Terms of Service

1.Definitions

“Service” means Diobox’s event management platform, including the websites at diobox.com and related domains, web application, mobile applications, APIs, and all features made available through them, including guest management, registration and ticketing, email, SMS and WhatsApp messaging, check-in, QR scanning, kiosk mode, badge printing, lead retrieval, and integrations.

“Organizer” means a Customer using the Service to plan, promote, or run events.

“Attendee” or “Guest” means any person whose information is managed through the Service in connection with an Organizer’s event, including invitees, registrants, and ticket buyers.

“Exhibitor” means a person or organization that purchases a Lead Retrieval license for a specific event (Section 7).

“Authorized User” means an individual (such as a team member) whom you invite or permit to access the Service under your account.

“Customer Data” means all data, content, and materials that you or your Authorized Users submit to the Service, or that the Service collects on your behalf, including Guest information, event content, images, messages, and registration responses.

2.The Service; License

Subject to these Terms and payment of applicable fees, Diobox grants you a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Service during your subscription term, solely for your internal business purposes and in accordance with the plan you purchase and the documentation.

You will not, and will not permit anyone else to: (a) copy, modify, translate, or create derivative works of the Service; (b) reverse engineer, decompile, or attempt to derive the source code of the Service, except to the extent such restriction is prohibited by law; (c) rent, lease, resell, sublicense, or provide the Service to third parties as a service bureau or otherwise, except as expressly permitted (for example, selling tickets to your own events); (d) remove or alter proprietary notices; (e) interfere with or disrupt the integrity or performance of the Service; (f) attempt to gain unauthorized access to the Service or its related systems; (g) use the Service to build a competing product, or copy its features or user interface for that purpose; or (h) access the Service by automated means (including scraping or bulk extraction) other than through documented APIs and integrations.

We may modify the Service from time to time, including adding, changing, or retiring features. If we discontinue a material feature that you have paid for, we will use commercially reasonable efforts to give you advance notice.

3.Accounts & Authorized Users

You must register for an account to use the Service. You represent that you are at least 18 years old, able to form a binding contract, and not barred from receiving services under applicable law. You agree to provide accurate, current, and complete registration information and keep it up to date.

You are responsible for: (a) maintaining the confidentiality of credentials associated with your account; (b) all activity occurring under your account and by your Authorized Users; and (c) ensuring your Authorized Users comply with these Terms. Account credentials are for individual Authorized Users and may not be shared or transferred to any person outside your organization; each Authorized User must access the Service under their own login. You will notify us promptly at legal@diobox.com of any unauthorized access to or use of your account. Diobox may require identity verification before restoring account access or acting on account-ownership disputes, and in any dispute between two or more parties regarding account ownership, Diobox may rely on the registered account owner and billing records to determine ownership.

4.Subscriptions, Fees & Payment

4.1 Plans and renewal

Paid plans are billed in advance on a recurring basis (monthly or annually, per your selection) and renew automatically at the end of each billing period unless you cancel before renewal through your account settings or by contacting us. You authorize Diobox and its payment processor to charge your payment method on file for all fees due, including renewals and applicable taxes. Cancelling ends your subscription at the end of the current billing period; see Section 16 for the effect of cancellation, including permanent deletion of account data.

4.2 Plan changes and proration

You may upgrade or downgrade your plan, or switch between monthly and annual billing, at any time. Plan changes take effect immediately and are prorated by our payment processor, Stripe: a credit is applied for the unused portion of the current billing period, and you are charged the prorated amount for the new plan for the remainder of the period.

4.3 Usage-based fees and Message Credits

Certain features are billed on usage, including SMS and WhatsApp messages (which consume message credits), per-event add-ons, and Lead Retrieval licenses. Message credits are consumed at the rates shown in the Service at the time of sending, may vary by destination, channel, and message length, and do not expire during an active subscription but are forfeited upon account termination. If you enable auto-refill, you authorize us to automatically charge your payment method to replenish credits when your balance falls below the threshold you select; you may disable auto-refill at any time in your account settings.

4.4 Taxes

Fees are exclusive of taxes. You are responsible for all sales, use, VAT, GST, and similar taxes arising from your purchases (excluding taxes on Diobox’s net income). If you are required by law to withhold taxes, you will gross up payments so that Diobox receives the full amount invoiced.

