Terms of Service

Last updated: July 2026

1. Definitions

• "Service" — the automated provisioning of a Loop performed by closedloop.email, together with the ongoing services described in section 4.
• "Provisioning" — the one-time, automated deployment of a Loop (server, firewall, DNS records, and TLS certificate) onto Your Infrastructure.
• "Loop" — an airgapped Stalwart + Bulwark mail server, addressed at a random <id>.loopmail.cloud subdomain, provisioned by the Service and running on Your Infrastructure.
• "Your Infrastructure" — the Cloud account that you own and control, into which the Loop is deployed.
• "Customer", "you" — the person or entity that creates an account and uses the Service.
• "Consumer" — a Customer who is a natural person acting for purposes outside their trade, business, craft or profession, within the meaning of the Italian Consumer Code (Codice del Consumo, D.lgs. 206/2005).

2. Description of Service

closedloop.email provides the automated provisioning of an airgapped mail server (a "Loop") onto Your Infrastructure — a Cloud account you own — and, during the life of the Loop, the ongoing services described in section 4.

closedloop.email is not a mail hosting provider or email operator. The Loop runs on Your Infrastructure and remains under your control. You are the operator of the Loop and are solely responsible for its use and content.

A Loop is airgapped: mail submitted inside it is delivered only to other mailboxes inside the same Loop, and non-local recipients are rejected. This is enforced by the mail server's own configuration and, on most cloud providers, additionally by a firewall rule blocking outbound mail traffic.

Platform access. closedloop.email retains SSH access to the server until you disable it from the Loop's page — this is a support capability, not something we use to read your mail. Before you claim your Loop, closedloop.email holds a one-time claim token, not a password; the box generates its own admin credential and you replace it with your own at claim time, after which closedloop.email has no mail credential. If you disable SSH access and then lose your own admin password, the Loop cannot be recovered by closedloop.email or anyone else.

3. Your Responsibilities

• You must provide accurate information when creating an account.
• You are responsible for maintaining the security of your Cloud credentials, your Loop's admin password, and any SSH keys you add for your own access.
• If you disable the platform's SSH access, you are solely responsible for retaining your own admin password — closedloop.email cannot reset it or recover the Loop.
• You must comply with all applicable laws in your use of the Loop, including data protection law for any personal data you store in it.
• You must not use the Service for any illegal purpose.
• You are responsible for all costs incurred on your Cloud account (compute, storage, bandwidth).

4. Ongoing Services

While a Loop exists, closedloop.email performs two things for it: renewing its TLS certificate (from a shared wildcard, so no action is needed on your part) and, when we ship a configuration or security fix, converging it onto your running server.

These services are provided on a reasonable-efforts basis only, with no warranty or service-level commitment. closedloop.email does not perform backups of your Loop or its mail data. You are responsible for your own backups if you want them; the server is in your own Cloud account, so you may snapshot it there at any time.

5. Acceptable Use

You may not use the Service to:

• Store or exchange content that is illegal under applicable law.
• Attempt to gain unauthorised access to closedloop.email's systems or another customer's Loop.
• Circumvent or interfere with the airgap or firewall configuration of a Loop.
• Resell or sublicense the Service without written permission.

Violation of this policy may result in immediate suspension or termination of your account.

6. API Credentials and Security

You provide a Cloud API token to enable provisioning. It is stored encrypted in AWS Secrets Manager and deleted after your Loop is successfully provisioned — closedloop.email does not retain it for the life of the Loop. To destroy a Loop, you re-supply the token; it is stored in a one-shot secret and deleted once destruction succeeds.

7. No Warranty

To the maximum extent permitted by applicable law, the Service is provided "as is" and "as available", without warranties of any kind, whether express or implied, including any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. closedloop.email does not warrant that the Service will be uninterrupted or error-free.

This section applies without prejudice to the mandatory rights of Consumers under the Codice del Consumo and other applicable mandatory law, which are not excluded or limited by these Terms.

8. Service Availability

closedloop.email provides the Service on a best-efforts basis. We do not guarantee uninterrupted or error-free operation of the provisioning platform or the ongoing services in section 4, which may be suspended for maintenance without liability. Your Loop delivers mail locally and does not depend on closedloop.email's own availability to keep working.

9. Fees and Refund

The Service is charged as a single one-time payment covering the provisioning of a Loop. Charges for Your Infrastructure are billed to you separately by your Cloud provider and are not included in closedloop.email's fee.

If provisioning fails and no working Loop is delivered, you will receive a full refund. Otherwise, refund rights are governed by the statutory withdrawal right described in section 10.

10. Consumer Right of Withdrawal

If you are a Consumer, you have a statutory right to withdraw from the contract within 14 days of entering into it, without giving any reason (Articles 52 ff. of the Codice del Consumo).

Because provisioning begins immediately on payment, when you place your order you expressly request that closedloop.email begin performing the Service during the withdrawal period and acknowledge that you lose your right of withdrawal once the Service has been fully performed (Article 59(1)(a) Codice del Consumo). This express request and acknowledgement are captured in the signup flow before provisioning begins.

11. Destroying a Loop

You may destroy your Loop at any time from the storefront; doing so re-supplies your Cloud token (see section 6) and deletes the server, firewall, and DNS records from your Cloud account.

Because closedloop.email does not perform backups and never holds a copy of your mail data — it never leaves Your Infrastructure — you are responsible for exporting anything you want to keep, via your Loop's webmail, before requesting destruction. Destroying a Loop does not refund the one-time payment.

12. Limitation of Liability

To the maximum extent permitted by applicable law, closedloop.email shall not be liable for any indirect, incidental, special, or consequential damages, including data loss, arising from your use of the Service. closedloop.email is not liable for the operation, downtime, or content of a Loop, which is operated by you, nor for the security of Your Infrastructure itself. Our total liability shall not exceed the fee you paid to closedloop.email for the Loop giving rise to the claim.

Nothing in these Terms excludes or limits closedloop.email's liability for wilful misconduct (dolo), gross negligence (colpa grave), death or personal injury caused by its negligence, or any other liability that cannot be excluded or limited under mandatory applicable law, including the mandatory rights of Consumers.

13. Data Protection

closedloop.email processes personal data as described in our Privacy Policy. closedloop.email does not access or process the content of the mail inside your Loop.

14. Changes to Terms

We may update these Terms from time to time. Continued use of the Service after changes are posted constitutes acceptance of the updated Terms. We will provide reasonable notice of material changes via email. If you are a Consumer, you may terminate the contract before a material change takes effect.

15. Governing Law and Jurisdiction

These Terms are governed by the laws of Italy. If you are a Consumer, this choice of law does not deprive you of the protection afforded by the mandatory provisions of the law of your country of residence (Article 6 of the Rome I Regulation), and any dispute may be brought before the courts of the place where you are domiciled. For all other Customers, the courts of Torino, Italy shall have exclusive jurisdiction over any dispute arising out of or in connection with these Terms.

16. Provider Identity and Contact

closedloop.email is a service operated by cripta.to. Questions about these Terms? Contact us at support@closedloop.email.