Terms of Service

By creating an account, generating an API key, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.

You must be at least 16 years old to use the Service. If you are using the Service on behalf of a company, partnership, or other organisation, you confirm that you have authority to bind that organisation to these Terms, and “you” refers to that organisation as well as to you personally.

Signing up requires verifying an email address you control by entering a one-time code we send to it. You agree to give accurate account information and to keep it current.

InboxAgents is API-first email infrastructure. It lets you provision email inboxes programmatically and read the mail that arrives in them through a REST API, official SDKs, a CLI, an MCP server, webhooks, and WebSocket streams.

The current version of the Service is receive-only. You cannot send outbound email through InboxAgents. The only message we send on your behalf is the one-time verification code used at signup. Any claim, feature, or workflow that depends on sending mail from an InboxAgents inbox is outside the scope of the Service as it exists today, and we make no commitment about whether or when outbound sending will be offered.

The Service is in public beta. Features, interfaces, limits, and behaviour may change, and parts of the Service may be incomplete or unstable. Section 9 sets out what this means for availability.

API keys authenticate every programmatic request to the Service. You are responsible for keeping your keys, account credentials, and any tokens issued to you confidential, and for all activity carried out with them — whether or not you authorised that activity. Treat a key as you would a password: do not commit it to source control, embed it in client-side code, or share it outside your organisation.

Keys can be issued with granular permission scopes. We recommend giving each agent or workload the narrowest scope it needs. You can revoke any key at any time from the dashboard or API; revocation takes effect for subsequent requests.

Tell us promptly at legal-inbox-agents@supry.com if you believe a key or account has been compromised. We may revoke credentials ourselves where we reasonably believe they have been exposed or are being misused.

Because the Service receives mail on your behalf, how you use it matters. You agree not to use the Service, and not to let anyone acting through your account use it, to:

• break any applicable law, or receive, store, or process material that is unlawful to possess or handle in any jurisdiction that applies to you or to us;
• evade another service’s terms, rate limits, identity checks, anti-fraud measures, or account-per-person rules — including creating accounts elsewhere in a way those services prohibit;
• intercept, harvest, or process mail you have no right to receive, or impersonate a person or organisation whose mail you are not entitled to;
• deliberately overload, degrade, probe, or work around limits in our ingest pipeline, APIs, or infrastructure, including by circumventing plan usage caps;
• automate or script the signup flow to create accounts or inboxes in bulk beyond ordinary use of the API as documented;
• resell, sublicense, or offer the Service as a standalone product to third parties without a written agreement with us;
• reverse-engineer, decompile, or attempt to derive the source code or underlying structure of the Service, except where that restriction is unenforceable under applicable law; or
• use the Service to distribute malware, run phishing or fraud operations, or facilitate harassment or abuse of any person.

We may investigate suspected violations and may suspend or limit access — to a key, an inbox, or an entire account — where we reasonably believe this section has been breached, or where continued use poses a legal, security, or operational risk. Where practical and lawful, we will tell you first and give you a chance to fix the problem.

“Customer Data” means the email messages, headers, attachments, and derived metadata received into your inboxes, together with the configuration you supply. As between you and us, Customer Data is yours.

Roles under data protection law. To the extent Customer Data contains personal data, you act as the controller and Supry acts as the processor. You decide which inboxes exist, who may send to them, what mail you keep, for how long, and what you do with it. We process Customer Data only to provide, secure, and support the Service, on your documented instructions — which include these Terms, your configuration choices, and your use of the API. If we believe an instruction requires us to break the law, we will tell you rather than carry it out. Separately, we act as controller for the limited account and billing data described in the Privacy Policy.

Your warranties. You warrant that you have a valid lawful basis for receiving, storing, and processing every message delivered to your inboxes, that you are entitled to receive mail at the addresses you provision, and that your use of the Service complies with the data protection, privacy, and communications laws that apply to you. If your use is subject to a regime such as the GDPR, the UK GDPR, or US state privacy law, meeting its requirements — including transparency, retention, and any required notices — is your responsibility.

Data Processing Agreement. Our Data Processing Agreement covers our processing of Customer Data, including sub-processors and international transfers. It is incorporated into these Terms and applies automatically — no signature is needed. A countersigned copy is available on request from legal-inbox-agents@supry.com. The DPA governs the processing of personal data and prevails over this section to the extent of any conflict.

