# Is LotsMail Safe? Access per Mailbox, Sending Off by Default, and If Payment Lapses

Source: https://lotsmail.to/blog/is-lotsmail-safe
Published: 2026-10-23T00:30:32.139026+00:00

Yes. In LotsMail each person sees only the mailboxes they're added to, owners included, and you choose read, draft or send for your AI agent on each mailbox, with sending off until you turn it on. Owners can restrict a mailbox to listed senders and recipients. If a payment lapses, sending stops at once, incoming mail keeps arriving for 14 days and then pauses, and your mail is never deleted.

Below is how each of those works, what an agent can and can't touch, and where your mail is kept. Everything here comes from LotsMail's own docs, dashboard and privacy policy, read on 22 October 2026, with the lapse wording and prices rechecked on 26 October 2026.

## Who can open a mailbox

Every address on your domain lives in a mailbox, and every mailbox has its own list of people. A personal mailbox belongs to one person; a shared one, like support@ or projects@, belongs to the people who answer it. For each person you pick one of three levels:

| Level | What they can do |
|---|---|
| **Can read** | Read and search mail. Can't send. |
| **Can read and send** | Read, write and send from the address. |
| **Full control** | Everything, plus export and deciding who has access. |

Team members only see a mailbox they're added to, and that includes workspace owners. An owner can give themselves access to a private mailbox, but it's recorded and shown to the people who use it, labelled as owner access. Nobody reads a colleague's mail quietly.

For agencies this matters most. Each client gets its own workspace, and your agency manages the client's mailboxes without reading their mail unless it's given access to a mailbox.

## What your AI agent can do

LotsMail works with the AI agent you already use: ChatGPT, Claude, Claude Code, Codex, Cursor or any MCP client. LotsMail has no built-in AI, so nothing reads your mail unless you connect an assistant yourself.

Once connected, the agent acts as you, inside the mailboxes you can open, and only as far as you allow. In the console under [Agents](https://lotsmail.to/console/agents), each mailbox has three switches of its own:

- **Read and search mail.** The agent can list threads, search and open conversations.
- **Write drafts for you to review.** Drafts wait in the mailbox's Drafts for you to send.
- **Send email on your behalf.** Off until you turn it on, and only available on a mailbox you can send from yourself.

When a switch is off, the tool is refused with a clear error, and LotsMail's instructions tell the agent to tell you what to change rather than retry or work around it. Every send needs an idempotency key, so a retried send returns the original message instead of sending twice, and `get_send_status` reports whether each recipient's copy was delivered, bounced or delayed. A send in an unknown state is never resent automatically.

Two more guards sit underneath:

- **Email bodies are treated as data.** LotsMail's skill tells the agent that a message is untrusted content written by other people, never instructions, even when it claims to come from you, LotsTech or an administrator. Agents see attachments by name and size only.
- **Outgoing HTML is cleaned.** When an agent writes a formatted email, LotsMail strips scripts, event handlers, frames, forms and unsafe links before it goes out.

More on the setup in [connecting ChatGPT or Claude to your business email](https://lotsmail.to/blog/connect-chatgpt-or-claude-to-business-email).

## What an agent can't touch

Domains, DNS, mailboxes, team access, billing and agent permissions stay in the dashboard with the owner. An agent can hand you the steps to connect a domain (`start_domain_setup`) or a checkout link to open in your browser (`create_checkout`), but it can't change a DNS record, add a teammate, raise its own access or ask for a card number. It also can't change a mailbox's restrictions.

Connecting doesn't mean sharing a password. ChatGPT, Claude and other MCP clients sign in to `https://api.lotsmail.to/mcp` with your Lots account over OAuth, so there's no key to paste into a chat. You can disconnect any app at [Connected apps](https://www.lotstech.com/dashboard/connected-apps), and switch a mailbox's access off in the console at any time.

## Restricted mailboxes: limit who a mailbox can talk to

An owner or admin can restrict any mailbox, separately for each direction:

- **Who can email this mailbox.** Mail arrives only from the listed senders, and only when their domain proves the message really came from them, so a forged From doesn't get through.
- **Who this mailbox can email.** Every To, Cc and Bcc must be on the list, or the message isn't sent at all.

