Terms of Service

1. Provider and contract documents

Boris is provided by the independent professional providing Boris, Italy. Contact: info@borisbe.com.

The contract consists of these terms, the privacy policy, the settings and order information expressly accepted by the customer, and any written data-processing or service agreement. If they conflict, an individually agreed document prevails, followed by an order, these terms and the privacy policy. Mandatory law always prevails. Missing provider details must be completed before paid subscriptions are offered.

2. Who may use Boris and authority

The service is intended primarily for businesses, professionals, associations and other organisations managing bookable resources. A person creating a workspace confirms that they are at least 18 and authorised to bind that organisation.

If a natural person uses Boris outside a trade or profession and qualifies as a consumer under applicable law, the consumer provisions below apply and no business-only clause removes their mandatory protection.

3. Contract formation and records

The contract begins when the user accepts these terms and the workspace is created, or when a later written order is accepted. The current text can be stored or printed from this page. The accepted version and time are recorded with the account.

Descriptions, demos and fictional data explain the product but are not guarantees of results. Only features expressly available in the workspace or agreed in writing form part of the service.

4. Service and beta stage

Boris provides tools for bookings, resources, customers, memberships, invoicing and related operations. Available modules depend on the workspace type, configuration, country and connected providers.

During beta, functions may change after reasonable testing and notice. Material changes will not remove mandatory conformity rights. Boris is not legal, tax or accounting advice, and the workspace remains responsible for reviewing its operational and regulatory settings.

5. Accounts and security

Users must provide accurate information, keep credentials and recovery methods confidential, use individual accounts, maintain appropriate roles, and promptly report suspected compromise. Workspace owners are responsible for authorised users and for removing access when it is no longer required.

Boris may require verification, multi-factor authentication or a password reset where reasonably necessary to protect accounts, data or the service.

6. Customer responsibilities and lawful use

Customers must have a lawful basis for data they enter, provide required notices, configure retention and permissions, verify prices, taxes, availability and authority reporting, and keep legally required independent records.

It is prohibited to access another workspace, bypass security or limits, interfere with the service, upload unlawful or malicious material, infringe rights, send unsolicited communications, conduct unlawful surveillance or use Boris for discrimination, fraud or activities that create an unreasonable risk to people or systems.

7. Bookings, payments and legal filings

Boris assists with operational execution but does not become the contracting party between a workspace and its customer or guest. The workspace remains responsible for its booking terms, cancellations, prices, invoices, taxes, identity checks and legal filings.

A successful software status does not replace an official receipt where the authority or provider issues one. Customers must review failures and reconciliation records and maintain a manual contingency process for time-critical obligations.

8. Third-party services and integrations

Integrations require the customer’s own account, permissions and any provider fees. Third-party terms and availability apply directly between the customer and that provider.

Boris is responsible for its integration code but not for an external provider’s outage, rejection, policy, data or unilateral API change. Integration status and documented limitations must be checked before production use; customers should test with non-production data where possible.

9. Privacy roles and processing instructions

For account, security and billing data, the provider acts as controller as explained in the privacy policy. For personal data a workspace uploads about customers, members, employees or guests, the workspace is controller and the provider is processor.

The controller instructs the processor to host, organise, retrieve, transmit, back up and delete that data only to provide, secure and support Boris, including configured integrations. These terms and documented settings are the controller’s instructions; additional instructions must be lawful and may require an agreed fee where they create material work.

10. Article 28 GDPR processing terms

Processing lasts for the contract and the documented retrieval period and covers account, contact, booking, payment, invoice, membership, access, guest and identity data concerning users, customers, guests, members and staff.

The processor will process only on documented instructions unless Union or Member State law requires otherwise; ensure authorised persons are bound by confidentiality; apply appropriate technical and organisational security; assist with data-subject requests, security, breach notifications, impact assessments and regulator consultations; provide information reasonably necessary to demonstrate compliance; allow proportionate audits subject to confidentiality, security and reasonable notice; and notify the controller if an instruction appears to infringe data-protection law.

The controller gives general authorisation for subprocessors needed to operate the service. The processor remains responsible for equivalent contractual safeguards, provides an up-to-date list on request, and gives reasonable advance notice of material additions so the controller can object on substantiated data-protection grounds. Restricted transfers require a lawful transfer mechanism. On termination, data is returned or deleted as described below unless law requires retention.

11. Security and incidents

Boris uses measures appropriate to the risk, including encrypted transport, password hashing, access isolation, role controls, audit records, backups and procedures for vulnerabilities and incidents. No online service can guarantee absolute security.

The provider will notify an affected controller without undue delay after becoming aware of a personal-data breach relating to workspace data and will provide available information needed for the controller’s obligations. Customers must maintain secure devices, integrations and authorised-user practices.

12. Intellectual property and feedback

The provider and its licensors retain rights in Boris, its code, design, documentation and trademarks. During the contract the customer receives a limited, non-exclusive, non-transferable right to use the service for its own operations.

