1. DEFINITIONS

1.1 "Service" means the HSEBox cloud-based Health, Safety & Environment (HSE)

management platform, including the dedicated domain, dedicated database,

managed hosting, automatic updates, and all related features provided under

the Client's subscription plan.

1.2 "Provider" means HSEBox – Technologies, Lda, the company operating the

Service.

1.3 "Client" means the legal entity or individual who subscribes to a plan

and is responsible for the account.

1.4 "Users" means the individuals authorized by the Client to access the

Service under the Client's subscription.

1.5 "Data" means all information, records, documents, photos, files, and

content uploaded, created, or stored by the Client and its Users within

the Service.

2. SERVICE DESCRIPTION

2.1 HSEBox is a fully managed, cloud-based SaaS platform for HSE management.

Each Client receives:

(a) A dedicated subdomain (e.g., company.hsebox.com);

(b) A dedicated, isolated database;

(c) Managed hosting, security, and maintenance;

(d) Automatic software updates.

2.2 The Service is a management tool intended to assist in the organization and

digitalization of HSE records. IT IS NOT A SUBSTITUTE FOR PROFESSIONAL HSE

CONSULTANCY, LEGAL COMPLIANCE ADVICE, REGULATORY AUDITING, OR SAFETY

ENGINEERING. The Client remains solely responsible for ensuring compliance

with all applicable health, safety, and environmental laws and regulations.

2.3 The Service is provided "as is" and "as available." The Provider does not

guarantee that the Service will prevent workplace accidents, injuries,

environmental incidents, regulatory fines, or any other adverse events.

3. SUBSCRIPTION PLANS AND PAYMENT

3.1 The Service is offered through monthly subscription plans based on the

number of Users:

- Starter: Up to 10 users, 1 site/project, up to 20 GB storage — $49/month

- Growing: Up to 40 users, 5 sites/projects, up to 60 GB storage — $99/month

- Professional: Up to 120 users, 15 sites/projects, up to 150 GB storage — $199/month

- Enterprise: Custom users, unlimited sites/projects, custom storage — contact for pricing

3.2 All prices are in US Dollars (USD) and exclude any applicable taxes. The

Client is responsible for any taxes, duties, or levies imposed by their

jurisdiction.

3.3 Payment is due monthly in advance. Failure to pay within 15 days of the

due date may result in suspension or termination of the Service.

3.4 The Provider reserves the right to modify pricing with 30 days' prior

written notice. Existing subscriptions will honor the current price until

the end of the billing cycle following the notice.

3.5 There are no setup fees unless otherwise agreed in writing for Enterprise

plans.

4. STORAGE LIMITS AND AUTOMATIC CLEANUP

4.1 Each plan includes a storage allowance as specified in Section 3.1.

4.2 When the storage limit is reached, the system will automatically delete

the oldest uploaded photos to free up space. ALL OTHER DATA — including

records, documents, reports, and system data — remains unaffected.

4.3 The Provider is not responsible for any loss arising from the automatic

deletion of photos under this policy. It is the Client's responsibility

to maintain external backups of any critical photos or files if required.

4.4 The Client may upgrade to a higher plan at any time to obtain additional

storage.

5. ACCOUNT AND USER MANAGEMENT

5.1 The Client is responsible for all activity that occurs under their account

and for maintaining the confidentiality of login credentials.

5.2 The Client's administrator(s) are responsible for managing Users, assigning

roles and permissions, activating or deactivating accounts, and ensuring

that only authorized individuals have access.

5.3 The Provider is not liable for unauthorized access resulting from the

Client's failure to properly manage user credentials or permissions.

6. DATA OWNERSHIP AND PRIVACY

6.1 The Client retains full ownership of all Data uploaded or created within

the Service. The Provider does not claim any ownership rights over

Client Data.

6.2 Each Client's Data is stored in a dedicated, isolated database. Client Data

is never shared with, accessible to, or mixed with other clients' data.

6.3 The Provider will not access, use, sell, or share Client Data for any

purpose other than providing and maintaining the Service, unless required

by law or with the Client's explicit written consent.

6.4 The Provider implements reasonable security measures to protect Client

Data. However, the Provider does not guarantee absolute security and is

not liable for breaches caused by factors beyond its reasonable control,

including but not limited to cyberattacks, force majeure events, or

vulnerabilities in third-party infrastructure.

6.5 The Provider processes personal data in accordance with applicable data

protection laws, including the EU General Data Protection Regulation

(GDPR) where applicable. A separate Data Processing Agreement (DPA) may

be provided upon request.

7. SERVICE AVAILABILITY AND UPTIME

7.1 The Provider endeavors to maintain reasonable availability of the Service

but does not guarantee uninterrupted or error-free operation.

7.2 The Service may be temporarily unavailable due to:

(a) Scheduled maintenance (with reasonable advance notice when possible);

(b) Emergency maintenance or security patches;

(c) Factors beyond the Provider's control (internet outages, hosting

provider issues, force majeure events, etc.).

7.3 The Provider shall not be liable for any loss, damage, or inconvenience

arising from any downtime or service interruption, whether scheduled or

unscheduled.

8. LIMITATION OF LIABILITY

8.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE PROVIDER SHALL NOT

BE LIABLE FOR:

(a) Any indirect, incidental, special, consequential, or punitive damages;

(b) Loss of profits, revenue, data, business opportunities, or goodwill;

(c) Any damages arising from workplace accidents, injuries, fatalities,

environmental incidents, regulatory penalties, or compliance failures,

regardless of whether the Client used the Service;

(d) Any damages resulting from unauthorized access to or alteration of

the Client's data;

(e) Any damages caused by viruses, malware, or other harmful components

transmitted through the Service or third-party services.

