Terms of Service

1. The service

A box is a persistent Linux system container that runs on our hardware in Kazakhstan. It comes with Ubuntu Linux, Docker Engine, sudo, SSH access, a browser terminal and preinstalled command-line tools, including Claude Code, Codex, OpenCode and Gemini CLI. The tools belong to their makers and are installed unmodified; their own licences and terms apply to your use of them.

The contents of the image, the tools on it and the dashboard's features change over time. We keep the service to what the pricing page promises for your plan.

2. Your account

You sign in with Google or a passkey. You must be old enough to enter a binding contract where you live. An account belongs to one person; you are responsible for everything done through it and through your boxes, including by software agents you run there.

Keep your sign-in methods and SSH keys secure and tell us at [email protected] if you think someone else has access.

3. Plans and payment

Prices are listed in US dollars per month on the pricing page. Each box is its own subscription, billed through Stripe: the first charge happens when you create the box, and the next ones on the same day each month. There is no free plan and no trial.

Prices exclude taxes that apply to you. The number of boxes per account is limited; the dashboard shows the current limit, and we may change it.

Upgrades apply to the running box immediately and Stripe charges the prorated difference for the rest of the period. A downgrade applies from the next period and only if the data on the box fits the smaller disk.

4. Failed payments

If a charge fails, Stripe retries it. Three days after the failed charge the box is stopped. Fourteen days after it, the box and everything on it are deleted. We email you when the box stops, three days before deletion and on deletion. Paying before deletion starts the box again with its data intact.

5. Cancellation and refunds

You can cancel a box's subscription at any time from the dashboard. The box keeps running until the end of the period you paid for and is then stopped and deleted on the schedule in section 4.

Payments are not refunded for partial periods, except where the law requires it or where we end the service without cause.

6. Your content

What you put on a box stays yours. You give us only the permissions needed to run the service: to store, copy and process that content on our infrastructure.

Our staff do not browse your files. We access a box's contents only when you ask us to, when we investigate a security incident or abuse, or when the law requires it. We monitor resource use (CPU, memory, disk and network) of every box.

Resetting or deleting a box erases its data. Keep your own copies of anything you cannot lose, such as a remote Git repository.

7. Codex, Claude and other third-party accounts

The agent tools on a box run on your own subscriptions with OpenAI, Anthropic and other providers. Your use of them is governed by those providers' terms, and you are responsible for following them. detachbox is independent and not affiliated with or endorsed by any of these providers.

When you connect a Codex or Claude account in the dashboard, we store its OAuth tokens encrypted, use them to show your usage limits and deliver an access token into the boxes you attach the account to, as described in the Privacy Policy. You can disconnect an account at any time.

A provider can change its rules, limit or close your account at any time. We may change how an account connects, for example by asking you to sign in inside the box instead of through the dashboard, when a provider's rules or behaviour make it necessary. A provider's decisions about your account are its own and fall outside our responsibility.

8. Acceptable use

You must follow the Acceptable Use Policy. It forbids, among other things, mining, scanning, spam, attacks, phishing and sharing a box with other people.

9. Availability and maintenance

Boxes are built to run around the clock. The service comes without an uptime guarantee or service credits.

We install security updates weekly and reboot hosts in a maintenance window about once a month. We announce planned reboots by email at least 48 hours ahead. After a reboot, files, Docker images and volumes are intact and boxes start automatically; running processes and terminal (tmux) sessions do not survive and have to be started again. Urgent security fixes can require an unplanned reboot.

10. The security model you accept

Boxes are unprivileged containers that share the host's kernel with other customers' boxes. Nested containers are enabled so that Docker works inside a box. This gives more attack surface than a dedicated virtual machine. We mitigate it with user-namespace isolation, network isolation between boxes and prompt kernel updates, and we describe the trade openly on the website. If your work needs a dedicated kernel, detachbox is the wrong product for it.

Inside the box you have root through sudo. You are responsible for what runs there, including the actions of AI agents you allow to act on your behalf.

11. Suspension and termination

We may stop a box immediately and without notice when it harms others or our infrastructure, and we may suspend or close an account for breaking these terms or the Acceptable Use Policy, for non-payment or when the law requires it. Where we can, we tell you why and give you a chance to fix the problem first. Serious or repeated abuse leads to closure without refund.

You can close your account at any time by deleting your boxes and writing to [email protected].

12. Disclaimers

The service is provided "as is" and "as available". To the extent the law allows, we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement. The output of AI agents you run is your responsibility to check.

13. Limitation of liability

To the extent the law allows, we are not liable for indirect, incidental or consequential damages, lost profits or lost data, and our total liability for any claim is limited to what you paid us for the service in the three months before the claim arose. Nothing in these terms limits liability that cannot be limited by law.

14. Changes to these terms

We may update these terms. For changes that reduce your rights we will email you at least 14 days before they take effect. Continuing to use the service after that means you accept the new terms; if you do not, cancel before the date.

15. Governing law

These terms are governed by the laws of the State of California, USA, without regard to its conflict-of-law rules. Any dispute arising from them or from the service goes to the state or federal courts located in Los Angeles County, California, and both parties submit to their jurisdiction. Nothing here takes away mandatory consumer protections of the country you live in.

16. Contact

Questions about these terms: [email protected]. Abuse reports: [email protected].