4.5 Price changes; refunds; disputes

We may change subscription pricing effective upon your next renewal, with at least 30 days’ advance notice. Except as expressly stated in these Terms or required by law, all fees are non-refundable and there are no refunds or credits for partial billing periods, unused credits, or downgrades. If you believe a charge is in error, contact us at legal@diobox.com within 60 days of the charge and we will work with you in good faith to resolve it. Amounts not paid when due may accrue interest at the lesser of 1.5% per month or the maximum rate permitted by law, and we may suspend the Service for accounts with overdue balances after notice.

5.Ticketing & Payment Processing

5.1 How ticketing works

The Service allows Organizers to sell tickets and paid registrations to their Attendees. Ticket payments are processed through Stripe, using a Stripe account that the Organizer connects to Diobox (“Connected Account”). Ticket proceeds are paid by Stripe directly to the Organizer’s Connected Account, less applicable Stripe processing fees and any Diobox platform fees disclosed at the time of setup or sale. Diobox is not a party to the transaction between the Organizer and the Attendee, does not hold ticket funds, and is not a payment processor, bank, or money transmitter.

5.2 Organizer is the seller of record

The Organizer is the seller and merchant of record for all tickets and registrations it sells through the Service, and is solely responsible for: (a) the event itself, including its occurrence, quality, safety, and legality; (b) the accuracy of event listings, pricing, and ticket terms; (c) setting and honoring its own refund policy, and processing refunds owed to Attendees; (d) responding to and resolving chargebacks, disputes, and payment reversals on its Connected Account, including any associated processor fees; (e) determining, collecting, and remitting all applicable taxes on ticket sales; and (f) complying with all laws applicable to ticket sales, admissions, consumer protection, and event operations in relevant jurisdictions.

5.3 Stripe terms

By connecting a Stripe account, you also agree to the Stripe Services Agreement and the Stripe Connected Account Agreement. Diobox is not responsible for Stripe’s services, payout timing, account reviews, reserves, or fund holds, which are governed by your agreement with Stripe. If Stripe suspends or terminates your Connected Account, ticketing functionality may be unavailable.

5.4 Diobox platform fees

Diobox may charge a platform fee on ticket transactions as disclosed in the Service. Platform fees are deducted at the time of the transaction and are non-refundable, including where the Organizer later refunds the Attendee, unless we state otherwise in the Service.

6.Messaging Services (Email, SMS & WhatsApp)

6.1 Your consent obligations

The Service enables you to send email, SMS, and WhatsApp messages to your Guests. You are solely responsible for obtaining, documenting, and maintaining all legally required consents from each recipient before messaging them, and for honoring opt-outs. You represent and warrant that your use of the messaging features complies with all applicable laws and industry rules, including, as applicable: the U.S. Telephone Consumer Protection Act (TCPA) and CTIA Messaging Principles and Best Practices; CAN-SPAM; Canada’s Anti-Spam Legislation (CASL); the GDPR and ePrivacy rules; and equivalent laws in each recipient’s jurisdiction.

6.2 Opt-outs and content rules

You must honor all opt-out requests promptly (including SMS “STOP” replies, which the Service processes automatically) and may not message recipients who have opted out. You may not use the messaging features to send content that is unlawful, deceptive, or prohibited by carrier or platform rules, including content involving sex, hate, alcohol, firearms, or tobacco where restricted (SHAFT), phishing, or malware, and you may not use link shorteners or sender information designed to disguise the origin of a message.

6.3 Carriers and WhatsApp

SMS and WhatsApp messages sent through the Service are transmitted by our messaging provider, Twilio. SMS delivery additionally depends on telecommunications carriers, and WhatsApp messaging operates on the WhatsApp Business Platform provided by Meta. Your use of WhatsApp features is additionally subject to the WhatsApp Business Solution Terms and Meta’s messaging policies, including template approval requirements and 24-hour customer-service-window rules. Carriers and Meta may impose fees, registration requirements (such as 10DLC campaign registration in the U.S.), filtering, and throughput limits that affect delivery. Diobox does not guarantee the delivery, deliverability, or delivery time of any message.

6.4 Enforcement

We may monitor aggregate messaging metrics (such as complaint, opt-out, and error rates) and may suspend or throttle messaging, or require additional verification, if we reasonably believe your usage violates this Section, harms deliverability for other customers, or triggers carrier or platform enforcement. You are responsible for any carrier fines or platform penalties arising from your messaging.

7.Lead Retrieval

7.1 Licenses

Lead Retrieval allows Exhibitors at an Organizer’s event to scan Attendee badges and capture lead information. Each Exhibitor must purchase its own Lead Retrieval license directly from Diobox, at the price displayed at the time of purchase. Each license is valid for a single named event, is non-transferable between events or organizations, and expires when the event ends. Lead Retrieval fees are non-refundable once the event has begun; if the event is cancelled before it begins, contact us and we will refund unused licenses.

