Legal

Terms of Service

Effective August 10, 2026

These Terms of Service are an agreement between you and Jason R Media LLC (“we,” “us”) for Course in a Box and AuthBox, including courseinabox.app, auth.courseinabox.app, worker.courseinabox.app, the customer dashboard, downloadable code and templates, and hosted services (together, the “Service”). By starting a trial, purchasing, subscribing, or using the Service, you agree to these terms and our Privacy Policy.

You must be at least 18 and able to enter a binding contract. If you use the Service for a company or client, you represent that you have authority to bind that organization. If you do not agree, do not use the Service.

1. What Course in a Box includes

• Course in a Box license: a $399 one-time purchase for the Framer template, Course in a Box code components, Manual Worker code, AuthBox Portable package, setup guides and animations, and access to the owner dashboard.
• Autopilot: $35 per month per site for subscription AuthBox plus our hosted Worker, including hosted video, downloads, PDFs, forms, uploads, landing-page signup capture, Discord integration, dashboard management, technical support, and the included usage allowances in Section 3.
• Subscription AuthBox: $15 per month per site for hosted purchase verification, email one-time-code sign-in, member management, page gating, and Discord Linked Roles, with technical support. You run the Manual Worker on your Cloudflare account.
• Manual Worker plus AuthBox Portable: $0 per month to us after the Course in a Box license is paid. You run both systems on your own Cloudflare account and are responsible for their infrastructure, maintenance, security, and provider fees.

The $0, $15, and $35 configurations describe which parts we host. They do not include charges from Framer, Cloudflare, Stream, R2, Resend, Stripe, Lemon Squeezy, Discord, domain registrars, or other services you use.

Concierge builds. The public concierge form is only a request for a quote. A custom build is a separate professional service, starting at the price shown on the site, and is not accepted until we agree in writing on scope, timing, price, and payment terms. A signed proposal, statement of work, or invoice terms control if they conflict with this section.

2. Free trial, go-live charge, and first free month

You may build and test Course in a Box for an unlimited period before purchase. Starting the trial saves a valid card with Stripe but does not charge it. Test-mode access is for building and evaluation; it is not a license to run a live paid course.

When you choose go live, we charge the saved card $399 for the perpetual license and start Autopilot at $35 per month with a 30-day free trial. The first monthly charge is scheduled for the end of that free month. If the $399 payment fails, live mode and the subscription do not unlock. If the $399 succeeds but Stripe cannot attach the subscription, we preserve the paid license and require you to retry the hosted-plan setup before hosted live capabilities unlock.

During the free month you can keep Autopilot, schedule a change to the $15 AuthBox-only tier, or schedule hosted service to end at $0. The chosen change takes effect at the trial boundary, and the current hosted configuration remains available until then. Manual Worker and AuthBox Portable downloads unlock once the $399 license is paid.

Prices are those shown when you confirm the purchase or change. We may change prices for future purchases. A recurring price change for an existing subscriber takes effect only at a later renewal after reasonable advance notice.

3. Payments, renewals, and refunds

Stripe processes all payments to us and stores the full card details. We retain only billing records and the card brand and last four digits needed for the dashboard. Recurring plans renew monthly until canceled.

After the first free month, reductions follow the product's hosted-service ladder. Autopilot changes from $35 to $15 at the next renewal. Once the $15 tier is current, it can be canceled to $0 at a later renewal. During the initial free month only, Autopilot may be scheduled directly to $0 at the trial boundary. Downgrades and cancellations do not create prorated credits or mid-cycle refunds.

An upgrade from $15 to $35 normally takes effect immediately and Stripe may apply its normal proration. Starting a new $15 or $35 subscription from $0 takes effect when Stripe successfully charges it. The dashboard shows the price and effect before confirmation.

Autopilot usage billing. The $35 monthly base price includes the allowances below. Usage above an allowance does not stop uploads, storage, or playback. Overage is metered and added to the applicable Stripe subscription invoice in arrears.

