The agreement that governs your use of OppBox. Each section opens with a plain-English summary; the operative text underneath is what binds. If anything here surprises you, tell us · that's a bug.
Last updated: 11 June 2026OppBox is run by a UK company. By signing up or using the product you agree to these terms. If you're signing up for your employer, you're agreeing on their behalf.
OppBox ("OppBox", "we", "us") is provided by OppBox Limited (Companies House no. 001950), a company incorporated in England and Wales.
These terms of service (the "Terms") govern access to and use of the OppBox application, website, MCP server and related services (together, the "Service"). By creating an account, joining a workspace, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.
If you use the Service on behalf of a company or other organisation, you represent that you have authority to bind that organisation, and "Customer" means that organisation. Otherwise, "Customer" means you.
OppBox is a business tool for working adults. It is not for personal mailboxes or for anyone under 18.
The Service is offered for business use only. You may use the Service only if you are at least 18 years old and are using it in the course of a trade, business or profession. The Service is not directed at consumers, and consumer protection regimes that apply only to consumer contracts do not apply to these Terms.
OppBox is an email client that understands your pipeline. It connects your mailbox and your CRM, computes signals about your deals, and drafts text only when you ask it to. When you explicitly ask, it can also push your edits back to your CRM. It does not copy your mailbox or CRM into its own database.
OppBox is a deal-aware email client for sales teams. The Service connects, with your authorisation, to a user's Google mailbox and calendar (through Nylas), to the Customer's Salesforce CRM, and optionally to call tools such as Gong and Granola. It renders mail alongside the deals it relates to, computes deal signals (for example follow-up gaps, ghosted threads, stage staleness), provides pipeline views, and offers AI-assisted drafting and summaries on request. On an explicit user action, the Service can also write updates back to the Customer's CRM over the user's authorised connection · for example updating an opportunity field the user edited, or creating a contact the user approved. The Service performs no automated or background writes to Connected Services.
The Service is architected so that mailbox and CRM content is not replicated into OppBox's own database. Source data remains in the source systems and is queried live when needed. OppBox persists only: (a) computed signal values; (b) the user's own actions and configuration; and (c) lightweight lookup indices used for performance. This is described in more detail in our privacy policy and on the security page.
OppBox is a full email client: users can read, compose, send and schedule email through their connected mailbox. Every email is sent by a human pressing send (or explicitly scheduling a send); the Service has no autonomous sending behaviour.
Keep your account secure. Workspace admins act for the whole company: they manage members and integrations, and what they do binds the Customer.
Sign-in to the Service is provided through WorkOS. You must provide accurate account information and keep your sign-in credentials and connected sessions secure. You are responsible for activity that occurs under your account, and Customer is responsible for activity that occurs in its workspaces.
Each Customer operates one or more workspaces. Workspace administrators may invite and remove members, connect and disconnect integrations, configure workspace settings, export workspace data, and delete the workspace. Customer is responsible for ensuring its administrators and members are authorised to take these actions and that their use of the Service complies with these Terms and applicable law, including laws governing access to colleagues' and counterparties' communications.
Notify us promptly at [email protected] if you suspect unauthorised access to an account or workspace.
Your data is yours. We get a narrow licence to process it, solely to run the product for you. We don't sell it and we don't train AI models on it.
"Customer Data" means data that Customer or its users submit to the Service or make accessible to it through connected integrations, including email and calendar content, CRM records, call notes, and the signals, actions and indices derived from them for Customer's use.
As between the parties, Customer owns Customer Data. Customer grants OppBox a limited, non-exclusive, worldwide licence to access, process, transmit and display Customer Data solely as necessary to provide, secure, support and maintain the Service, in accordance with these Terms and our privacy policy. We claim no other rights in Customer Data.
We may use usage metadata about how the Service is operated (such as feature usage events, performance measurements and audit records · not the content of mail, calendar or CRM records) to operate, secure and improve the Service.
Customer is responsible for the accuracy and lawfulness of Customer Data and for having the rights and consents needed to connect the integrations it connects.
Google, Salesforce, Nylas, Gong and Granola are their own companies with their own terms. You authorise each connection yourself and can revoke it at any time; revoking deletes our stored tokens.
The Service depends on third-party services that you choose to connect ("Connected Services"), including Google (sign-in and, via Nylas, Gmail and Google Calendar), Salesforce, and optionally Gong and Granola. Each Connected Service is governed by its own terms and privacy policy, and your use of it through OppBox must comply with those terms. OppBox is not responsible for Connected Services, their availability, or changes they make to their APIs that affect the Service.