Data subject requests. People who email your inboxes may have rights of access, deletion, correction, or objection in respect of their personal data. As controller, you are responsible for receiving and answering those requests. We will give you reasonable assistance, taking into account the nature of our processing and the information available to us. If a request reaches us directly, we will not answer it on your behalf; we will refer the person to you or forward the request where we can identify the relevant account.

Location. Customer Data is stored in the United States.

Anyone who sends mail to one of your inboxes is a third party who has not read or agreed to these Terms, has no relationship with us, and may not know that an automated system will read their message. We provide the pipe; we do not vouch for, filter for legality, or take responsibility for what arrives.

You are responsible for the lawfulness of receiving that mail and for whatever you and your agents do with it afterwards — including any onward disclosure, storage, model training, or automated decision-making. If you publish or share an inbox address, you are responsible for making clear to senders, where the law requires it, how their message will be handled.

Supry and its licensors own the Service and everything in it: the software, APIs, SDKs, CLI, MCP server, documentation, design, and the InboxAgents name and marks. Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service for your internal business purposes during your subscription. No other rights are granted, expressly or by implication.

You keep all rights in Customer Data. You grant us a worldwide, non-exclusive, royalty-free licence to host, store, transmit, parse, index, back up, and display Customer Data solely to provide, secure, and support the Service, and to comply with law. That licence ends when the relevant data is deleted, except for backups retained for a limited period in the ordinary course.

If you send us feedback or suggestions, we may use them without restriction or obligation to you. We will not identify you as the source without your permission.

The Service is billed on usage — principally the number of inboxes you keep provisioned and the volume of inbound mail you receive — at the rates published for your plan. Payments are processed by Stripe; by supplying payment details you accept Stripe’s terms in addition to ours. We do not store your full card details.

Each plan carries usage caps. When you reach a cap we may throttle or stop accepting further usage on that account until the next billing period or until you move to a plan with a higher cap. You are responsible for monitoring your usage; the dashboard and API expose it.

Fees are stated exclusive of taxes. You are responsible for any sales, use, VAT, GST, or similar taxes arising from your use of the Service, other than taxes on our income. If you are required to withhold tax, the amount payable to us is grossed up so that we receive the amount we would have received without the withholding.

We may change pricing. We will give you at least 30 days’ notice by email or in the dashboard before a change takes effect for your account, and the change applies from the start of your next billing period. Continuing to use the Service after that date means you accept the new pricing.

If an invoice goes unpaid, we may suspend the Service after notifying you and giving you a reasonable chance to settle. Prolonged non-payment may lead to termination under Section 13. Except where the law requires otherwise, fees already paid are non-refundable.

We work to keep the Service running, but we do not offer a service level agreement or an uptime commitment during the public beta. We make no promise about availability, latency, delivery of any particular inbound message, or the timing of webhook and WebSocket events.

We may modify, add, or discontinue features, endpoints, limits, or plans while the Service is in beta. For changes that would materially reduce core functionality you rely on, we will try to give reasonable advance notice, but during beta we cannot guarantee it. Maintenance, deprecations, and provider-side incidents may interrupt the Service without notice.

We do not commit to any particular support channel or response time. Questions sent to our published contact addresses are handled as resources allow.

The Service is provided “as is” and “as available”. To the fullest extent permitted by law, we disclaim all warranties, conditions, and representations of any kind, whether express, implied, or statutory — including implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, and any warranty arising from a course of dealing or trade usage.

We do not warrant that the Service will be uninterrupted or error-free, that every message sent to your inboxes will be received or preserved, that defects will be corrected, or that the Service is free of harmful components. We are not responsible for failures of upstream networks, mail senders, or third-party providers.

Some jurisdictions do not allow the exclusion of certain warranties. Where that is the case, the exclusions above apply only to the extent permitted, and you may have rights that these Terms cannot limit.

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost business, loss of goodwill, or loss or corruption of data, arising out of or relating to these Terms or the Service — even if that party was advised such damages were possible.