Resource	Included with Autopilot	Overage price
Cloudflare Stream video storage	600 stored video minutes	$1.00 per additional 100 stored video minute-months, prorated by time stored
Cloudflare Stream delivery	12,000 delivered video minutes each calendar month	$2.00 per additional 1,000 delivered minutes
R2 object storage	128 GB stored	$0.05 per additional GB-month, prorated by time stored

For storage, a “month” is calculated from time-weighted usage rather than charging the full monthly amount for an item stored only briefly, and one GB means 1,073,741,824 bytes. Delivery resets on the first day of each calendar month. The free first Autopilot month does not accrue overage charges. The dashboard provides current usage, an estimated overage, and recent Stripe invoices; finalized Stripe invoice amounts control if an estimate differs because of timing, rounding, credits, taxes, or corrections.

We maintain provider records, periodic usage samples, and idempotent Stripe meter-event records as billing evidence. You must raise a good-faith usage dispute within 30 days after the invoice date so the underlying records are still reasonably available. We may correct a demonstrated metering error through a credit or adjustment. We may change future allowances or overage prices only with reasonable advance notice to affected subscribers; a change does not retroactively alter already-metered usage.

If something is not working or the product is not what you expected, contact jasonr.audio@gmail.com. Refund requests are handled case by case. Nothing here limits non-waivable refund, cancellation, or consumer rights that apply to you.

4. License to the downloadable product

After the $399 charge is successfully paid, you receive a perpetual, non-exclusive license to use, modify, and deploy the Course in a Box template, components, Manual Worker, and AuthBox Portable to build and operate your own course or membership sites, including commercial sites and client sites you build and hand off.

You may let employees and contractors use the materials only on your behalf. You may not sell, redistribute, publish, sublicense, or provide the source materials, setup media, or a lightly modified version of them as a template, starter kit, boilerplate, course-building product, hosted authentication product, or competing offering. One purchase covers one person or company, not unrelated businesses sharing a copy.

The perpetual license applies to the version delivered to you. It does not promise perpetual hosting, support, future features, third-party compatibility, or automatic updates to code you have already deployed. Hosted features remain subject to an active subscription.

5. Subscription operation, suspension, and retention

• One site. One recurring subscription covers one course site and its test/live AuthBox environments.
• Paid-through access. A scheduled downgrade or cancellation leaves the current plan running through the shown period end. You may undo the scheduled change before it takes effect if the dashboard offers that option.
• Failed payments. We may allow a short grace period based on Stripe's retry schedule. If payment remains unresolved, hosted AuthBox and Autopilot pause. Members may lose sign-in and content access.
• AuthBox retention. A subscription lapse does not automatically erase project, member, entitlement, or configuration records. We may retain them so service can resume, subject to deletion requests, account closure, security needs, and legal obligations.
• Autopilot retention. When Autopilot becomes inactive, hosted videos, downloads, PDFs, uploads, and form submissions are retained for 90 days and may then be permanently deleted. You are responsible for exporting content before that deadline.
• Refunds and disputes. A full refund or payment dispute may suspend the entitlement funded by that charge. Reversing the full $399 payment removes live-license access. Reversing a recurring charge stops hosted service but does not cancel a separately paid $399 license. A resolved dispute may restore the applicable entitlement, but we do not silently restart future recurring billing.

Autopilot availability. Included usage allowances are not service limits. We do not pause ordinary uploads or playback merely because an allowance is exceeded. We may still prevent or suspend activity when payment remains unresolved after dunning, when a connected provider is unavailable, to address security or abuse, to comply with law, or to protect the Service and other customers.

6. Your responsibilities as a course owner

Your course, business, and customer relationship remain yours. You are responsible for:

• Content and commerce. You must have the rights to your content and branding. You set course pricing and terms and handle member support, refunds, taxes, claims, and customer relationships.
• Truthful setup. Configure the correct site origin, public and gated paths, payment mode, access-granting products, webhooks, Discord application, email addresses, and provider credentials. Test grants and revocations before launch.
• Privacy and consumer law. Publish your own terms and privacy notice, provide notices at collection, obtain any required consent, honor member rights, and establish a lawful basis for each use of member data.
• Accounts and credentials. Protect your dashboard, email inbox, Framer, Cloudflare, payment-provider, Resend, and Discord accounts. Anyone who controls the relevant email inbox can receive a one-time sign-in code.
• Backups and exports. Keep independent copies of course content and any member or submission data you need, especially before changing plans or deleting a project.
• Member suitability. Do not place health records, full payment-card data, government identifiers, highly sensitive data, or other specially regulated information in the hosted Service unless we have expressly agreed in writing. Do not knowingly collect data from children through the hosted Service unless you have completed all legally required notice, consent, and protection steps.

