Terms.

Custody model

By activating Pull & Purge, the user instructs PlugMail to remove the active server copy after the registered primary device submits a valid proof of durable local storage. A user-encrypted recovery copy is retained no longer than the disclosed recovery period.

User responsibility

The user is responsible for maintaining the primary device, recovery keys and independent exports or backups. Once all recovery windows and local backups are gone, deleted mail cannot be restored.

Acceptable use

No spam, credential abuse, malware distribution, unlawful content handling, impersonation, infrastructure probing or use that degrades sender reputation. Automated bulk sending requires a separate reviewed service.

Beta

Public beta access can be capacity-limited. Material retention changes require a new policy version and explicit acceptance; they are never hidden in a generic UI update.