Terms of Service
Last updated:
Jul 7, 2025
Effective date: October 2025
Provider / Owner: Box to Box LLP (operating the website unprompted.in)
Registered place of business: Mumbai, Maharashtra, India.
Contact: saurav@unprompted.in, abhishek@unprompted.in
1. Acceptance of Terms
By accessing or using unprompted.in (the “Site”) or any services offered through it (collectively, the “Services”), you (“you”, “User”, or “Client”) agree to be bound by these Terms & Conditions (the “Terms”). If you do not agree to all of these Terms, do not use the Site or Services.
2. Scope of Services
Unprompted is a content studio that offers writing, multimedia production and related marketing services (blogs, white papers, scripts, videos, podcasts, social media management, provenance reporting, etc.). Specific deliverables, timelines, pricing and acceptance criteria for services will be set out in separate statements of work (SOW), order forms, proposals or quotes agreed in writing between Box to Box LLP and the Client.
3. Eligibility
You represent and warrant you are legally capable of entering into contracts. If you are acting on behalf of a company or organisation you represent you have authority to bind that entity.
4. User Accounts
a. Some Services may require you to register for an account. You are responsible for maintaining the confidentiality of your account credentials and for all activity occurring under your account.
b. You agree to (i) provide accurate, current and complete information during registration; and (ii) update such information to keep it accurate. Box to Box LLP reserves the right to suspend or terminate accounts that use false information.
5. Orders, Proposals, Payment & Refunds
a. Orders are accepted when confirmed in writing by Box to Box LLP (email or signed SOW). Each order is subject to these Terms.
b. Fees, payment milestones, taxes and invoicing terms will be set out in the SOW or proposal. Unless otherwise specified, payments are due within the invoice term stated (commonly 7–30 days). Late payments may accrue interest at the lesser of 1.5% per month or the maximum permitted by law.
c. Refunds: unless agreed otherwise in a SOW, fees are non-refundable except as expressly set out in writing. For subscription offerings (if any) the cancellation and refund policy will be specified in the relevant purchase information.
6. Change Requests and Revisions
Any change in scope or additional work outside the agreed SOW will be subject to a change order and additional charges. Box to Box LLP will use commercially reasonable efforts to implement requested revisions, limited to the number of revision rounds specified in the SOW.
7. Client Responsibilities
Client will (a) provide timely access to persons, information and materials required for Box to Box LLP to perform; (b) ensure any materials provided to Box to Box LLP do not infringe third-party rights or contain unlawful content; and (c) obtain necessary permissions for use of third-party content.
8. Intellectual Property Rights
a. Pre-existing IP: each party retains ownership of its pre-existing intellectual property. Box to Box LLP retains all rights to tools, methodologies, templates, frameworks, and underlying know-how used to deliver Services.
b. Deliverables & Assignment: unless the SOW expressly states otherwise, upon full and final payment, Box to Box LLP grants the Client a non-exclusive, worldwide, perpetual license to use the final deliverables for the Client’s business purposes. The license scope, any exclusions (e.g., underlying stock assets, third-party libraries, licensed media), and moral rights will be described in the SOW.
c. Third-party materials: deliverables may include third-party-licensed content (images, fonts, video, music). Client is responsible for any additional licensing fees and for complying with end-user license terms. Box to Box LLP will notify Client of required licenses prior to inclusion.
d. Portfolio usage: Box to Box LLP may showcase non-confidential deliverables as part of its portfolio and marketing materials unless Client provides prior written objection.
9. Content Representations & Warranties
Client represents and warrants that any content it supplies (text, images, data) does not infringe third-party rights, is not defamatory, and complies with applicable laws. Box to Box LLP does not warrant that content created for the Client is free from third-party claims unless an express warranty is given in writing and indemnity/insurance arrangements agreed.
10. Confidentiality
Each party will keep confidential the other party’s Confidential Information and use it solely to perform obligations under these Terms. Confidential Information does not include information that is public, already lawfully known, or independently developed.
11. Privacy & Data Processing
Processing of personal data is governed by the Privacy Policy (below). As between the parties, Box to Box LLP will act as a Data Fiduciary for personal data processed in providing Services and will process Client personal data in accordance with applicable law and the Privacy Policy.
12. Warranties; Disclaimers
a. Box to Box LLP warrants that it will perform Services with reasonable skill and care and in accordance with the SOW.
b. Except as expressly stated, Services and all content are provided “AS IS” and Box to Box LLP disclaims all other warranties, express or implied, to the maximum extent permitted by law (including merchantability, fitness for a particular purpose, non-infringement).
13. Limitation of Liability
To the maximum extent permitted by law, Box to Box LLP’s aggregate liability for any claims arising out of or related to these Terms or the Services will not exceed the fees paid by the Client under the SOW that gave rise to the claim in the 12 months preceding the event. In no event will Box to Box LLP be liable for indirect, incidental, special, consequential, punitive losses (including lost profits, business interruption, or loss of data), even if advised of the possibility of such damages.
