Security
Built so we never need to see your mail
Email is personal. Here is what happens to your files, who can access them, and when they are deleted, in plain language.
Chain of custody
How your data flows
Your files only ever travel between your browser, private storage and a single-use worker.
- 01
Stop 01
Your browser
Files are read locally and sent over HTTPS (TLS).
- 02
Stop 02
Private upload storage
Encrypted at rest. Reached only through short-lived presigned upload links.
- 03
Stop 03
Isolated conversion worker
A fresh container per job, destroyed when the job ends.
- 04
Stop 04
Private output storage
Encrypted PST, downloadable only by you through a link valid for one hour.
Sealed for delivery
Encryption
Every connection to MoveMyInbox, including uploads and downloads, uses HTTPS with TLS. Uploaded mailboxes and finished PST files are stored in private Amazon S3 buckets with server-side encryption at rest. The buckets are not publicly accessible: uploads and downloads use presigned links that are tied to a single file and expire quickly.
Isolation
Each conversion runs in its own short-lived container on AWS Fargate, with its own temporary disk. It handles only your job and is shut down and discarded when the job ends.
No humans read your mail
Conversion is fully automated. Our support tools show job metadata only: file names, sizes, message and attachment counts, folder names and error messages. They have no way to open message content. We don't scan, index, analyse or train on your email.
Short retention
We keep your files only as long as needed to convert them and give you time to download the result. Storage lifecycle rules delete them automatically, so deletion doesn't depend on anyone remembering.
Retention
Deletion timeline
| When | What is deleted |
|---|---|
| Immediately after conversion | The worker's container and its temporary disk are destroyed. |
| As soon as your PST is ready | Your uploaded mbox files are deleted from upload storage automatically (unfinished uploads within 3 days). |
| 7 days after the PST is ready | The PST is deleted automatically. The job stays in your list as “expired”, with only its name, sizes and counts. |
| Any time you choose | Delete a conversion from your dashboard to remove its files straight away (except while it is being converted). |
Accounts
Sign-in is handled by Amazon Cognito. Email addresses are verified with a one-time code, and passwords are checked with the SRP protocol, so your password itself is never sent to us or stored by us.
Payments
Payments are processed by Stripe on Stripe's own checkout page. We never see, receive or store your card number. We only receive confirmation that a payment succeeded and a receipt link.
Hosting
MoveMyInbox runs on Amazon Web Services in the us-east-1 (N. Virginia) region. Access to the production environment is limited to the engineers who operate the service.
Disclosure
Reporting a vulnerability
If you think you've found a security problem, email security@movemyinbox.com with the details and steps to reproduce. We'll acknowledge your report, keep you updated, and won't take action against good-faith research that avoids other users' data and service disruption.
For how we handle personal data in general, see our privacy policy.
Par avion · By air mail
Ready to move your mail to Outlook?
Create a free account, drop in your mbox files and see the exact price before you pay.