You authorise each connection yourself through the provider's own OAuth consent screen. OAuth tokens are stored encrypted (AES-256-GCM with envelope key management). Disconnecting an integration in OppBox deletes the stored tokens; you can also revoke OppBox's access from the provider's side with the same effect.
OppBox's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. See the Google user data section of our privacy policy.
AI runs only when you click the button. Nothing is generated in the background, nothing is sent automatically, and you are responsible for reviewing what you send.
The Service includes AI-assisted features such as deal briefs, draft replies and follow-up nudges. AI features run only when a user explicitly invokes them. The Service does not auto-generate content in the background and does not auto-send email; AI output is always presented to a human for review, editing and an explicit send decision.
AI processing is performed by Anthropic via its commercial API. Prompts may include relevant excerpts of email and CRM data needed to fulfil the specific request. Under the commercial API terms we operate on, Anthropic does not use this data to train its models.
AI output is generated by a statistical model and may be inaccurate, incomplete or unsuitable. You must review AI output before relying on it or sending it. Customer is responsible for all email sent from its users' mailboxes through the Service, including email that began as an AI draft.
Don't use OppBox to spam people, break the law, attack the service, or breach the terms of the services it connects to.
You must not, and must not permit anyone to:
We may suspend access that we reasonably believe breaches this section, with notice where practicable.
OppBox is a per-seat monthly subscription. Current prices live on the pricing page. If prices change, we tell you at least 30 days ahead and the change applies from your next billing cycle.
The Service is sold as a per-seat subscription, billed monthly in advance, at the prices published on our pricing page or agreed in an order form. Seats are per user; sharing a seat between people is not permitted.
Fees are exclusive of taxes; Customer is responsible for applicable sales tax, VAT or equivalent, other than taxes on our income. Fees are non-refundable except where these Terms or applicable law say otherwise.
Where we offer a free trial or waitlist access, we will state its length and any limits when you start it. At the end of a trial, continued use requires a paid subscription.
We may change prices by giving at least 30 days' notice; changes take effect at the start of Customer's next billing cycle. If you do not accept a price change, you may cancel before it takes effect. If undisputed fees remain unpaid 14 days after we notify you they are overdue, we may suspend the Service until they are paid.
Early-access features are works in progress. They may change or disappear, and they come without promises.
We may make waitlist, beta, preview or early-access features available, labelled as such. These are provided as-is, may be changed, suspended or withdrawn at any time, may be subject to additional terms, and are excluded from any availability or support commitments. Sections 13 to 15 apply to beta features with the qualification that our liability arising from beta features is limited to the greatest extent permitted by applicable law.
We own the product; you own your data. If you send us feedback we can use it without owing you anything.
OppBox and its licensors own all intellectual property rights in the Service, including its software, design system, documentation and branding. Except for the limited right to use the Service in accordance with these Terms, no rights in the Service are granted to Customer.
If you give us feedback, suggestions or ideas about the Service, you grant us a perpetual, irrevocable, royalty-free licence to use them without restriction or obligation. Feedback never includes Customer Data.
Each side keeps the other's non-public information secret and uses it only for this relationship.
Each party may receive non-public information of the other that is marked confidential or that a reasonable person would understand to be confidential ("Confidential Information"). Customer Data is Customer's Confidential Information; the Service's non-public technical and commercial details are ours.
The receiving party must: use the disclosing party's Confidential Information only to exercise rights and perform obligations under these Terms; protect it with at least reasonable care; and not disclose it except to employees, advisers and subprocessors who need it and are bound by comparable obligations. These obligations do not apply to information that is or becomes public without breach, was lawfully known before disclosure, is independently developed, or is lawfully received from a third party. A party may disclose Confidential Information where required by law or court order, giving notice where lawful to do so.
We promise to run the service with reasonable skill and care. Beyond that, it's provided as-is · we can't promise it will never go down, especially since it depends on Google, Salesforce and other providers we don't control.
We warrant that we will provide the Service with reasonable skill and care. Except for that warranty, and to the maximum extent permitted by applicable law, the Service is provided "as is" and "as available", and we disclaim all other warranties, conditions and terms, express or implied, including implied warranties of merchantability, fitness for a particular purpose and non-infringement.
We do not warrant that the Service will be uninterrupted, error-free or secure, that signals or AI output will be accurate, or that Connected Services will remain available or unchanged. The Service depends on third-party providers and on the Customer's own connected systems; outages or changes in those systems may affect the Service.
Standard B2B cap: our total liability is limited to what you paid us in the previous 12 months, and neither side is liable for indirect losses. Things the law doesn't allow us to exclude (like liability for fraud) aren't excluded.