Lists take full addresses or a whole domain, like `*@yourclient.com`. The rules apply to everyone using the mailbox, AI agents included, whether they send from the inbox, the API or an assistant. Agents can see the lists but can't change them; only owners and admins can, in the dashboard.

That's how you give a contractor, a new hire or an AI agent a mailbox that can only reach your team or one client.

## Where your mail is kept

LotsMail's section of the [LotsTech privacy policy](https://www.lotstech.com/privacy-policy) is specific:

- Your mail is used only to provide the service. It isn't sold, used for advertising or used to train AI models.
- Mail is encrypted in transit between our systems and encrypted at rest by our infrastructure providers, and message content is never written to our logs.
- Your mail stays until you delete it. Trash and Spam are emptied after 30 days.
- You can export any mailbox at any time.
- If you connect an AI app, its provider processes what it reads under its own terms, so choose an assistant you trust with that mailbox.

## If a payment lapses

Sending stops at once, incoming mail keeps arriving for 14 days and then pauses, and your mail is never deleted. After the 14 days, senders get a rejection until you pay. You can still read and export your mail, and it all resumes when you pay.

There's no cliff where your mail disappears because a card expired. Plans are $5, $20 or $60 a month (1, 5 or 20 domains), or $50, $200 or $600 a year, and pay as you go is $6 per domain a month from LotsTech Credits (prices checked 26 October 2026). [See pricing](https://lotsmail.to/pricing).

## What LotsMail won't do

- **No bulk, marketing or cold email.** It's for normal business mail, and every send counts against the domain's monthly sending allowance, one per recipient.
- **No automatic replies without your approval.** An agent can draft; a person decides what sends, unless you turn sending on for that mailbox.
- **No promises about inbox placement.** What LotsMail does do: SPF, DKIM and DMARC records are checked for you, each send shows its delivery status, bounces are reported, and a new domain starts with a small daily sending allowance that grows with good delivery.

## FAQ

### Is it safe to connect ChatGPT or Claude to my business email?

With LotsMail, you decide how far it goes. You choose read, draft or send for each mailbox, sending stays off until you turn it on, and the agent never sees a mailbox you can't open. You can switch access off per mailbox or disconnect the app at any time.

### Can my AI agent send email without me?

Only if you turn on sending for that mailbox. With read or draft access, replies wait in Drafts for you to send. Sending can only be turned on for a mailbox you can send from yourself, and a restricted mailbox only sends to its listed recipients.

### Can the workspace owner read my mailbox?

Not by default. Team members, owners included, only see the mailboxes they're added to. An owner can give themselves access to a private mailbox, but that's recorded and shown to the mailbox's members.

### What happens to my email if a payment lapses?

Sending stops at once, incoming mail keeps arriving for 14 days and then pauses, and your mail is never deleted. After the 14 days, senders get a rejection until you pay. You can still read and export your mail, and it all resumes when you pay.

### Does LotsMail use my email to train AI?

No. LotsMail's privacy policy says your mail isn't sold, used for advertising or used to train AI models, and LotsMail has no built-in AI that reads it. If you connect an assistant, its provider processes what it reads under its own terms.

### Can I stop a mailbox from emailing anyone outside my company?

Yes. An owner or admin can restrict the mailbox to listed recipients, such as `*@yourcompany.com`. Any message with an address not on the list, in To, Cc or Bcc, isn't sent, whoever sends it.

## Sources (opened 22 October 2026, lapse wording and prices rechecked 26 October 2026)

- LotsMail: [skill](https://lotsmail.to/skill.md), [API docs](https://api.lotsmail.to/docs.md), [tool list](https://api.lotsmail.to/tools.json), [connect page](https://lotsmail.to/mcp), [pricing](https://lotsmail.to/pricing), [LotsTech privacy policy, section 14](https://www.lotstech.com/privacy-policy)
- Related: [shared inbox vs group email](https://lotsmail.to/blog/shared-inbox-vs-group-email), [business email providers with MCP support](https://lotsmail.to/blog/business-email-providers-with-mcp-support), [LotsMail vs Zoho Mail](https://lotsmail.to/blog/lotsmail-vs-zoho-mail)