To the fullest extent permitted by law, our total aggregate liability arising out of or relating to these Terms or the Service will not exceed the total fees you actually paid us for the Service in the twelve months immediately before the event giving rise to the claim. If you have paid us nothing, our total aggregate liability is limited to one hundred US dollars (USD 100).

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited — including liability for fraud or fraudulent misrepresentation, or for death or personal injury caused by negligence. Some jurisdictions, particularly under consumer protection law, do not allow certain limitations; where those rules apply to you, the limits above apply only so far as that law permits.

These limits reflect an agreed allocation of risk and apply regardless of the legal theory advanced and even if a limited remedy fails of its essential purpose.

You will defend, indemnify, and hold harmless Supry, its affiliates, and their officers, directors, employees, and agents from and against any third-party claim, demand, proceeding, or investigation, and any resulting losses, damages, liabilities, fines, and reasonable legal fees, arising out of or relating to:

• your use of the Service in breach of these Terms or the law;
• your breach of Section 4 (Acceptable use) or Section 5 (Customer data and data protection roles);
• the mail received into your inboxes and anything you or your agents do with it, including claims by senders or by people whose personal data that mail contains; or
• a claim that Customer Data infringes or misappropriates a third party’s rights.

We will notify you of any claim covered by this section without undue delay, give you control of the defence and settlement (except that you may not settle in a way that imposes a non-monetary obligation or admission on us without our consent), and provide reasonable cooperation at your expense.

These Terms apply from the moment you first use the Service and continue until terminated. You may terminate at any time by closing your account and stopping all use. We may terminate for convenience on 30 days’ notice, and either party may terminate immediately if the other materially breaches these Terms and fails to cure the breach within 30 days of written notice.

We may suspend your access, or specific inboxes or keys, immediately and without prior notice where we reasonably believe this is necessary to address a violation of Section 4, a security incident, unlawful activity, a legal obligation, or a risk of harm to the Service or other customers.

On termination, Customer Data may be deleted. Deletion and return of personal data contained in mail received into your inboxes are governed by section 10 of the Data Processing Agreement, which prevails over this section to the extent of any conflict. Even so, we recommend you export anything you need before you terminate, using the API. Accrued payment obligations survive termination, as do Sections 5, 7, 10, 11, 12, 15, and 16.

We may update these Terms as the Service develops or the law changes. If a change is material, we will give you reasonable notice — normally at least 30 days by email to your account address or by a notice in the dashboard — before it takes effect, and we will update the effective date at the top of this page. Non-material changes, such as corrections and clarifications, take effect when posted.

Continuing to use the Service after a change takes effect means you accept the updated Terms. If you do not accept them, stop using the Service and close your account before the effective date.

These Terms and any dispute arising out of or relating to them or the Service are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

The state and federal courts located in Delaware have exclusive jurisdiction, and you and we consent to their personal jurisdiction and waive any objection based on venue or inconvenient forum. Either party may still seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.

Before filing a claim, please contact us at legal-inbox-agents@supry.com so we can try to resolve the matter informally. If mandatory law in your country of residence gives you the right to bring proceedings elsewhere, these Terms do not remove that right.

Entire agreement. These Terms, together with the Privacy Policy, the Data Processing Agreement, and any order form signed by both parties, are the whole agreement between us on this subject and replace any earlier discussions or understandings.

Severability. If any provision is held unenforceable, it is limited or removed to the minimum extent necessary and the rest of the Terms remain in force.

Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign them to an affiliate or in connection with a merger, acquisition, or sale of substantially all of our assets.

No waiver. Not enforcing a provision on one occasion is not a waiver of the right to enforce it later.

Force majeure. Neither party is liable for a failure or delay caused by events beyond its reasonable control, including natural disasters, war, civil unrest, labour disputes, epidemics, government action, and failures of internet, hosting, or upstream mail infrastructure. Payment obligations are not excused.

Relationship. Nothing here creates a partnership, joint venture, agency, or employment relationship between us. There are no third-party beneficiaries.

Notices. We may give notice by email to your account address or through the dashboard; such notice is effective when sent or posted. Send legal notices to Supry Inc., 2035 Sunset Lake Road, Suite B-2, Newark, DE 19702, USA, with a copy to legal-inbox-agents@supry.com.