Terms of Service

PonyXpress is operated by Shorebreak, LLC, based in Florida, USA ("we", "us"). These Terms cover our website, web workspace, optional Scout features and any desktop companion we release. Contact support@ponyxpress.app for support, privacy or security questions.

PonyXpress is free to use. No payment details or payment are required, and there are no paid tiers. This is not a promise of unlimited resources or free access forever. Any material change to these terms of access will be explained in a new version before it applies to continued live use; these Terms do not authorize a charge.

PonyXpress is pre-release software. A fictional demo is not evidence of live delivery, AI accuracy, encryption or production readiness. Only installers listed on Downloads should be used; signed public installers are not available yet.

You must be at least 13 and meet any higher age or other eligibility requirement where you live. Ages 13–17 need a parent or legal guardian’s permission and should review these documents together. Under-13 use is not supported.

Age bands, local eligibility and guardian permission are self-attestations, not verified age or verified parental consent. We do not ask for your date of birth. These statements do not resolve local minor-contract or consent requirements.

Launch countries have not been approved. This candidate does not establish international availability or transfer local compliance duties from the operator to you. Do not use the service where prohibited. Cloud AI remains restricted for teen accounts pending separate safety and market approval; a new adult checkbox does not clear a prior teen restriction.

Your PonyXpress identity is managed through Clerk and is separate from each Google mailbox authorization. Connect only accounts you own or are authorized to manage, following employer, school and account-administrator rules. Each mailbox is authorized independently; Calendar, Contacts and Gmail settings have additional permissions.

Keep your sign-in credentials private, secure your devices and report suspected unauthorized access. You are responsible for actions you authorize, but not relieved of rights or remedies for our own failure to use reasonable care. PonyXpress does not ask for your Google password.

• Do not send spam, phishing, malware, unlawful threats or deceptive messages, or violate others’ privacy or intellectual property rights.
• Do not access accounts without permission, bypass age or safety controls, or interfere with the service or its security.
• Do not use Scout to produce unlawful content or circumvent applicable provider safety rules.
• Security research and other activities permitted by mandatory law are not prohibited by these Terms. Report suspected vulnerabilities privately without including credentials or other people’s mail.

You retain your rights in your mail, drafts, contacts, files and other content. You authorize processing only as needed to operate and secure the features you choose, including delivery to intended recipients and selected service providers as described in the Privacy Notice. You must have authority to supply and process that content.

This permission does not transfer ownership, authorize advertising with mailbox content or authorize general AI-model training. We do not claim ownership of your AI-assisted drafts. AI output may resemble other output and may not be protectable; review facts, rights and permissions before using it.

Accepting these documents does not enable AI. Cloud assistance requires adult eligibility, configured provider access, purpose-specific consent and the applicable mailbox and action grants. Ride Ahead inbox analysis, optional Sent context, memory, Voice, natural speech, transcription and selected-PDF review are separate choices. Older broad consent does not grant new permissions.

Scout can summarize, propose replies and help review a catch-up report, with important action items before routine updates and promotion cleanup. Talk it through supports typed sessions, optional read-aloud and short microphone recordings on supported browsers. In manual recording mode, review and submit the editable transcript. After you explicitly choose Start conversation, spoken questions and read-only commands are submitted automatically when you pause; the microphone listens again after Scout answers. Selected PDF review is limited to the first six pages of a PDF up to 8 MB and is not signature authentication or a complete document review.

Scout Voice is not an always-on or background listener and never sends mail. Conversation mode is an explicitly started, bounded session with a visible microphone indicator and an End conversation control; it pauses after silence and ends after ten minutes or when you leave the page. Speech alone does not confirm mailbox changes or draft saves: those require a separate reviewed confirmation. Confirmed reply or forward proposals become drafts; sending is a separate action in the composer. Natural voice sends the text to OpenAI; an available on-device voice is an alternative. The packaged desktop app blocks microphone access. Permissions do not override browser or provider limits.

AI can be wrong, incomplete, outdated or unsafe. Check summaries, priorities, recipients, dates, calculations and drafts against their sources. Scout is not professional advice, a person, a trusted adult or an emergency service. Automated safety checks can miss unsafe output or withhold safe output; they do not censor original incoming mail. Help → Scout safety explains reporting. Support is not emergency-monitored and no response time is guaranteed.

Private fitted Xpress learning and unattended background drafting have independent deployment and consent gates. Scout acceptance, setup and saved feedback do not enable them or establish improved writing quality.

Check recipients, content, account, timing and effects before sending, scheduling, filing, deleting, saving a contact or changing a calendar. Looks good on a Scout draft records approval, not delivery. Calendar invitations and guest notices can reach other people only through the applicable reviewed choices.

