumer rights remain unaffected

Your statutory rights under applicable digital‑service, consumer‑protection, and product‑liability laws remain unaffected by these Terms. This includes, where applicable:

• your rights in case of non‑conforming digital services, as described in Section 11 (Digital conformity and remedies);
• your statutory right of withdrawal under Section 8 (Statutory right of withdrawal and immediate performance); and
• any mandatory rights under the law of your country of residence that cannot be excluded or limited by contract.

20.3   Jurisdiction-specific consumer-rights statements

Where mandatory law requires jurisdiction-specific warranty, withdrawal, subscription, cancellation, or consumer-rights information, we will provide that information before contract conclusion or at another legally required time. Any such information is intended to clarify your statutory rights and does not limit them. If there is a conflict between any jurisdiction-specific statement and mandatory statutory rights, the statutory rights prevail.

21    Complaints and support

21.1   Support channels

If you have questions about Klearbox or need support, you can contact us at support@klearbox.net or via any in‑product support or help function we make available. We will use reasonable efforts to respond within a reasonable time, taking into account the nature and urgency of your request, but we do not guarantee specific response times unless we expressly agree otherwise.

21.2   Complaints about Klearbox

If you wish to make a complaint about Klearbox, your plan, billing, or these Terms, you should contact us using the support channels above and clearly describe the issue. We will review your complaint and respond in writing (for example by email) within a reasonable period, and where applicable we will explain any corrective measures or reasons for our position.

21.3   Escalation and ADR options

If we cannot resolve your complaint to your satisfaction, you may have the right to use alternative dispute‑resolution (ADR) mechanisms available in your country of residence. For example, Austrian consumers may contact the Internet Ombudsman (Internet Ombudsmann) for free online dispute resolution, and other EU and EEA consumers may contact their local European Consumer Centre. We will cooperate with such bodies where required by law.

21.4   Alternative dispute-resolution information

Consumers may have access to alternative dispute-resolution bodies in their country of residence. Austrian consumers may contact the Internet Ombudsman or another competent consumer ADR body where available. We are not obliged to participate in every ADR procedure unless mandatory law requires participation, but we will consider appropriate ADR requests in good faith.

We will keep dispute-resolution information in our legal notices reasonably updated in accordance with applicable law.

21.5   Local complaint requirements

Where local law requires specific complaint‑handling rules (for example, specific response times or human handling for certain jurisdictions), we will comply with those requirements for consumers in the relevant jurisdictions, as further described in any regional provisions or consumer‑facing disclosures we provide.

22    Communications

22.1   Form of contractual communications

Unless mandatory law requires a different form, we may provide contractual information and notices relating to Klearbox (for example, information about changes to these Terms, plan changes, price changes, or legal updates) by email to the address associated with your Account and/or via in‑product messages or notifications. You are responsible for keeping your contact details up to date and for regularly checking your email inbox and in‑product notifications.

22.2   Language of communication

We will generally communicate with you and provide contractual information in English unless we support another language for your jurisdiction or for the relevant purchase flow. If you accept a specific language version of these Terms in the registration or purchase flow, that language version governs your contract. If a translation is provided only for convenience, we will clearly state this before acceptance. Mandatory language and consumer-information requirements under applicable law remain unaffected.

22.3   Service communications vs marketing

We may send you service‑related communications that are necessary for the performance of the contract or for legal reasons (such as security alerts, changes to Terms, plan or price changes, renewal notices, or information about your Account or transactions). Such communications are not subject to marketing‑consent rules. Marketing communications (such as newsletters or product news not strictly necessary for the contract) will only be sent where we have a valid legal basis, and you may object or unsubscribe at any time as described in the Privacy Policy or in the communication itself.

22.4   Your communications to us

You may send legal notices or other communications relating to these Terms to the contact details in Section 3, or to any other channel that we explicitly designate as acceptable for legal notices. Unless mandatory law requires a specific form, email is sufficient for legal notices between you and us. We may ask you to verify your identity or Account ownership before acting on certain requests (for example, security‑sensitive changes, rights requests, or withdrawal/cancellation instructions).

23    Changes to these Terms

23.1   Grounds for changing these Terms

We may update these Terms where there is a valid and objective reason, including to reflect changes to Klearbox’s features, technical design, security requirements, supported integrations, pricing or Plan structure, legal or regulatory requirements, case law, supervisory guidance, abuse-prevention needs, payment-provider requirements, or to correct errors, clarify wording, or improve readability.

