The rules of the harbor.

Mail Pounder is a hosted control plane that connects one platform login to many Google accounts, and exposes those accounts through a single MCP endpoint that MCP-capable clients can talk to under one OAuth grant. We move requests between your agents and Google. We do not store the contents of those requests. The full data picture is in our privacy policy.

We did not invent OAuth. We did not invent Google. We did not invent agents. We did invent the inconvenience of holding all three at once, and this is our answer.

You agree to:

• Use a real email address that you control.
• Pick a password you have not used elsewhere.
• Keep your credentials to yourself.
• Tell us promptly if you have reason to believe your account has been used by someone else.

You are responsible for everything done through your platform account, including by anyone you have shared a credential with on purpose or otherwise. One human, one platform login. That is the shape we built for.

When you connect a Google account, you represent that:

• You are the owner of that account, or have explicit authority from the owner to operate it.
• Connecting it here does not violate any agreement you have with anyone else.
• You will comply with Google's Terms of Service and the policies for any Google API you cause us to call (Gmail, Calendar, Drive, People, Tasks). The OAuth grant is your grant; the API calls are made on your behalf.

We do not police what your agents do inside those accounts. We obey the grants you have set. If your agent sends a strange draft from your work account, that is not the harbor's fault. The harbor moved the boat. What the boat did at sea is between you and the captain.

You are responsible for the MCP clients you authorize against your harbor. By signing the consent screen for a client, you grant that client the specific accounts, services, and tools you ticked, and nothing else. We honor that grant.

We do not vet third-party MCP clients on your behalf. We assume you have already decided whether you trust the agent on the other side of the cable. If you no longer trust it, revoke it from the dashboard. Revocation takes effect on the next request.

You agree not to use Mail Pounder to:

• Break any law that applies to you or to the people you communicate with.
• Send unsolicited bulk mail, spam, phishing, or other unwanted communications from connected Google accounts.
• Harass, threaten, defraud, or impersonate any person.
• Connect a Google account you do not own or do not have explicit authority to use on the owner's behalf.
• Resell, sublicense, or commercialize access to Mail Pounder to third parties without our written permission.
• Attempt to access other users' accounts, data, or tokens; reverse-engineer the platform; attack the infrastructure; or probe for vulnerabilities outside a coordinated disclosure process.
• Use the service in any way that would interfere with normal operation for other users or that would consume disproportionate resources.

If you find a security issue, write to us first. We'd rather hear it from you than from anyone else.

We aim to keep the harbor open. We do not promise uninterrupted service. Google APIs change, tokens expire, infrastructure providers have weather. When the harbor is closed, you cannot moor new vessels.

We may modify or remove features, add features, or change pricing, with notice when the change is material. We will not retroactively reduce what you have already paid for. We will not retroactively start storing the contents of your data without telling you, and giving you a way to delete it on the way past.

You may leave at any time. Delete your platform account from the Danger zone on the account page. The cascade removes your sessions, your encrypted Google tokens, your MCP grants, your access tokens, your sync state, and your index rows. Backups age out on Vercel's retention.

We may suspend or terminate an account that violates these terms, that puts other users or the infrastructure at risk, or that is being used to do harm. Where possible we will give notice and a chance to remedy. Where the conduct is severe, we will not.

The service is provided as is and as available. To the fullest extent permitted by law, we disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, and accuracy of any data passing through. We do not warrant that the service will be uninterrupted or error-free, that it will meet any specific requirement of yours, or that it will turn your agents into better decision-makers.

Nothing in this section limits any warranty that cannot be disclaimed by law.

To the fullest extent permitted by law, Mail Pounder and its operators are not liable for any indirect, incidental, consequential, special, exemplary, or punitive damages, or for lost profits, lost data, lost goodwill, business interruption, or substitute service costs — even if we have been advised of the possibility of such damages.

Our aggregate liability for any direct damages, from any cause, is limited to the greater of $100 or the amount you have paid us for the service in the twelve months preceding the event giving rise to the claim.

Some jurisdictions do not allow these limitations; where they apply, the limitations apply only to the extent permitted.

You agree to defend, indemnify, and hold harmless Mail Pounder and its operators from any claim arising out of: (a) your use of the service, (b) your violation of these terms, (c) your violation of any third party right (including any agreement with Google or any person you communicate with), or (d) anything an MCP client you authorized did on your behalf.

We may revise these terms. When we do, we will post the updated text here with a new effective date. If a change is material we will give reasonable notice through the dashboard or by email. Continued use of the service after a change takes effect counts as acceptance of the revised terms. If you do not accept the change, you can delete your platform account before the change takes effect.

These terms are governed by the laws of the State of Delaware, United States, without regard to its conflict of laws principles. Any dispute that cannot be resolved by writing to us first will be brought in the state or federal courts located in Delaware, and you and we consent to personal jurisdiction there. Nothing in this section limits any consumer-protection rights you have under the laws of where you live.

Notices, security disclosures, account questions, or anything that needs a person: max@weinbach.co.