Routes file matching new mail while processing runs; they do not automatically sweep up older mail. Snooze, delayed and scheduled sends depend on server processing. Undo send has a short pre-delivery window, not a recall guarantee. An uncertain write may already have happened: inspect Gmail Sent or Calendar before retrying.

Unsubscribe sends a reviewed request to a verified sender mechanism where supported. Acceptance of a request does not prove the sender removed you, and an external request cannot be undone. Spam, Trash and permanent deletion are different actions.

Declining updated Terms does not undo previously authorized Routes, schedules or alerts. Disconnecting cancels pending mailbox automation; removing notification devices stops future pushes. An already dispatched message, invitation or request cannot be recalled by deleting your account.

Ordinary Gmail in PonyXpress is not end-to-end encrypted. Google and PonyXpress process ordinary message content for requested features. Transport protection, encrypted credentials and selected encrypted server records are not end-to-end messaging, and not every workspace field has application-level encryption.

Optional offline reading encrypts selected plain-text copies on one device using a separate passphrase. It is read-only, bounded, requires a prepared reader and recent online validation, and is not a full mailbox backup. Attachments and HTML are not copied. We cannot recover a forgotten passphrase. Clearing storage, device failure or expiration can remove copies; an offline device cannot be erased remotely at once.

End-to-end encrypted messaging is not available in this build. The isolated private-messaging design preview uses fictional data and provides no encryption, authentication, key recovery or delivery. Do not enter private content there. Simulated lock, verification and device states are not security guarantees.

No production key or device-recovery arrangement is being offered. Before real secure messaging can launch, its protocol, recipient/device verification, key loss and recovery, revocation, visible routing metadata and server/AI/search/export exclusions must be implemented, disclosed and independently reviewed. This document does not approve that release.

Use device security and a strong unique offline passphrase. No software protects an already unlocked or compromised device, prevents recipients making copies, or guarantees perfect security.

Features may change, pause or be removed, and outages or provider restrictions can prevent access. Where practical, we will explain material changes and give reasonable notice before discontinuing the service, with an opportunity to export stored data. Urgent security or legal action may require shorter notice.

Alerts are best-effort and depend on enrollment, permissions, hosting, browser, operating system and network. Closed-app delivery, timing and sound are not guaranteed. Do not rely on PonyXpress as your only reminder for something important.

Google supplies connected mail, calendar and contacts; Clerk supplies identity; Replit supplies hosting, database and storage; browser/OS push services deliver optional alerts; OpenAI processes optional cloud assistance. Their applicable terms and policies also matter. We remain responsible for our own obligations and do not disclaim responsibility that applicable law places on us for using providers.

You can stop using the service, disconnect mailboxes in Settings or from the agreement screen, and sign out. Use Account to export stored PonyXpress data, review permanent deletion and confirm or retry cleanup. These controls remain available without accepting updated Terms. Contact support@ponyxpress.app if you cannot use them; do not send passwords or identity documents by email.

Deleting PonyXpress does not delete Google originals, contacts, events or Google-synced drafts. Revoke the Google grant separately in your Google Account. Running or uncertain actions can block deletion until reconciled; failed cleanup blocks normal use and can be retried. The Privacy Notice explains retained recovery markers, provider records and unresolved backup/log schedules.

We may restrict or end access reasonably to address abuse, security risk, legal requirements or harm. Where lawful and practical we will explain the reason and how to seek correction through support. Termination does not waive applicable data rights or remedies.

To the extent permitted by law, the pre-release service is provided “as is” and “as available”, without promises of uninterrupted operation, error-free AI or fitness for a particular purpose. We do not exclude obligations to exercise reasonable care where the law requires them.

Nothing excludes liability for fraud, intentional wrongdoing, death or injury caused by negligence where exclusion is prohibited, or any other responsibility or consumer remedy that cannot lawfully be limited. These Terms impose no blanket release, monetary liability cap, consumer indemnity, forced arbitration or class-action waiver.

Please contact support@ponyxpress.app so we can try to resolve a concern. You need not use support before exercising rights or seeking a remedy available under mandatory law.

Florida, USA is the proposed governing-law choice, subject to owner approval before publication. It cannot displace mandatory protections, regulators or courts available where you live. No exclusive forum is imposed by this candidate. An invalid provision does not remove your mandatory rights or invalidate unrelated provisions.

Material changes receive a new version and require fresh Terms acceptance and Privacy Notice acknowledgement before continued live workspace use. The server records the version and acceptance time. Continued browsing alone is not acceptance, and privacy acknowledgement is not consent to optional processing.

Export, deletion, mailbox disconnect, sign-out and notification-device removal remain usable without new acceptance. Optional permissions stay separate and are not reset or expanded by an agreement update.