23.2   Material changes and advance notice

We may modify these Terms where there is a valid and objective reason, including:

• changes in mandatory law, regulatory requirements, case law, supervisory guidance, or consumer-protection requirements;
• changes in the technical requirements, security requirements, authentication methods, policies, interfaces, or commercial terms of integrated third-party providers that are relevant to Klearbox;
• changes necessary to maintain or improve the security, stability, interoperability, compatibility, abuse prevention, or technical functionality of the Service;
• the introduction of new features, Plans, integrations, or access models, or the necessary adjustment of existing ones;
• changes in payment-provider requirements, tax, accounting, billing, or legal-compliance processes; or
• the correction of errors, inconsistencies, outdated references, or unclear wording.

If a change is material and negatively affects your rights or obligations, we will notify you in advance on a durable medium. The notice will identify the changed clauses, explain the specific reason for the change, state the effective date, and describe your available options.

Material negative changes will not apply to your current prepaid access period unless the change is required by law, security, abuse prevention, urgent technical necessity, or a third-party-provider change outside our reasonable control that directly affects the continued provision of the Service, or unless you expressly agree. For recurring subscriptions, the updated Terms may apply from the next renewal period if we notify you before the applicable cancellation deadline and give you a reasonable opportunity to cancel before renewal.

Where mandatory law requires your express consent to a change, the change will apply to you only after you have given that consent. We will not rely on silence, inactivity, or continued use as consent where mandatory law requires an express declaration.

23.3   Your options if you do not agree to changes

If you do not agree to a material change that negatively affects you, you may cancel the affected recurring Plan before the change takes effect or before the next renewal to which the change would apply. In that case, your current prepaid period will continue under the previous Terms unless the change is required during that period for legal, security, abuse-prevention, urgent technical, or third-party-provider reasons outside our reasonable control.

If you cancel because of a material negative change that would otherwise apply during your current prepaid period, we will refund prepaid fees for the period after the cancellation becomes effective, unless mandatory law provides a different remedy.

If maintaining different versions of the Service or Terms for future renewal periods is not technically, legally, operationally, or commercially reasonable, we may decide not to renew the affected Plan under the previous Terms. In that case, your Plan will end at the expiry of the current prepaid period, no further renewal charge will be made, and your statutory rights remain unaffected.

23.4   Minor changes

We may make minor changes without advance notice where the change does not materially affect your rights, obligations, access to the Service, paid functionality, price, renewal logic, withdrawal rights, cancellation rights, refund rights, liability position, data-protection rights, or the scope of access to connected email accounts.

Minor changes may include corrections of typographical errors, formatting changes, reorganisation of text, numbering or cross-reference corrections, naming updates, updates to contact or technical information, clarification of existing wording without changing its legal effect, or changes that are solely beneficial to you.

We will indicate the date and version number of the current Terms and may maintain an archive of previous versions.

23.5   Local law and additional requirements

Where the law of your country of residence imposes additional requirements for changes to consumer contracts (for example, specific notice periods, separate confirmation of certain changes, or a right to terminate without penalty), we will comply with those requirements for consumers in the relevant jurisdictions.

24    Governing law and disputes

24.1   Governing law

These Terms and your use of Klearbox are governed by the laws of the Republic of Austria, excluding its conflict‑of‑laws rules and excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG), except to the extent that the law of your country of residence provides you with more favourable mandatory consumer protections.

24.2   Consumer forum and mandatory protections

If you are a consumer, you may bring legal proceedings relating to these Terms or to Klearbox before the courts of your place of residence, and you may rely on any mandatory consumer‑protection rules of your country of residence that cannot be derogated from by agreement. Nothing in these Terms limits your rights under Regulation (EU) No 1215/2012 (Brussels I Recast) or equivalent rules in your jurisdiction.

24.3   Jurisdiction for non‑consumer disputes

If you are not a consumer (for example, if you use Klearbox primarily for business purposes in a way that qualifies as non‑consumer use under applicable law), the exclusive place of jurisdiction for all disputes arising out of or in connection with these Terms or Klearbox is the competent court in Vienna, Austria.

24.4   Alternative dispute resolution

Information about available alternative dispute-resolution mechanisms is provided in Section 21 and in our legal notices. We are not obliged to participate in every ADR procedure unless mandatory law requires participation, but we will consider appropriate ADR requests in good faith.

24.5   Pre‑litigation resolution

Before initiating court proceedings (other than emergency or injunctive proceedings), you and we will use reasonable efforts to resolve disputes informally by contacting each other via the channels described in Sections 3 and 21. This clause does not limit your right to bring legal proceedings in the competent courts at any time as permitted by law.

25    Regional provisions

25.1   General principle

Klearbox is intended for users residing in the jurisdictions supported at the time of registration or purchase. Where the law of a supported jurisdiction imposes additional mandatory consumer, e‑commerce, privacy, or subscription‑management requirements, those requirements apply to consumers in that jurisdiction in addition to these Terms. If there is any inconsistency between these Terms and non‑waivable local law, the local law prevails to that extent.