8.2 THE PROVIDER'S TOTAL AGGREGATE LIABILITY FOR ANY AND ALL CLAIMS ARISING

OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE

TOTAL AMOUNT PAID BY THE CLIENT TO THE PROVIDER IN THE THREE (3) MONTHS

IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

8.3 The Service is a digital management tool. It does not perform safety

inspections, does not replace qualified HSE professionals, and does not

guarantee regulatory compliance. THE CLIENT ASSUMES FULL RESPONSIBILITY

for all HSE decisions, actions, and compliance obligations.

9. DISCLAIMER OF WARRANTIES

9.1 THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF

ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED

TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,

ACCURACY, COMPLETENESS, OR NON-INFRINGEMENT.

9.2 The Provider does not warrant that:

(a) The Service will meet the Client's specific requirements;

(b) The Service will be uninterrupted, timely, secure, or error-free;

(c) The results obtained from the Service will be accurate or reliable;

(d) Any defects in the Service will be corrected within a specific

timeframe.

10. CANCELLATION AND TERMINATION

10.1 The Client may cancel their subscription at any time. Cancellation takes

effect at the end of the current billing period. No refunds are provided

for partial months.

10.2 The Provider may suspend or terminate the Client's account if:

(a) Payment is overdue by more than 15 days;

(b) The Client breaches these Terms;

(c) The Client uses the Service for illegal or unauthorized purposes;

(d) Continued provision of the Service becomes commercially or technically

impractical.

10.3 Upon termination, the Client's access to the Service will be disabled.

The Provider will retain the Client's Data for a period of 30 days after

termination, during which the Client may request a data export. After

this 30-day period, all Client Data may be permanently deleted without

further notice.

10.4 The Provider reserves the right to discontinue the Service entirely with

90 days' prior written notice. In such event, the Provider will assist

Clients with data export.

11. ACCEPTABLE USE

11.1 The Client agrees not to:

(a) Use the Service for any unlawful purpose;

(b) Upload malicious code, viruses, or harmful content;

(c) Attempt to gain unauthorized access to other clients' data or the

Provider's systems;

(d) Resell, sublicense, or redistribute the Service without written

permission;

(e) Use the Service in a way that degrades performance for other clients;

(f) Exceed the user limits or storage limits of their plan through

technical manipulation.

12. INTELLECTUAL PROPERTY

12.1 HSEBox, the HSEBox logo, and all related trademarks, software, designs,

and documentation are the exclusive property of HSEBox – Technologies, Lda.

12.2 The Client is granted a limited, non-exclusive, non-transferable,

revocable license to use the Service for the duration of their active

subscription.

12.3 The Client may not copy, modify, reverse-engineer, decompile, or create

derivative works based on the Service or any of its components.

13. THIRD-PARTY SERVICES

13.1 The Service may rely on third-party infrastructure providers (hosting,

DNS, email, payment processors, etc.). The Provider is not liable for

outages, data loss, or service interruptions caused by third-party

providers.

13.2 The Client acknowledges that internet connectivity is required to use

the Service and that the Provider is not responsible for the Client's

internet connection quality.

14. INDEMNIFICATION

14.1 The Client agrees to indemnify, defend, and hold harmless the Provider,

its directors, employees, and agents from and against any claims,

liabilities, damages, losses, and expenses (including reasonable legal

fees) arising out of or related to:

(a) The Client's use of the Service;

(b) Any breach of these Terms by the Client or its Users;

(c) Any third-party claims related to the Client's HSE operations,

compliance failures, workplace incidents, or regulatory violations;

(d) Any Data uploaded by the Client or its Users.

15. FORCE MAJEURE

15.1 The Provider shall not be liable for any failure or delay in performing

its obligations due to circumstances beyond its reasonable control,

including but not limited to: natural disasters, pandemics, war,

terrorism, government actions, power failures, internet outages,

cyberattacks, or third-party service failures.

16. MODIFICATIONS TO TERMS

16.1 The Provider reserves the right to modify these Terms at any time.

Changes will be communicated via email or through the Service with at

least 30 days' notice.

16.2 Continued use of the Service after the effective date of modified Terms

constitutes acceptance of the new Terms. If the Client does not agree

with the changes, they may cancel their subscription before the changes

take effect.

17. GOVERNING LAW AND JURISDICTION

17.1 These Terms shall be governed by and construed in accordance with the

laws of Portugal.

17.2 Any disputes arising from or related to these Terms or the Service shall

be submitted to the exclusive jurisdiction of the courts of Santarém,

Portugal.

17.3 Before initiating legal proceedings, both parties agree to attempt

resolution through good-faith negotiation for a minimum period of 30

days.

18. SEVERABILITY

18.1 If any provision of these Terms is held to be invalid or unenforceable,

the remaining provisions shall remain in full force and effect.

19. ENTIRE AGREEMENT

19.1 These Terms, together with the Privacy Policy and any applicable Data

Processing Agreement, constitute the entire agreement between the Client

and the Provider regarding the use of the Service.

19.2 Any prior agreements, representations, or understandings (whether oral

or written) are superseded by these Terms.

20. CONTACT

For questions regarding these Terms, please contact:

HSEBox – Technologies, Lda

Rua Quinta d'Arca, Lot B9, Lower Level

Chainça – Abrantes, 2200-172 Abrantes, Portugal

Website: https://portal.hsebox.com/contact