The customer retains rights in its data and grants the provider only the rights needed to perform the contract. Feedback may be used to improve Boris without identifying the customer or transferring ownership of customer materials. Reverse engineering is prohibited only to the extent permitted by law; statutory interoperability rights remain unaffected.

13. Beta, future fees and payment

The current beta does not automatically become a paid subscription. Before any charge, the customer will receive the price, billing period, taxes, renewal and cancellation conditions and must expressly accept a paid order. Silence or continued storage alone is not acceptance.

If paid plans are introduced, invoices and payment deadlines shown in the accepted order apply. Price changes apply only prospectively after clear advance notice and a right to cancel before they take effect. No hidden switching or cancellation charge applies.

14. Duration, cancellation and suspension

The contract continues until cancelled. A customer may cancel through the available account or contact channel. Cancellation stops future renewal but does not erase amounts already lawfully due.

Access may be restricted or suspended where reasonably necessary for security, unlawful use, serious breach, non-payment under a future paid order or protection of other customers. Except in urgent cases, the provider will explain the reason and allow a reasonable opportunity to remedy it. Termination for breach is reserved for material or repeated breach.

15. Export, switching and deletion

On request, the customer may export its exportable workspace data and digital assets in a commonly used, machine-readable format and may switch to another service or its own infrastructure. The provider will supply reasonable information and assistance, maintain security and continuity within its control and will not create contractual, commercial or technical obstacles.

The maximum notice period for switching is two months and the standard transition period is no more than 30 calendar days. If 30 days is technically unfeasible, the provider will explain this within 14 working days and state a justified period not exceeding seven months. Data remains retrievable for at least 30 calendar days after transition or termination, unless a longer period is agreed or law requires otherwise, and is then securely deleted. Customers may instead request earlier deletion. No switching charge is imposed.

16. Consumers: withdrawal and digital-service rights

A consumer concluding a distance contract normally has 14 days to withdraw without giving a reason, by sending an unequivocal statement to info@borisbe.com. Model wording: “I hereby withdraw from my contract for Boris, concluded on [date], name [name], address [address], date [date].”

Where a consumer expressly requests service during that period, any amount due after withdrawal is limited to the proportion already supplied where the law permits. Loss of a withdrawal right for fully performed digital supply requires the consumer’s prior express consent and acknowledgement where applicable; creating a free beta account alone is not treated as a waiver.

Consumers are entitled to supply and conformity, necessary updates, correction within a reasonable time and without significant inconvenience, proportionate price reduction or termination where the legal conditions are met, and reimbursement without undue delay and within 14 days when required. A detrimental non-minor modification may be rejected or may permit free termination within the statutory period.

17. Availability, conformity and warranties

The provider will exercise reasonable professional care and supply the service substantially as described, including security updates required to keep it in conformity. Maintenance, emergencies, internet failures and external providers may affect availability.

For business customers, no uninterrupted service, specific commercial result or fitness for an undisclosed purpose is promised. This does not exclude an express written commitment, fraud, gross negligence, or any statutory guarantee or remedy that cannot be limited.

18. Liability

Nothing limits liability for death or personal injury caused by negligence, fraud, wilful misconduct, gross negligence, breach of confidentiality or data-protection duties where limitation is prohibited, or mandatory consumer rights.

For business customers only and to the extent permitted by law, neither party is liable for indirect or unforeseeable loss, and the provider’s aggregate liability for ordinary breach is limited to the greater of the fees paid for the affected service in the preceding 12 months or EUR 100. This limit does not apply where it would make the essential contractual obligation meaningless. Consumers retain full mandatory remedies and compensation rights.

19. Changes to these terms

Changes will show a new version and effective date. Material changes affecting active customers will be communicated on a durable medium with reasonable advance notice. They apply prospectively; where consent is legally required, they apply only after consent.

A consumer may terminate without charge when a modification negatively affects access or use beyond a minor degree, unless the unchanged service can be retained at no additional cost. Continued use is not treated as acceptance where applicable law requires an express act.

20. Law, disputes and final provisions

Italian law governs the contract. This choice does not deprive consumers of mandatory protection under the law of their habitual residence. Business disputes are submitted to the courts at the provider’s Italian establishment unless an individual agreement provides otherwise. Consumers may use the courts available under mandatory EU rules, including the courts of their domicile where applicable.

Before proceedings, contact info@borisbe.com so the parties can attempt resolution. Consumers may also use a competent certified alternative dispute-resolution body; no obsolete EU ODR-platform link is incorporated. The provider does not commit to a particular ADR body unless required or agreed.

If a term is invalid, the remainder stays effective and the invalid term is replaced only to the minimum lawful extent. Failure to enforce once is not a waiver. Neither party is liable for delay caused by events outside reasonable control, but payment obligations already due and mandatory rights remain. Localised versions have equal purpose; for consumers, the version presented and accepted in their language governs where required.