Terms of Service
Last updated: September 7, 2026
These terms govern use of Lumbox (lumbox.co, app.lumbox.co, api.lumbox.co, mcp.lumbox.co), including the dashboard, REST API, MCP server, and related services. By creating an account or calling the API you agree to them.
The service
Lumbox provides email infrastructure for AI agents: inboxes, inbound delivery, OTP and link extraction, outbound send/reply/forward, optional custom domains, webhooks, a credential vault, and optional browser automation. Features depend on your plan.
Accounts and API keys
You are responsible for activity under your organization, including API keys, OAuth grants, and MCP connections. Keep keys secret. Rotate a key if it leaks. You must be able to enter into this agreement (for a company, an authorized person).
Acceptable use
You may not use Lumbox to:
- Send spam, phishing, or unsolicited bulk email
- Impersonate people or services, or harvest credentials from third parties without authorization
- Violate CAN-SPAM, CASL, GDPR, or other applicable law
- Attack, probe, or overload our systems or other people's systems
- Store payment card numbers, government IDs, or other data we are not designed to hold
We may pause sending, pause inboxes, or close an account if we detect abuse, a high bounce or complaint rate, or a legal risk. Transactional and agent verification mail is allowed. Marketing mail is allowed only to contacts who opted in.
Email content
Email you send or receive through Lumbox can contain instructions, links, and attachments from untrusted senders. You (and any agent you connect) must treat message bodies as untrusted input. Parsed fields such as OTP codes, verification links, and categories are provided to help automation. They are not a guarantee that a message is safe.
Your data
How we collect, store, and delete data is described in the Privacy Policy. You retain rights in content you submit. You grant us a limited license to host, parse, deliver, and display that content as needed to run the service.
Plans, payment, and limits
Free and paid plans, quotas, and prices are listed at lumbox.co/pricing. Paid plans are billed by Dodo Payments. Unused quota does not roll over unless we say otherwise. Hitting a limit returns an API error. We do not silently drop inbound mail already in transit.
Third-party services
Outbound mail may go through AWS SES or an SMTP provider you configure. Browser tools may run in isolated sessions. Payments go through Dodo. Their terms also apply to those pieces. We are not responsible for third-party sites your agent signs up for or emails it sends.
Availability
We aim for high availability but do not guarantee uninterrupted service. Features may change. We may discontinue a plan or feature with notice by email or the dashboard.
Termination
You can delete inboxes and your account from the dashboard. We can suspend or terminate access for abuse, non-payment, or legal reasons. When an account is deleted, data is removed as described in the Privacy Policy (within 30 days).
Disclaimer and liability
The service is provided as is. We disclaim warranties of merchantability, fitness for a particular purpose, and non-infringement to the extent the law allows. Our total liability for a claim relating to Lumbox is limited to the amount you paid us in the 12 months before the claim, or $100 if you are on the free plan.
Changes
We may update these terms. If the change is material we will notify you by email or a dashboard notice. Continued use after the effective date means you accept the update.
Contact
Lumbox
Email: support@lumbox.co
Privacy: privacy@lumbox.co