25.2   European Union and European Economic Area

For consumers resident in the European Union or the European Economic Area, these Terms are intended to operate in line with applicable EU and national laws concerning consumer rights, digital services, unfair contract terms, and data protection. In particular, statutory withdrawal rights, digital‑service conformity remedies, and local court and supervisory‑authority rights remain unaffected.

25.3   United Kingdom

For consumers resident in the United Kingdom, these Terms are intended to operate alongside mandatory UK consumer and data‑protection law. Where required by applicable UK law, Klearbox will provide any mandatory pre‑renewal notices, cooling‑off information, or other subscription disclosures applicable to the relevant plan or billing cycle. UK consumers’ statutory cancellation and withdrawal rights remain unaffected.

25.4   Switzerland

For consumers resident in Switzerland, these Terms are intended to apply together with any mandatory Swiss consumer‑protection and data‑protection rules that apply to the use of Klearbox. Where Swiss law provides stronger protection than Austrian law in a particular case, that stronger mandatory protection remains unaffected.

25.5   Unsupported jurisdictions

Klearbox is not directed at and may not be available in jurisdictions that are not supported by the Klearbox registration and purchase flow at the relevant time. If you attempt to register from an unsupported jurisdiction, we may refuse registration, suspend access, or decline to contract for legal, regulatory, payments, operational, or risk reasons.

25.6   No waiver of mandatory local rights

Nothing in these Terms is intended to exclude or restrict any rights that cannot be excluded or restricted under the law applicable to you as a consumer. Any jurisdiction‑specific disclosures that we provide in the checkout flow, in in‑product notices, or in supplementary legal notices form part of these Terms to the extent required by applicable law.

26    Data portability, retrieval and switching

26.1   Statutory portability, retrieval and switching rights

We will support portability, retrieval, and switching rights to the extent required by applicable law. This may include GDPR data-portability rights, rights to retrieve eligible data or content after termination or withdrawal where applicable, and any mandatory switching rights for data-processing services.

Where the legal conditions are met, you may be entitled to receive certain data relating to you or your use of Klearbox in a structured, commonly used, and machine-readable form

26.2   Scope and format of exports

Where a portability, retrieval, or switching right applies, we will make available the categories of data that are legally required and that we technically hold in a structured form. This may include, where applicable and legally required, Account data, configuration data, rules, sender classifications, cleanup history, unsubscribe records, and other exportable data associated with your Account.

We may select a standard export format, such as JSON or CSV, unless mandatory law requires a specific format. We are not required to create new data, disclose trade secrets or security-sensitive internal information, retain data longer than permitted by our Privacy Policy and legal-retention rules, or develop custom export tools for individual users unless mandatory law requires otherwise.

Where you have provided or created non-personal content while using Klearbox and mandatory consumer law gives you a right to retrieve that content after withdrawal or termination, we will make such content available free of charge, without obstruction, within a reasonable time, and in a commonly used machine-readable format, subject to the statutory exceptions.

26.3   Self‑service exports where possible

Where technically feasible, we may provide self‑service export options in the Klearbox interface for some categories of data. If no such option is available for a given data category, you may submit a request using the methods described in the Privacy Policy. We may reasonably verify your identity and the scope of your request before providing any export.

26.4   No separate switching or egress fees where prohibited

We will not charge separate fees for exercising statutory portability, retrieval, or switching rights where such fees are prohibited by law. This does not prevent us from charging for optional, non-mandatory services that go beyond our legal obligations, such as custom migration assistance, manual data transformation, or consulting, provided that any such fees are clearly disclosed and agreed in advance.

26.5   Relationship with deletion and retention

Data portability, retrieval and switching rights do not require us to keep data after you have requested deletion, beyond what we must retain under legal-retention rules. If you request deletion of your Account or connected email accounts, your ability to obtain exports may be limited once deletion or anonymisation has been completed.

Before completing an Account deletion flow that may permanently delete or anonymise exportable Account data, we may inform you that your ability to obtain exports could be limited after deletion or anonymisation. Where technically feasible and legally required, we will provide a reasonable opportunity to request or download available exportable data before deletion is completed. This does not require us to retain data longer than permitted by law or to preserve data that must be deleted for legal, security, or data-protection reasons.

27    Miscellaneous

27.1   Interpretation of cross-references

References to Sections are references to the section numbers and headings in the version of these Terms accepted by you. We review these Terms for consistent numbering and cross-references before publication. Any obvious clerical numbering error will not be interpreted to restrict mandatory consumer rights or to expand our rights beyond what is clearly and transparently stated in the relevant substantive clause.

27.2   Severability

If any provision of these Terms is or becomes invalid, unlawful, or unenforceable, the remaining provisions remain effective to the extent permitted by law. In relation to consumers, this clause does not allow us to replace an invalid provision with a more favourable provision for us, or to rely on a reduced version of an invalid clause, where this would be contrary to mandatory consumer law.