Data processing agreement.

Version 1, 13 September 2026

1. Parties and scope

1.1 This agreement is between you, the customer (including the organisation on whose behalf you use the service), and BSolve IT Limited, trading as Mailbox MCP, registered in England and Wales, company number 04607330, registered office 5 Epping Close, Barton Seagrave, Kettering, Northamptonshire, NN15 6TR ("we", "us").

1.2 It applies where you use the service for a business, or otherwise as a controller of personal data belonging to other people. In that use you are the controller of the personal data in your mailbox and your calendar, and we are the processor of it, acting on your instructions.

1.3 It forms part of the terms of service, and you accept it by using the service for a business. Nothing needs to be signed. If your organisation needs a countersigned copy, write to support@mailbox-mcp.com and we will send one.

1.4 For the data that is about you as our customer, your account email address, your payment record and your support correspondence, we are a controller in our own right, and the privacy policy governs that.

2. Definitions

2.1 "UK GDPR" means the United Kingdom General Data Protection Regulation as it forms part of the law of the United Kingdom by virtue of the European Union (Withdrawal) Act 2018, read with the Data Protection Act 2018. "Data protection law" means both, and any law that replaces them.

2.2 "Personal data", "processing", "controller", "processor", "data subject", "personal data breach" and "supervisory authority" have the meanings UK GDPR gives them. The supervisory authority is the Information Commissioner's Office (ICO).

2.3 "The service" means Mailbox MCP as described in the terms. "Your AI client" means the assistant or program you connect to the service. "The account address" means the email address on your account. "Sub-processor" means another organisation we use to process personal data under this agreement. Hosting is on 365i, which is part of BSolve IT Limited, the processor: the servers are run by us, in London, so 365i is not a sub-processor. The data-centre operator behind them is a United Kingdom provider whose name we give on request, and it holds no key to any customer data.

3. Subject matter, duration, nature and purpose

3.1 Subject matter. Connecting a mailbox you own and, where you choose, a calendar, to your AI client, and acting on that mailbox and calendar on the instructions your AI client relays from you; and, where you hold Team Access, doing the same for the AI client of each person you invite, at the level you set for them.

3.2 Duration. For as long as you hold an account. The processing of a mailbox ends when you remove it or revoke our access at your provider; the agreement ends when your account is closed, subject to clause 9.

3.3 Nature. Reading, searching, drafting, sending, replying to, forwarding, moving, deleting and flagging mail; reading the contents of attachments; reading and changing calendar events and availability. Each action is taken on an instruction and completed against your provider in the same request. Message content and calendar content pass through our server in memory and are not stored.

3.4 Purpose. To provide the service to you as described in the terms, and for nothing else. We do not use personal data processed under this agreement to train anything, to profile anybody, or for our own purposes.

4. Personal data and data subjects

4.1 Types of personal data.

• The content and metadata of email messages and their attachments, in transit through the service while a request is served: senders, recipients, subjects, bodies, dates, headers and files.
• Calendar entries and availability: events, times, attendees and their responses, and the free and busy blocks of people whose availability you ask about.
• Your account details: the account address, the mailbox connection settings, and a credential per mailbox and per connected calendar, held encrypted.
• A record of each call your AI client makes: the tool, when, which mailbox, whether it worked, who made it, and the IP address it came from. Never the contents of a message.
• Where you hold Team Access: the email address and the name you give us for each person you invite, with the level, calendar switch, cap and mailboxes you set; the record of which message on a shared mailbox a person holds or has asked to have approved, naming the mailbox, the folder, the message and the person and never its contents; and, from the day the tier is bought, the domains your account has written to, from any mailbox and by anybody, domains only and never addresses.

4.2 Categories of data subject.

• You, and your staff or colleagues who use the service.
• People you invite under Team Access, who use the service on your mailboxes through their own account, at your invitation.
• Your correspondents: anybody who writes to your mailbox or is written to from it, and anybody named or copied in that mail.
• People named in your calendar, and people whose availability you ask about.
• Anybody else whose personal data appears in your mail or your diary.

4.3 Special categories. The service does not need any special category data and asks for none. Where your mail contains it, it passes through in the same way as everything else and is not stored.

5. Our obligations as processor

5.1 Instructions. We process personal data only on your documented instructions, which are the terms, this agreement, and the instructions your AI client relays to the service, unless the law of the United Kingdom requires otherwise, in which case we tell you before processing unless the law prohibits that. If we think an instruction infringes data protection law we tell you.

5.2 Confidentiality. The servers are administered only by the people who run the company, each of whom is bound to keep personal data confidential. Nobody reads your mail or your diary except where you have asked us to look at something specific, or where investigating a fault or abuse requires it.

5.3 Security. We maintain the technical and organisational measures in Schedule 2, which are described in full on the security page and in the privacy policy, and we keep them appropriate to the risk. The measure that matters most is structural: no message content is stored, so there is no archive of your mail here to protect or to lose.

5.4 Sub-processors. You authorise the sub-processors listed on the IT and security page, with what each does and where: the payment processor, the data-centre operator behind our servers, and the two that run the uptime monitor, deliver its alerts, and handle a support request sent from the control panel. We bind each one by written terms that impose data protection obligations on it, and we remain responsible to you for its performance. We give 30 days' notice of any addition or replacement, by email to the account address. If you object, you may close your account within that 30-day notice period; where you do, we refund the unused part of any paid period, as the terms provide when we end the agreement without cause. This clause prevails over the terms and the refunds policy on this one point.