14. Indemnity
Client shall indemnify and hold harmless Box to Box LLP, its affiliates and personnel from any third-party claim arising from Client content, Client’s breach of representations, or Client’s misuse of deliverables. Box to Box LLP shall indemnify Client for claims that a deliverable (excluding Client materials or third-party components) infringes a third-party copyright, subject to notice and control conditions.
15. Termination & Suspension
a. Either party may terminate for material breach if the breach is not cured within 30 days of written notice. b. Box to Box LLP may suspend Services for non-payment or for violations of law or these Terms. c. Termination does not relieve Client of obligations to pay accrued fees; provisions intended to survive termination (IP, confidentiality, indemnity, limitation of liability, payment) will survive.
16. Dispute Resolution & Governing Law
These Terms are governed by the laws of India. Parties will attempt to resolve disputes amicably. If unresolved within 30 days, disputes will be referred to arbitration in Mumbai under the Arbitration and Conciliation Act, 1996 (one arbitrator if agreed; otherwise three arbitrators), conducted in English. Courts in Mumbai will have exclusive jurisdiction for interim or injunctive relief and for enforcement of arbitral awards.
17. Compliance with Laws & Content Standards
Client is responsible for ensuring that content, claims and promotions comply with applicable laws (including advertising, consumer protection, financial promotions) and platform policies for any platforms where content is published.
18. Modifications to Terms
Box to Box LLP may revise these Terms from time to time. Material changes will be notified via the Site or email; continued use after notice constitutes acceptance of updated Terms.
19. Notices
All notices must be in writing to the email addresses above or to the registered office. Notices are effective upon receipt.
20. Miscellaneous
a. No waiver: failure to enforce any provision is not a waiver. b. Severability: invalid provisions are severable. c. Assignment: Client may not assign its rights without Box to Box LLP’s written consent; Box to Box LLP may assign to an affiliate or in connection with a sale.
Privacy Policy
Effective date: October 2025
This Privacy Policy explains how Box to Box LLP (operating unprompted.in, “we”, “us”, or “our”) collects, uses, discloses and protects personal data of Users (“you”, “User”, “Data Principal”) when you visit the Site or use our Services. It describes your choices and rights regarding your personal data.
Legal & regulatory context (high-level)
This Policy is drafted with the requirements of the Digital Personal Data Protection Act, 2023 (DPDP Act) and relevant Information Technology rules and CERT-In directions in mind. The DPDP Act sets out obligations on data fiduciaries regarding lawful processing, notice, consent, purpose limitation, data security, data subject rights and breach reporting. The IT Intermediary Rules require grievance redressal mechanisms for online intermediaries; CERT-In has directions on reporting cybersecurity incidents. MeitY+2MeitY+2
1. Controller / Data Fiduciary
Box to Box LLP is the Data Fiduciary for the Site and Services. For privacy queries or to exercise your rights, contact:
Email: saurav@unprompted.in or abhishek@unprompted.in
Postal: Box to Box LLP, Mumbai, Maharashtra, India (registered office address to be placed here)
(If you prefer a dedicated privacy email, we recommend adding privacy@unprompted.in and publishing it on the Site.)
2. Types of Personal Data Collected
We collect categories of personal data depending on how you interact with the Site and Services:
a. Data you provide directly
Contact details: name, email, phone number.
Corporate information: company name, job title, billing information.
Project content: materials you upload (which may contain personal data about third parties).
Account details and messages when you sign up or request proposals.
b. Technical / usage data (collected automatically)
IP address, device identifiers, browser and OS, pages visited, referrer, timestamps, cookies and similar technologies, analytics and performance data.
c. Payment data
Where purchases are processed, we collect billing name, address and payment method details through our payment processor (we do not directly store full card data unless explicitly stated).
d. Special categories / sensitive personal data
We generally do not intentionally collect sensitive personal data (health, sexual orientation, caste, religion, etc.). If you provide such data voluntarily (e.g., in project content), we will process it only with explicit lawful basis and safeguards.
3. How We Use Personal Data (Purposes & Legal Basis)
We process personal data for legitimate business purposes, compliance and with your consent where required. Common purposes include:
To provide Services: deliver projects, communicate about a proposal, provide quotes and billing. (Performance of contract / legitimate interest)
Customer support & account management: respond to queries and manage accounts. (Performance of contract / legitimate interest)
Marketing & communications: send newsletters, promotional materials only where consent provided and with unsubscribe options. (Consent / legitimate interest)
Site operations & analytics: to monitor and improve the Site (legitimate interest).
Security & fraud prevention: detect and prevent misuse, security incidents (legitimate interest / legal obligation).
Legal compliance & enforcement: to comply with legal obligations (e.g., taxes, court orders), and to enforce our Terms (legal obligation).