7.2 Exhibitors are Customers

By purchasing a Lead Retrieval license, an Exhibitor becomes a Customer under these Terms with respect to its use of the Service, even if it has no other Diobox subscription.

7.3 Lead data responsibilities

When an Attendee’s badge is scanned by an Exhibitor, the Attendee’s registration information designated for lead retrieval is shared with that Exhibitor. The Exhibitor is an independent controller of the lead data it collects and is solely responsible for its subsequent use of that data, including compliance with applicable privacy and marketing laws and honoring Attendee rights requests. Organizers are responsible for ensuring their event registration process discloses to Attendees that badge scanning shares their information with the scanning Exhibitor. Diobox processes lead data as a service provider to the Organizer and the Exhibitor and is not responsible for either party’s independent use of it.

8.On-Site Features (QR Scanning, Kiosk Mode, Badge Printing)

The Service includes features intended for use at live events, including QR code check-in scanning, self-service kiosk mode, and badge design and printing.

• Hardware. You are responsible for procuring, configuring, and maintaining all devices, printers, network connectivity, and consumables used with on-site features. Diobox does not warrant compatibility with any particular hardware except as stated in our documentation.
• Kiosk mode. Devices running in kiosk mode are under your physical control. You are responsible for supervising kiosk devices, securing them against misuse, and any data entered by or displayed to persons using them.
• Operational reliance. On-site features depend on device performance and network conditions at your venue. You should maintain a reasonable fallback (such as an offline guest list) for mission-critical check-in operations. Diobox is not liable for event disruptions caused by venue connectivity, hardware failure, or misconfiguration.
• Badges. You are responsible for the content of badges you design and print, including any personal data displayed on them.

9.Integrations, API & Third-Party Services

The Service may interoperate with third-party products and services that you choose to connect, such as Stripe, WhatsApp/Meta, and workflow tools such as Zapier, and may expose APIs, API keys, and webhooks.

• Your use of a third-party service is governed by that third party’s terms and privacy policy, and you are responsible for reviewing and accepting them. Diobox does not control and is not responsible for third-party services, their availability, or their handling of your data.
• By connecting an integration, you authorize Diobox to exchange your Customer Data with that third party as needed to provide the integration.
• You are responsible for safeguarding API keys and tokens issued to you and for all activity performed with them. We may throttle, limit, or revoke API access that degrades the Service or violates these Terms.
• We may add, change, or discontinue integrations and APIs at any time; where a change is material and breaking, we will use reasonable efforts to provide advance notice.

10.Customer Data & Privacy

You own your Customer Data. You grant Diobox a worldwide, non-exclusive, royalty-free license to host, copy, process, transmit, display, and otherwise use Customer Data solely as necessary to provide, secure, support, and improve the Service, to comply with law, and as otherwise instructed by you. This license ends when Customer Data is deleted in accordance with Section 16 and our data retention practices, except for copies retained as required by law.

As between the parties, you are responsible for the accuracy and legality of Customer Data and for having all rights and consents necessary to submit it to the Service, including consents from Guests whose personal data you upload or collect. Where Diobox processes Guest personal data on your behalf, Diobox acts as your processor/service provider and the Data Processing Addendum applies and is incorporated into these Terms for Customers subject to the GDPR, UK GDPR, or similar laws. Our collection and use of personal data relating to your account and use of the Service is described in our Privacy Policy.

Diobox may generate and use aggregated or de-identified data derived from use of the Service (such as feature usage statistics and deliverability metrics) to operate, benchmark, and improve the Service, provided such data does not identify you or any individual.

You are solely responsible for compliance with laws applicable to data you collect from or about children, including COPPA and FERPA, including obtaining any required parental consents. The Service is a business tool and is not directed to children.

11.Acceptable Use

You will not use the Service to:

• violate any applicable law or regulation, or the rights of any person, including intellectual-property, privacy, and publicity rights;
• upload or transmit content that is unlawful, defamatory, harassing, hateful, obscene, or that harms or exploits minors;
• send spam or unsolicited communications, or violate Section 6;
• impersonate any person or entity, or misrepresent your affiliation, or forge headers or identifiers to disguise the origin of content;
• collect or store payment card data (other than through the Service’s integrated payment flows), government identification numbers, health information subject to HIPAA, or other sensitive regulated data without Diobox’s prior written consent;
• transmit viruses, malware, or code intended to disrupt or gain unauthorized access to systems or data;
• probe, scan, or test the vulnerability of the Service without authorization, or circumvent authentication or security measures;
• use the Service in connection with fraudulent events, deceptive ticket sales, or any scheme to defraud; or
• resell tickets in violation of applicable ticket-resale, price-cap, or licensing laws.