Nothing in these Terms excludes or limits liability for: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be excluded or limited under applicable law.
Subject to the paragraph above, neither party is liable for any indirect, incidental, special, consequential or punitive loss, or for loss of profits, revenue, goodwill, anticipated savings or data (other than data loss caused by a party's breach of its security obligations), even if advised of the possibility.
Subject to the two paragraphs above, each party's total aggregate liability arising out of or in connection with these Terms, whether in contract, tort (including negligence) or otherwise, is capped at the fees paid or payable by Customer to OppBox in the 12 months preceding the event giving rise to the claim. This cap does not apply to Customer's payment obligations, to a party's breach of section 12 (Confidentiality), or to either party's obligations under section 15 (Indemnities).
If someone sues you because our software infringes their IP, we defend you. If someone sues us because of your data or your misuse of the service, you defend us.
By OppBox. We will defend Customer against any third-party claim alleging that the Service, used as permitted by these Terms, infringes that third party's intellectual property rights, and will indemnify Customer for damages finally awarded or settlement amounts we agree. If such a claim arises, we may modify the Service, procure rights, or, if neither is reasonably available, terminate the affected subscription and refund prepaid unused fees. This indemnity does not cover claims arising from Customer Data, Connected Services, or combination of the Service with items we did not supply.
By Customer. Customer will defend OppBox against any third-party claim arising from Customer Data, Customer's breach of section 8 (Acceptable use), or Customer's use of the Service in violation of law or third-party rights, and will indemnify OppBox for damages finally awarded or settlement amounts Customer agrees.
The indemnified party must give prompt notice of the claim, allow the indemnifying party sole control of the defence and settlement (provided any settlement releases the indemnified party unconditionally and imposes no obligation on it), and provide reasonable cooperation at the indemnifying party's expense.
Cancel any time, effective at the end of the billing cycle. After termination you have 30 days to export, then we delete what we hold · which is little, by design, since your mail and CRM never left their source systems.
Subscriptions run month to month and renew automatically until cancelled. Customer may cancel at any time from workspace settings or by written notice, effective at the end of the then-current billing cycle. Either party may terminate for material breach not cured within 30 days of written notice, or immediately if the other party becomes insolvent.
For 30 days after termination or expiry, workspace administrators may export the data OppBox holds for the workspace (signals, actions, configuration, indices and the audit log) using the in-product export. After that window we delete the workspace's data from our systems within 30 days, except where retention is required by law. Mailbox, calendar and CRM content is unaffected by termination · it never left the source systems, and stored OAuth tokens are deleted.
Sections that by their nature should survive termination do so, including sections 5 (ownership), 11 to 15, and 19.
If we change these terms in a way that matters, we'll tell you at least 30 days before it takes effect. Carrying on using OppBox after that means you accept the change.
We may update these Terms from time to time. For material changes we will give at least 30 days' notice by email or in-product notice before the change takes effect; non-material changes (such as clarifications or new feature descriptions) may take effect when posted. The "Last updated" date at the top reflects the current version. If you do not accept a material change, you may cancel before it takes effect; continued use after the effective date constitutes acceptance.
Our privacy policy describes what personal data we process, why, where it goes and the rights you have over it, including the architecture that keeps mailbox and CRM content out of our database. Where OppBox processes personal data in Customer Data on Customer's behalf, a data processing agreement is available on request at [email protected].
English law, English courts, this document is the whole deal, and neither side can hand it to someone else without consent (except in a company sale).
Governing law and jurisdiction. These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes) are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
Entire agreement. These Terms, together with the privacy policy, any order form and any data processing agreement, are the entire agreement between the parties regarding the Service and supersede all prior agreements and representations relating to it. Each party confirms it has not relied on any statement not set out in these documents.
Assignment. Neither party may assign these Terms without the other's prior written consent, except that either party may assign them in connection with a merger, acquisition or sale of substantially all of its assets, with notice to the other.
Notices. Notices to OppBox must be sent to [email protected] or to the registered office shown at Companies House for OppBox Limited. Notices to Customer may be sent to the email addresses of its workspace administrators or shown in-product.
Severability and waiver. If a provision of these Terms is held unenforceable, it will be enforced to the maximum extent permissible and the remainder will remain in effect. A failure to enforce a provision is not a waiver of it.
Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, except for payment obligations.
Third-party rights. A person who is not a party to these Terms has no rights under the Contracts (Rights of Third Parties) Act 1999 to enforce them.
Relationship. The parties are independent contractors; these Terms create no partnership, joint venture or agency.
Questions about these Terms: [email protected].