7. Data Processing Terms

This section applies when we process personal data on your behalf through subscription AuthBox or Autopilot. It is intended to form the parties' processor agreement, including the core requirements of Article 28 of the EU or UK GDPR where applicable.

• Subject, duration, and purpose. We process data for the duration of your hosted use and applicable retention period to provide authentication, entitlement verification, access control, Discord role synchronization, content and video delivery, submissions, uploads, email tools, support, security, and dashboard administration.
• People and data. Data subjects may include you, your staff, prospects, customers, members, and Discord users. Data may include contact and identity data, purchase and entitlement records, authentication and OAuth data, course content, videos, uploads, form responses, communications, usage records, and the technical identifiers described in the Privacy Policy.
• Your instructions. These terms, your dashboard and code configuration, support requests, and documented directions are your instructions. We process covered data only on those instructions unless law requires otherwise. We will tell you if we believe an instruction violates applicable data-protection law, unless prohibited from doing so.
• Confidentiality and security. People authorized to handle covered data are subject to confidentiality duties. We maintain measures appropriate to the risk, including access controls, encryption in transit, one-way hashes for one-time codes, encrypted Discord secrets, signed sessions, tenant scoping, webhook verification, rate limits, and fail-closed authorization.
• Subprocessors. You generally authorize the providers identified in the Privacy Policy. We remain responsible for imposing applicable data-protection obligations on subprocessors. We will provide reasonable notice of a material new subprocessor so you can object on legitimate data-protection grounds. If the parties cannot resolve the objection, you may stop the affected hosted service.
• Assistance. Taking into account the nature of processing and information available to us, we will reasonably assist with data-subject requests, security obligations, breach response, impact assessments, and regulator consultations. We will notify you without undue delay after confirming a personal-data breach affecting data we process for you.
• Return and deletion. On written request or termination of the affected hosted service, we will return or delete covered data as reasonably available. If you give no earlier instruction, the 90-day Autopilot window is the default maximum retention period for hosted content after that plan becomes inactive. Provider and backup cycles, legal retention, and information needed to establish or defend legal claims may continue to apply.
• Information and audits. We will provide information reasonably necessary to demonstrate compliance with this section. Any audit must protect other customers and our security, avoid unreasonable disruption, and use existing reports and remote review before an on-site inspection. You bear audit costs unless an audit finds a material breach by us.
• Transfers. You authorize processing in the United States and other locations used by our disclosed subprocessors. If your use requires Standard Contractual Clauses or another transfer instrument, contact us before submitting covered data so the parties can put the required terms in place.

You remain the controller or business for your course data and are responsible for instructions, notices, legal bases, consent, accuracy, and responding to members. A Manual Worker reduces the data we process but does not end this section while you continue using subscription AuthBox.

8. Concierge services and delegated access

If we accept a concierge build, you give us the access, materials, and timely decisions reasonably needed to perform the agreed scope. You represent that you may provide those materials and authorize us to work in the relevant accounts. You retain ownership of your course, accounts, domain, members, media, and content. Pre-existing Course in a Box materials remain licensed under Section 4.

You may separately grant the configured Course in a Box concierge editor access to your dashboard workspace. The grant is optional and revocable. While active, the editor can view and modify ordinary project configuration, members, course content, and media available in the workspace, including deleting or replacing items as part of requested editing. Platform billing and account-level destructive controls remain owner-only. You are responsible for reviewing work and keeping backups. Revocation blocks future delegated requests but does not undo edits already made.

9. Acceptable use and public discovery

We welcome good-faith crawling and use of our publicly available marketing and legal pages by search engines, AI search and retrieval systems, user-directed agents, and general-purpose model developers. Those systems may index, summarize, compare, cite, recommend, and learn from that public information, including for retrieval, grounding, and model improvement. They should identify Course in a Box accurately, link to the relevant public page when practical, respect our robots.txt instructions and reasonable technical limits, and keep current prices and plan distinctions intact.

This public-discovery permission does not apply to dashboards, APIs, member or customer data, access-controlled pages, setup media, credentials, downloadable or provisioned source code, or other non-public materials. It does not permit bulk republication, selling our content as a dataset, distributing our source materials, creating a substitute template or competing product from them, bypassing access controls, or interfering with the Service.