Diobox does not pre-screen Customer Data but may remove or disable access to content that we reasonably believe violates these Terms or applicable law.

12.Intellectual Property; Feedback

Diobox and its licensors own all right, title, and interest in and to the Service, including all software, designs, templates, documentation, and trademarks (“Diobox Materials”), and all related intellectual-property rights. Except for the limited rights expressly granted in these Terms, no rights in the Diobox Materials are granted to you.

If you provide suggestions, ideas, or other feedback about the Service, you grant Diobox a perpetual, irrevocable, worldwide, royalty-free license to use that feedback for any purpose without obligation to you.

13.Confidentiality

Each party may receive non-public information of the other that is designated confidential or that reasonably should be understood to be confidential (“Confidential Information”). Customer Data is your Confidential Information; the Service and Diobox Materials are Diobox’s. The receiving party will: (a) use Confidential Information only to perform under these Terms; (b) protect it with at least the same care it uses for its own confidential information, and no less than reasonable care; and (c) not disclose it except to employees, contractors, and advisors who need it and are bound by confidentiality obligations at least as protective. Confidential Information does not include information that is or becomes public without breach, was known before disclosure, is independently developed, or is rightfully received from a third party. A party may disclose Confidential Information as required by law, with prompt notice to the other party where legally permitted.

14.Beta Features

We may make features available on a beta, preview, or early-access basis, identified as such in the Service. Beta features are provided “as is,” may be modified or discontinued at any time, may be subject to additional terms, and are excluded from any availability or support commitments. We may condition beta access on feedback.

15.Suspension

Diobox may suspend your access to all or part of the Service, with notice where practicable, if: (a) your account is more than 15 days overdue; (b) we reasonably believe your use violates Sections 6 or 11 or poses a security risk to the Service or others; (c) suspension is required by law or by a carrier, payment, or platform partner; or (d) continued provision could expose Diobox to material harm or liability. We will restore access promptly once the cause of suspension is resolved.

16.Term, Termination & Data Export

These Terms apply from your first use of the Service and continue until your subscription expires or is terminated. You may cancel your subscription at any time through your account settings; cancellation takes effect at the end of the current billing period. No refunds are given and no credits (including unused message credits) remain after cancellation. Cancellation closes your account, and all Customer Data in it is permanently deleted in accordance with the process below. Either party may terminate for material breach if the breach is not cured within 30 days of written notice. Diobox may terminate free accounts, or accounts inactive for more than 12 months, upon reasonable notice.

Upon termination or expiration: (a) your right to access the Service ends; (b) fees owed remain payable and prepaid fees are non-refundable except where you terminate for our uncured material breach, in which case we will refund prepaid fees covering the remainder of the terminated period; and (c) for 30 days following termination, we will make Customer Data available for export in a standard format upon request. Thereafter, we will delete Customer Data from live systems within 30 days and from backups within 90 days after that, except where retention is required by law. Sections that by their nature should survive termination (including 4, 10, 12, 13, 17–20, 22, and 23) survive.

17.Disclaimer of Warranties

EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” DIOBOX AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. DIOBOX DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, THAT MESSAGES WILL BE DELIVERED, OR THAT DATA WILL NOT BE LOST. DIOBOX IS NOT RESPONSIBLE FOR EVENTS ORGANIZED BY CUSTOMERS, FOR THE CONDUCT OF ORGANIZERS, EXHIBITORS, OR ATTENDEES, OR FOR THIRD-PARTY SERVICES. SOME JURISDICTIONS DO NOT ALLOW CERTAIN DISCLAIMERS, SO SOME OF THE ABOVE MAY NOT APPLY TO YOU.

18.Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (A) NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY; AND (B) EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE BY CUSTOMER TO DIOBOX IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

THE FOREGOING LIMITS DO NOT APPLY TO: CUSTOMER’S PAYMENT OBLIGATIONS; A PARTY’S INDEMNIFICATION OBLIGATIONS UNDER SECTION 19; A PARTY’S BREACH OF SECTION 13 (CONFIDENTIALITY); OR LIABILITY THAT CANNOT BE LIMITED UNDER APPLICABLE LAW, INCLUDING LIABILITY FOR DEATH OR PERSONAL INJURY CAUSED BY A PARTY’S NEGLIGENCE, GROSS NEGLIGENCE, WILLFUL MISCONDUCT, OR FRAUD.

