Questions worth asking.

Yes. Point a domain you already own at us and we write and verify the MX, SPF, DKIM and DMARC records for you — connect Cloudflare and authorize it once, or take the records and add them by hand. Until then you get an address on ruber.me.

Smart mailboxes are not. They are ordinary standards-compatible email — encrypted in transit, stored unencrypted, and readable by the mail plane, which is what makes IMAP, search and the API work. Private is being built for zero-access storage and automatic E2EE between Ruber mailboxes. Mail arriving from outside cannot become end-to-end encrypted after the fact: a message from Gmail crossed the internet as plaintext SMTP before it reached us.

Smart is compatibility and intelligence: IMAP and SMTP, any mail client, server-side search, filters, integrations and the API. Private is privacy and zero-access: content encrypted for you rather than available to the mail plane. Neither is the secure one and neither is the basic one — they are two deliberate trade-offs. Both are available today, on every plan, set per mailbox. A Private mailbox is still reachable over IMAP — a third-party client simply cannot decrypt what it fetches, so Private mail is read in the Ruber client. Two parts are still being built: search inside a Private mailbox, and Private mail on the mobile app.

Yes. Mode is set per mailbox, not per domain or per account, so support@company.com can be Smart while ceo@company.com is Private. That is the usual arrangement: the shared inbox stays searchable, the one carrying contracts does not have to be.

For Smart, yes — it is standard IMAP and SMTP with nothing in between. For Private, a third-party client can reach the mailbox but cannot transparently decrypt protected content, because the keys are the user's rather than the server's. The Ruber client is the primary Private experience. Private is still in development, so this is what it is being built to do rather than what it does today.

You bring your own key pair, or none at all — the mail plane can run in your AWS account or VPC while we keep providing the dashboard, the API and provisioning. Nothing about the message ever transits our infrastructure.

Postfix, Dovecot and Rspamd, which are the same components most mail providers run. We did not write our own IMAP server — it is a large, mature, adversarial protocol and rewriting it would make the product worse, not more ours.

Every inbound message is scored by Rspamd before delivery, with SPF, DKIM, DMARC, sender reputation and phishing heuristics all feeding that score. Outbound is checked too, which is less common and is what keeps one bad account from spoiling delivery for everyone else.

You still get a working address on ruber.me while you decide. Nothing about setup requires you to own a domain first.

No. Your DNS stays wherever it is — you either authorize Cloudflare once and we write the records through the API, or we hand you the records and you add them by hand.

Yes. Pro carries 5 domains and Business carries 25, each with its own mailboxes and its own records verified separately.

No. Subscriptions pay for this, so there is no advertising business for your mail to feed and no profile to build from it.

Over IMAP, the same way you would read it. Any mail client can pull a full copy down, so leaving does not need a migration tool from us.

On the your-cloud mail plane, yes — storage sits in your region under your retention rules. On the shared plans it is our infrastructure and our region.

No. Every account starts with a 30-day trial instead — a domain of your own, 5 mailboxes and 10 GB, with no card asked for.

Only on the Business plans. Personal, Pro and Premium are one price for one person; Business is €12 a user a month and Business Plus €20. Every plan includes extra addresses.

The REST API and signed webhooks start on Pro, along with delivery logs and event history. Published SDKs are not built yet.

Outgoing limits are counted per day, across the whole plan rather than per address. Business and Enterprise are raised on request.

No. Every tier includes it, because mode is a per-mailbox setting rather than a plan feature — you can run Smart and Private mailboxes side by side on one account and change a mailbox's mode later. Private is zero-access storage with the content encrypted for you rather than readable by the mail plane, which is why it is read in the Ruber client — IMAP still reaches the mailbox but cannot decrypt it. Search inside a Private mailbox and Private mail on the phone are still being built.

Nothing is locked in. The domain is yours and the MX record is what moves mail, so leaving is pointing it elsewhere and taking the mail with you — the same on Personal as on Business.