You may not use the Service to:

• offer or distribute unlawful, deceptive, fraudulent, infringing, abusive, or harmful content;
• send spam, malware, or one-time codes to people who have not interacted with the relevant course;
• use automated means to probe, overload, disrupt, access or extract non-public information, reverse engineer protected systems, or circumvent security, limits, access controls, or tenant boundaries;
• access another customer's data or credentials, or use credentials you are not authorized to use;
• resell or white-label hosted AuthBox or the Autopilot infrastructure as your own platform; or
• use the Service in a way that violates provider rules or applicable law.

We may suspend or terminate affected access for nonpayment, security risk, unlawful use, or material breach. When reasonably possible, we will give notice and an opportunity to cure. We may act immediately where delay could harm users, us, providers, or the Service.

10. Self-hosting and third-party services

Framer, Cloudflare, R2, Stream, Stripe, Lemon Squeezy, Resend, Discord, domains, and other connected services are provided under their own terms, limits, fees, and privacy practices. We do not control their approval decisions, outages, API changes, account suspensions, or data handling.

If you use the Manual Worker or AuthBox Portable, you are responsible for deployment, bindings, secrets, data location, email deliverability, payment-provider setup, Discord setup, security, backups, monitoring, updates, migrations, and all third-party charges. Visiting a Worker URL or completing the setup steps can verify only the checks shown; it does not guarantee every provider is configured correctly. Code you deploy to your own account does not update automatically when Course in a Box changes.

11. Ownership

We own the Service, Course in a Box system, template, components, code, documentation, setup media, and AuthBox software, subject to the license in Section 4. You own your content, branding, member relationships, and course data. You may request an export of hosted member and entitlement data. Export formats and the ability to migrate provider-specific or encrypted data may be limited by technical and security constraints.

12. Service disclaimer

We work to keep hosted services reliable, but the Service depends on Cloudflare, Stripe, Lemon Squeezy, Resend, Discord, Framer, email delivery, browsers, and customer configuration. We do not guarantee uninterrupted operation, delivery of every email, acceptance by a payment provider, continuous Discord role state, or compatibility with every third-party change.

To the maximum extent permitted by law, the Service and downloadable materials are provided “as is” and “as available,” without express or implied warranties, including merchantability, fitness for a particular purpose, title, and non-infringement. Nothing in these terms excludes a warranty or right that cannot legally be excluded.

13. Limitation of liability

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, business opportunity, or data, arising from the Service. Our total aggregate liability arising from the Service is limited to the amounts you paid us during the 12 months before the event giving rise to the claim. If applicable law does not allow a limitation, liability is limited only to the extent the law permits.

14. Indemnification

To the extent permitted by law, you will defend, indemnify, and hold Jason R Media LLC harmless from third-party claims, damages, and reasonable costs arising from your course content, your products or business practices, your member-data handling, your connected accounts, or your violation of these terms or law. This does not apply to the extent a claim was caused by our own breach, gross negligence, or willful misconduct.

15. Changes and termination

We may improve, replace, or discontinue features. We will give reasonable notice before materially reducing an active paid hosted plan unless an urgent security, legal, or provider issue requires faster action. We may update these terms by changing the effective date and giving email, dashboard, or page notice of material changes. If a change materially affects an active subscription and you do not agree, your remedy is to cancel before the change takes effect, subject to rights that applicable law gives you.

You may stop using the Service and cancel recurring billing as described above. Provisions that by their nature should survive termination do survive, including payment obligations, the restrictions on redistribution, ownership, confidentiality, disclaimers, liability limits, indemnity, and general terms. A properly paid perpetual license survives cancellation of hosted service, but may terminate for a material, uncured breach of the license restrictions.

16. General

These terms are governed by the laws of the Commonwealth of Kentucky, without regard to conflict-of-laws rules. Disputes will be brought in the state or federal courts located in Kentucky, except where non-waivable consumer law allows another forum. If a provision is unenforceable, it will be limited to the minimum extent necessary and the rest will remain effective. You may not assign these terms without our consent; we may assign them in connection with a merger, sale, reorganization, or transfer of the Service. Our failure to enforce a provision is not a waiver.

These terms, the Privacy Policy, and any accepted order or statement of work are the entire agreement for the Service and replace prior discussions on the same subject. If an accepted order conflicts with these terms, the order controls only for that order.

17. Contact

Jason R Media LLC
Email: jasonr.audio@gmail.com