Provenance & editorial logs: generate timestamps, revision history, and provenance reports related to content created — processed as part of service delivery.
4. Cookies and Similar Technologies
We use cookies and similar technologies to operate the Site, remember preferences, and collect analytics. You can manage cookie preferences through your browser or via any cookie banner we provide. Details of cookie types (essential, analytics, marketing) and retention periods must be made available in a Cookie Notice on the Site.
5. Sharing & Disclosure
We may disclose personal data to:
Service providers: hosting, analytics, payment processors, email and marketing providers, freelance contractors — bound by contracts to process data only as instructed.
Legal & compliance: to comply with law, court orders, or to respond to lawful requests of public authorities.
Business transfers: in connection with a sale, merger, reorganization or acquisition.
With your consent: where you have expressly permitted sharing.
We do not sell personal data. If we use subprocessors located outside India, we will ensure appropriate safeguards for cross-border transfers as required by law.
6. Data Security
We implement administrative, physical and technical safeguards designed to protect data against loss, misuse, unauthorised access or disclosure. We use encryption, access control, and industry-standard security practices. However, no transmission over the internet or electronic storage is fully secure; absolute security cannot be guaranteed.
Incident reporting: In the event of a personal data breach or cybersecurity incident, we will follow applicable legal obligations including internal investigation, notifying the statutory authority and affected individuals as required. We note CERT-In directions and applicable DPDP requirements on incident reporting/notification and will cooperate with regulatory authorities. (CERT-In reporting expectations and timelines should be monitored and complied with). CERT-IN+1
7. Retention
We retain personal data only as long as necessary for the purposes described and to meet legal, tax and accounting obligations. Retention periods vary by data type: e.g., contact and contractual data while your account is active and for 6–7 years after relationship end for tax/compliance (or as required by applicable law). Specific retention schedules should be published and adhered to.
8. Your Rights (Data Subject / Data Principal Rights)
Where applicable under law and subject to exemptions, you have rights to:
Access your personal data.
Correct inaccurate or incomplete data.
Request deletion / erasure of personal data (subject to legal retention obligations).
Restrict or object to processing.
Portability: receive data in a structured, machine-readable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority.
To exercise rights, contact us at saurav@unprompted.in or abhishek@unprompted.in. We will respond as required by law.
9. Children
Our Site and Services are not directed at children under 18. We do not knowingly collect personal data of children. If we learn we collected personal data from a child without parental consent, we will delete it.
10. Grievance Officer & Redressal
Consistent with Indian IT Rules and obligations for intermediaries, we have a Grievance Officer to address user complaints. Contact details (email & postal) for the Grievance Officer are published on the Site:
Grievance Officer: Box to Box LLP (unprompted.in)
Response timeline: we will acknowledge grievance within 24 hours and endeavor to resolve it within 15 business days, unless a longer period is reasonable under law. (This aligns with Intermediary Rules’ expectations for grievance handling).
11. Cross-border Transfers
If your personal data is transferred outside India (e.g., to cloud providers or third-party service providers), Box to Box LLP will ensure adequate safeguards and contractual protections consistent with applicable law.
12. Links to Other Sites
Our Site may contain links to third-party sites. This Policy does not apply to those sites — read third-party privacy policies before providing personal data.
13. Changes to this Policy
We may update this Policy to reflect changes in law, our data practices, or services. We will post the revised Policy with an updated effective date and, for material changes, provide notice on the Site or by email.
14. Contact & Complaints
For privacy inquiries or to exercise rights: saurav@unprompted.in / abhishek@unprompted.in. You can also write to our registered office in Mumbai.
If you are not satisfied with our response to a complaint, you may escalate to the relevant statutory authority (e.g., Data Protection Board created under the DPDP Act) as provided by applicable law.
Practical recommendations & next steps (short)
Designate roles & publish exact contact details. Add a dedicated Privacy / DPO/grievance email (e.g., privacy@unprompted.in) and full registered office address on the Site. IT Rules require clear grievance contact details.
Cookie banner & consent mechanism. Implement a cookie banner with granular choices and a published cookie table showing retention periods and vendor names.
Operationalise incident response. Put in place an incident response plan aligned to CERT-In reporting requirements and the DPDP Act breach notification timelines; document who will report, how, and where. CERT-IN+1
Update SOW templates. Make sure each SOW explicitly addresses IP ownership, third-party licensed content, permitted portfolio use, confidentiality, retention schedules, and any provenance reporting commitments.
Legal review. Have an Indian law firm review and tailor both documents and implement any industry-specific clauses (finance, healthcare, fintech) if you operate in regulated verticals. (DPDP and sectoral regulation interplay matters.)
Key legal sources consulted (for your counsel)
Digital Personal Data Protection Act, 2023 (Government of India / MeitY).
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (MeitY).
CERT-In security incident reporting guidance / pages.
Secondary legal commentary and practical compliance notes.