Frequently asked questions
What is MCP and how does it work?
inboxmcp is a hosted connector that links your AI assistant to your mailbox without copying your mail into a new system. You paste one address into your AI client, sign in once, and your AI can read and manage the mailbox in plain language.
Which email providers are supported?
Every provider that speaks IMAP and SMTP — e.g. mailbox.org, STRATO, IONOS, Posteo, GMX, web.de, Proton Mail (via Bridge), Fastmail, your own mail server. Microsoft 365 (Outlook / Exchange Online) is supported natively via OAuth, including shared mailboxes.
Where is my data stored?
Your mail stays on your own mailbox. We never copy it. We store only what is strictly needed to run the service: your encrypted credentials, your audit log, and the OAuth tokens issued to your AI client. All of it lives in our own infrastructure in Frankfurt.
How safe are my IMAP passwords?
Your credentials are encrypted before they ever touch our disk. Only the component that actually talks to your mailbox can decrypt them, and only briefly in memory for the duration of that one request. Nothing sits in cleartext. Details under Security & privacy.
What's the difference between Free, Premium and Business?
Free covers read-only access on a single mailbox. Premium (€2.99 / mailbox / month or €29.99 / mailbox / year) unlocks the write tools available today (drafting, editing drafts, creating folders, moving messages) with no cap on mailbox count. Business (€4.99 / mailbox / month or €49.99 / mailbox / year) adds a signed DPA, audit-log access in the portal, and a tax-compliant invoice for German-registered businesses (cross-border reverse-charge is not yet supported). More under Billing & invoices.
Can I cancel any time?
Yes. No minimum term. Cancellation runs through the Stripe Customer Portal link in the portal ("Manage subscription"). When an account is deleted, credentials, audit logs and tokens are wiped immediately.
Do you offer a data processing agreement (DPA)?
Yes. On the Business plan we provide a signed DPA / Auftragsverarbeitungs-Vertrag on request. You need it if you process third-party email under GDPR. Request via support@inboxmcp.io.
What about the AI client I connect to inboxmcp?
inboxmcp itself doesn't keep your mail. But the AI client you connect (Claude, ChatGPT, etc.) reads message content to do its job — what happens to that data afterwards is governed by that vendor's terms, not ours. If your messages contain personal data of third parties, you remain the data controller under GDPR for whatever the AI vendor does with it. We strongly recommend talking to a data-protection specialist about your specific setup before connecting business mailboxes — what's permissible depends on the AI vendor, the data categories involved, and your own purpose of processing.
Can I get a refund after I subscribe?
No. inboxmcp is a digital service whose execution we begin immediately after payment, so the purchase is binding and a refund is not possible once execution has started. You acknowledge this with a checkbox at checkout. You can cancel at any time to stop further billing, but the current billing period stays paid.
What about the 14-day right of withdrawal?
Under §356 (5) of the German Civil Code (BGB), digital services come with a 14-day right of withdrawal — but only as long as performance has not yet been fully provided. At checkout you expressly request that we begin providing the service immediately, and you acknowledge that you thereby lose your right of withdrawal once the service has been fully delivered. Both consents are separate checkboxes you tick before paying.