Security
Built so we never need to see your mail
Email is personal. Here is what happens to your files, who can access them, and when they are deleted, in plain language.
Chain of custody
How your data flows
Your files only ever travel between your browser, private storage and a single-use worker.
- 01
Stop 01
Your browser
Files are read locally and sent over HTTPS (TLS).
- 02
Stop 02
Private upload storage
Encrypted at rest. Reached only through short-lived presigned upload links.
- 03
Stop 03
Isolated conversion worker
A fresh container per job, destroyed when the job ends.
- 04
Stop 04
Private output storage
Your encrypted result, downloadable only by you through a link valid for one hour.
Sealed for delivery
Encryption
Every connection to MoveMyInbox, including uploads and downloads, uses HTTPS with TLS. Uploaded mailboxes and finished results are stored in private Amazon S3 buckets with server-side encryption at rest. The buckets are not publicly accessible: uploads and downloads use presigned links that are tied to a single file and expire quickly.
Isolation
Each conversion runs in its own short-lived container on AWS Fargate, with its own temporary disk. It handles only your job and is shut down and discarded when the job ends.
No humans read your mail
Conversion is fully automated. Our support tools show job metadata only: file names, sizes, message and attachment counts, folder names and error messages. They have no way to open message content. We don't scan, index, analyse or train on your email.
No remote content in PDFs
When we turn messages into PDFs, remote images and other content a message links to on the web are never loaded. No tracking pixel fires and no sender is told the mail was opened. Images embedded in the message itself are shown.
One mailbox in, one result out
Whichever format you choose, the same rules apply: one encrypted result file per conversion (a PST, a zip of MBOX, EML or PDF files, or a CSV), downloadable only from your account, and deleted on schedule.
Short retention
We keep your files only as long as needed to convert them and give you time to download the result. Storage lifecycle rules delete them automatically, so deletion doesn't depend on anyone remembering.
Retention
Deletion timeline
| When | What is deleted |
|---|---|
| Immediately after conversion | The worker's container and its temporary disk are destroyed. |
| As soon as your result is ready | Your uploaded files are deleted from upload storage automatically (unfinished uploads within 3 days). |
| 7 days after the result is ready | The result (PST, zip or CSV) is deleted automatically. The job stays in your list as “expired”, with only its name, sizes and counts. |
| Any time you choose | Delete a conversion from your dashboard to remove its files straight away (except while it is being converted). |
Accounts
Sign-in is handled by Amazon Cognito. Email addresses are verified with a one-time code, and passwords are checked with the SRP protocol, so your password itself is never sent to us or stored by us.
Payments
Payments are processed by Stripe on Stripe's own checkout page. We never see, receive or store your card number. We only receive confirmation that a payment succeeded and a receipt link.
Hosting
MoveMyInbox runs on Amazon Web Services in the us-east-1 (N. Virginia) region. Access to the production environment is limited to the engineers who operate the service.
Disclosure
Reporting a vulnerability
If you think you've found a security problem, email security@movemyinbox.com with the details and steps to reproduce. We'll acknowledge your report, keep you updated, and won't take action against good-faith research that avoids other users' data and service disruption.
For how we handle personal data in general, see our privacy policy.
Par avion · By air mail
Ready to move your mailbox?
Create a free account, drop in your mail files and see the exact price before you pay.