19.Indemnification

By Customer. You will defend, indemnify, and hold harmless Diobox and its officers, directors, employees, and agents from and against any third-party claims, and resulting damages, liabilities, costs, and expenses (including reasonable attorneys’ fees), arising out of or relating to: (a) Customer Data; (b) your events, ticket sales, refund practices, or conduct toward Attendees; (c) your messaging activity, including claims under the TCPA or similar laws; (d) an Exhibitor’s or your use of lead data; or (e) your breach of these Terms or violation of law.

By Diobox. Diobox will defend you against third-party claims alleging that the Service, as provided by Diobox and used as permitted under these Terms, infringes a U.S. patent, copyright, or trademark, or misappropriates a trade secret, and will pay damages finally awarded or agreed in settlement. If such a claim arises, Diobox may modify the Service, procure rights for continued use, or terminate the affected feature with a pro-rata refund of prepaid fees. Diobox has no obligation for claims arising from Customer Data, combinations with items not provided by Diobox, or use in violation of these Terms. This Section states Diobox’s entire liability for infringement claims.

The indemnified party must give prompt notice of the claim, allow the indemnifying party sole control of the defense and settlement (provided any settlement releases the indemnified party without admission of fault), and provide reasonable cooperation.

20.Copyright Claims (DMCA)

If you believe content on the Service infringes your copyright, send a notice to our designated agent at legal@diobox.com or by mail to Copyright Agent, Diobox, Inc., 2585 Broadway, Suite 250, New York, NY 10025, including: identification of the copyrighted work and of the allegedly infringing material with sufficient detail to locate it; your contact information; a statement of good-faith belief that the use is not authorized; a statement, under penalty of perjury, that the notice is accurate and that you are the owner or authorized to act on the owner’s behalf; and your physical or electronic signature. We will respond in accordance with the DMCA, may remove content without prior notice, and will terminate the accounts of repeat infringers in appropriate circumstances.

21.Modifications to These Terms

We may update these Terms from time to time. If a change is material, we will provide at least 30 days’ notice before it takes effect, by email to your account address or by prominent notice in the Service. Non-material changes take effect upon posting, indicated by the “Last updated” date. Your continued use of the Service after the effective date constitutes acceptance; if you do not agree to a change, your remedy is to cancel your subscription before it takes effect, and if a material change adversely affects you, you may terminate and receive a pro-rata refund of prepaid, unused fees.

22.Governing Law & Disputes

These Terms are governed by the laws of the State of New York, without regard to conflict-of-laws rules. The parties consent to the exclusive jurisdiction and venue of the state and federal courts located in New York County, New York, for any dispute arising out of or relating to these Terms, and waive objections to jurisdiction and venue in those courts. To the extent permitted by law, each party waives its right to a jury trial and to participate in a class action. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information. The U.N. Convention on Contracts for the International Sale of Goods does not apply.

23.General

• Relationship. The parties are independent contractors; these Terms do not create a partnership, joint venture, agency, or employment relationship.
• Assignment. You may not assign these Terms without our prior written consent, except to a successor in connection with a merger, acquisition, or sale of substantially all assets, with notice to us. Diobox may assign these Terms in connection with a corporate transaction. These Terms bind and benefit permitted successors and assigns.
• Force majeure. Neither party is liable for delay or failure to perform (other than payment obligations) caused by events beyond its reasonable control, including natural disasters, internet or utility failures, carrier actions, labor disputes, war, or government action.
• Notices. Notices to Diobox must be sent to Diobox, Inc., Attn: Legal, 2585 Broadway, Suite 250, New York, NY 10025, or by email to legal@diobox.com. Notices to you may be sent to your account email address or posted in the Service, and are deemed given when sent or posted.
• Export & sanctions. You represent that you are not located in, and will not use the Service in, any embargoed jurisdiction, and are not on any U.S. government restricted-party list. You will comply with applicable export-control and sanctions laws.
• Severability; waiver. If any provision is held unenforceable, it will be modified to the minimum extent necessary and the remainder will remain in effect. A waiver is effective only if in writing and does not waive any other breach.
• Entire agreement. These Terms, together with the Privacy Policy, the DPA (where applicable), and any order or plan details presented in the Service, constitute the entire agreement between the parties regarding the Service and supersede all prior agreements on the subject. In case of conflict, the DPA controls with respect to processing of personal data.