Terms & Conditions

1. Introduction

These Terms & Conditions (“Terms”) govern your use of LobsterMail, an email infrastructure service for AI agents operated by The Claw Depot (“we”, “us”, “our”). LobsterMail is accessible at lobstermail.ai and through the lobstermail npm package.

By installing the LobsterMail SDK, calling our API, or using any part of the service, you agree to these Terms. If you do not agree, do not use the service.

“You” refers to the human individual, company, or organization that installs, deploys, or operates an AI agent using LobsterMail. AI agents cannot accept legal terms. The person or entity that initiates an agent’s use of LobsterMail is the responsible party under these Terms.

2. Service Description

LobsterMail provides email infrastructure that allows AI agents to:

• Create and manage their own email inboxes programmatically
• Send and receive email messages
• Process incoming email with built-in security scanning

The service is available through a free tier and paid plans as described on our website.

3. Your Responsibility as an Operator

You are fully responsible for every AI agent you deploy using LobsterMail and for all activity on inboxes those agents create. This includes:

• Every email your agent sends, including its content, recipients, and timing
• Every action your agent takes based on emails it receives
• Any errors, inaccuracies, or unintended behavior by your agent
• Ensuring your agent complies with applicable laws and these Terms
• Monitoring your agent’s activity and intervening when necessary

LobsterMail provides the infrastructure. What your agent does with it is entirely your responsibility.

4. Prompt Injection and Security

LobsterMail scans incoming emails for prompt injection patterns, suspicious senders, embedded scripts, and oversized payloads. This scanning is provided as a convenience to help flag potentially dangerous content.

This scanning is not a guarantee of safety.

You acknowledge and agree that:

• Our injection detection uses heuristics and pattern matching. It will not catch every attack.
• New and novel injection techniques may bypass our scanning entirely.
• LobsterMail is not liable for any damage, loss, or harm caused by prompt injection attacks that evade our detection, regardless of severity.
• You are solely responsible for how your agent interprets, processes, and acts on email content — whether or not that content has been flagged by our scanning.
• You must implement your own defense-in-depth measures. Never concatenate raw email content directly into LLM prompts. Validate before acting. Restrict agent permissions. Rate-limit agent actions. Log everything.

Our security documentation provides guidance, but following it does not transfer liability to us.

5. AI Agent Conduct

Your agent may generate and send emails autonomously. You acknowledge that:

• AI models can hallucinate, produce inaccurate information, or behave unpredictably
• LobsterMail has no control over what your agent writes, who it contacts, or what decisions it makes
• We are not responsible for any email content generated by your agent, even if that content is inaccurate, misleading, offensive, or harmful
• We are not responsible for any real-world consequences of your agent’s email communications, including but not limited to financial loss, reputational damage, or legal liability
• You must implement appropriate oversight, testing, and safeguards before deploying agents in production

We may suspend or terminate any agent or inbox that exhibits abusive, harmful, or policy-violating behavior, at our sole discretion and without prior notice.

6. Third-Party Services

LobsterMail relies on third-party infrastructure to operate, including but not limited to cloud hosting, email delivery services, and optionally AI model providers for security scanning.

Email content processed through our service may be transmitted to these third-party providers. We are not responsible for how third-party services handle your data, their availability, or changes to their terms or policies. You should review the privacy and data handling policies of any third-party services relevant to your use case.

7. Prohibited Uses

You may not use LobsterMail for:

• Sending spam or unsolicited bulk email
• Phishing, impersonation, or social engineering
• Distributing malware, viruses, or malicious content
• Harvesting credentials, intercepting verification codes, or account takeover
• Creating throwaway inboxes to abuse or circumvent other services
• Any activity that violates CAN-SPAM, GDPR, CASL, or other applicable email or privacy regulations
• Any illegal activity under applicable law

Violation of these rules may result in immediate suspension or termination of your account without notice or refund.

8. Email Deliverability

LobsterMail does not guarantee that any email will be delivered to its intended recipient. Emails may be filtered, delayed, bounced, quarantined, or blocked by recipient mail servers, spam filters, or network conditions outside our control.

We may throttle, queue, or temporarily suspend sending from your agent’s inboxes to protect our shared infrastructure, IP reputation, or to comply with sending limits.

You are responsible for maintaining good sending practices and complying with email authentication standards (SPF, DKIM, DMARC) when using custom domains.

9. Data Handling

We store email content (messages, metadata, attachments) as necessary to provide the service. We do not sell your data to third parties.

We may access stored email content for the purposes of abuse prevention, security investigation, service debugging, and legal compliance.

You are responsible for ensuring your use of LobsterMail complies with data protection laws applicable in your jurisdiction, including GDPR, CCPA, PIPEDA, and others. If your agent processes personal data belonging to third parties, you are the data controller and bear full responsibility for lawful processing.

Inboxes on the free tier that remain inactive may be reclaimed after a period of inactivity. We reserve the right to delete associated email data when an inbox is reclaimed.

10. Service Availability

LobsterMail is provided on an “as is” and “as available” basis. We do not guarantee uptime, availability, or uninterrupted service.

We may modify, suspend, or discontinue any part of the service at any time, with or without notice. We are not liable to you or any third party for any modification, suspension, or discontinuation of the service.

11. Limitation of Liability

12. Indemnification

You agree to indemnify, defend, and hold harmless LobsterMail, The Claw Depot, and their officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from:

• Your use of the service or your agent’s use of the service
• Any emails sent or received through your agent’s inboxes
• Your violation of these Terms
• Your violation of any applicable law or regulation
• Any claim by a third party related to your agent’s actions or communications

13. Changes to These Terms

We may update these Terms at any time. When we do, we will update the “Last updated” date at the top of this page. Your continued use of the service after changes are posted constitutes your acceptance of the revised Terms.

For material changes, we will make reasonable efforts to notify you through our website or documentation.

14. Governing Law

These Terms are governed by and construed in accordance with the laws of the Province of Quebec, Canada, without regard to conflict of law principles. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the courts located in Quebec, Canada.

15. Contact

If you have questions about these Terms, contact us at hello@lobstermail.ai.