5.5 Assistance. We help you respond to a data subject exercising their rights, so far as we can: we hold no message content, so a request about mail is answered from your own mailbox, and we can supply the account records and the call records we hold about you. We help with a data protection impact assessment, and with any prior consultation with the ICO, so far as the information is ours to give.

5.6 Deletion. When you remove a mailbox or disconnect a calendar, its credential is deleted at once. When you close your account, your account details and every credential are deleted at once, and the records we keep for a stated period are deleted when that period ends: the record of each call after 90 days, the audit record after 400 days, web server logs after 90 days. Payment records are kept as long as UK tax law requires. There is no message content to delete. Clause 9 sets the timeline out in full.

5.7 Demonstrating compliance. We make available the information needed to show that these obligations are met: this agreement, the security page, the privacy policy, the threat model, and written answers to reasonable questions. We allow an audit by you or an auditor you appoint, on 30 days' notice, at your cost, no more than once in any 12 months unless a personal data breach affecting your data requires one, conducted at a time and in a way that does not disrupt the service and does not expose any other customer's data.

5.8 People you invite. Where you hold Team Access and invite a person to a mailbox, the invitation is your instruction to us to give that person the access you set and no more, and we act on the calls their AI client makes as we act on yours, as your processor. We bind the invitation to the email address you give, refuse acceptance from any other account, record every call the person makes under their name so you can see it, and end every connection they hold when you remove them, in one action. You are responsible for choosing the people you invite, for the level, calendar access and cap you set for each, for the instructions they give their AI client on your mailboxes, and for removing them when their access should end. For a person's own account with us we are a controller in our own right, as clause 1.4 says of yours, and the privacy policy tells them what you can see of what they do.

6. Personal data breach

6.1 Where a personal data breach affects your data, we notify you without undue delay and within 72 hours of confirming it, by email to the account address, saying what was affected, what we know about how, what we have done, and what you should do. Where the law requires it, we notify the ICO within 72 hours of becoming aware.

6.2 We keep a record of every personal data breach, cooperate with you in responding to it, and give you the information you need to meet your own obligations to data subjects and to the ICO.

6.3 Because message content is never stored, a breach of our systems cannot expose an archive of your mail. What it could expose is the encrypted credentials and the account records, and the notification would say which, and would tell you to revoke the credentials at your provider, which you can do without us.

7. International transfers

7.1 Personal data processed under this agreement is processed in the United Kingdom: the service, the control panel, this website, the database, its nightly backup and the off-site copy of that backup are all hosted in the UK.

7.2 The one transfer outside the UK is payment. Card details are entered on Stripe's systems and never reach ours, and Stripe processes them in the United States and the European Union under its own data processing agreement and its own transfer mechanism.

7.3 Your mail provider, your calendar provider and your AI provider are your own choices and your own arrangements. Where any of them is outside the UK, that is a transfer you make, not one we make on your behalf.

8. Liability, precedence and law

8.1 The liability clause in the terms of service applies to this agreement, and nothing here limits any liability that cannot lawfully be limited.

8.2 On the subject of data protection this agreement prevails over the terms where the two conflict. On every other subject the terms prevail, with the one exception clause 5.4 states.

8.3 This agreement is governed by the law of England and Wales, and the courts of England and Wales have jurisdiction, as the terms provide.

9. Termination and deletion

9.1 This agreement ends when your account is closed, by you or by us under the terms. Clauses 5.6, 6 and 9 survive it for as long as we hold anything under it.

9.2 On closure, deletion runs on this timeline:

9.3 There is nothing to return: we hold no copy of your mail or your diary, and the activity record is yours to export as a CSV from the control panel at any time before closure.

Schedule 1

The processing

Schedule 2

Security measures

Each of these is described in full, with what it does not cover, on the security page, in the privacy policy and on the IT and security page. They are summarised here so the agreement is complete on its own.

• No stored content. Message and calendar content pass through the server in memory while a request is served and are not written to disk.
• Encryption in transit. TLS between your AI client and the service, on the control panel and on this website; Microsoft 365 and Google reached on fixed encrypted endpoints. A custom IMAP host uses the ports you give, as a desktop mail client would.
• Encryption at rest. Every stored credential encrypted with AES-256-GCM under its own key, wrapped by a master key held outside the database and the source code; each credential bound to its mailbox. Passwords stored as Argon2id hashes; client tokens stored only as hashes.
• Access control. A 12-character minimum password, two-factor authentication available, a browser signed out after 30 minutes without activity with the session behind it expiring after 7 days idle or 30 days at most and listed under Settings until it does, a permission level per connection enforced on every call, and revocation from your own side at any time.
• Audit. Every call logged per customer for 400 days and exportable as CSV from the control panel; never the contents of a message.
• Backups. Nightly, encrypted under a separate key, 14 nights kept, a verified copy filed off the machine each night in the UK, the restore tested every week.
• Monitoring and disclosure. An independent uptime monitor on a different provider with a public status page; a security.txt naming the disclosure address; a published threat model.
• Personnel. Servers administered only by the people who run the company, under a duty of confidentiality.