Instinct email addresses went live on 8 September 2026, and the pitch was simple enough to fit in a single post: your assistant gets its own mailbox, so it can open accounts, chase businesses and handle the admin that arrives as mail. Founder Noah Shinn announced it on X in 141 words. Seven of those words were “email”. The company behind the product is Spear Street Technology, Inc., a San Francisco outfit that was valued at $2.5 billion three weeks ago and is still handing out access in batches.
We went looking for the rulebook that governs the new Instinct email mailbox. Instinct publishes two legal documents, and between them they run to 10,384 words. The Terms of Service uses the word “email” three times in 7,683 words. All three are about mail sent to you. Not one describes the thing that shipped: an address the software owns, writes from, and uses to register accounts in the world. The word “inbox” appears zero times. So does “mailbox”, “impersonate”, “spam”, “phishing” and “identity”.
This is not an argument that Instinct is doing something sinister. It is an observation about sequencing, and it matters because autonomous agents that hold their own credentials are about to become normal. A company shipped an identity for its software before the document that governs the software mentioned identity at all. Below is what the paperwork actually says, counted rather than characterised, and what it means for anyone claiming an address at mail.instinct.com.
| Document | Dated | Words | “email” | “inbox” | “arbitration” |
|---|---|---|---|---|---|
| Launch announcement on X | 8 Sep 2026 | 141 | 7 | 1 | 0 |
| Terms of Service | 26 Aug 2026 | 7,683 | 3 | 0 | 31 |
| Privacy Policy | 26 Aug 2026 | 2,701 | 8 | 0 | 0 |
Table of contents
- What the Instinct Email Rollout Actually Gives the Agent
- What the Terms of Service Say About Instinct Email
- Instinct Email Actions Are Binding on You, Not on Instinct
- The $100 Ceiling Under a $1,300 Month
- What the Terms Say About Bots, and What Instinct Email Changes
- They Rewrote These Terms in 48 Hours Once Before
- What the Privacy Policy Says That the Terms Do Not
- What an Instinct Email Address Means on the Other End
- The Website Behind the Instinct Email Feature Is One Page
- What to Check Before You Claim an Instinct Email Address
- Where This Goes Next
- References and Further Reading
What the Instinct Email Rollout Actually Gives the Agent
The Instinct email feature is narrower than “your assistant can email people” and much broader in its consequences. Shinn framed it as step one: “This is the first step towards enabling your Instinct to own and run its own accounts.”
The four jobs the Instinct email is meant to do
The announcement listed the work an Instinct email address is meant to absorb. Contacting a restaurant about a special request. Asking a business about availability. Signing up for a service the agent needs to finish your task. And receiving forwarded mail — an order confirmation you send over so the assistant can run a return end to end, from contacting support to producing the printed label.
There is a fifth use for an Instinct email address that the announcement mentions almost in passing, and it is the one with the longest tail. The Instinct email address can be added to a group thread. Once it is on the thread, the agent reads everything exchanged there, including messages written by people who never agreed to anything with Instinct and may not know a machine is on the distribution list.
Where the Instinct email address lives
Claiming an Instinct email address runs through mail.instinct.com, which is not a separate product. Requesting it returns an HTTP 302 redirect to app.instinct.com/mailbox — the mailbox is a view inside the existing application. Early users were told an address had been reserved for them, and that the assistant itself would tell them which one.
Why the Instinct email is different from the last three
Instinct has shipped three other capability upgrades in under a fortnight: Stripe payments on 28 August, a 1Password credential integration on 4 September, and location sharing on 5 September. Each of those extended what the agent could reach. The Instinct email rollout is the first that gives the agent something of its own — an identifier that exists in the world, that other systems will treat as a person, and that outlives any single task.
What the Terms of Service Say About Instinct Email
Instinct’s Terms of Service were last revised on 26 August 2026. The Instinct email feature shipped on 8 September 2026, thirteen days later. The document has not been revised since, and nothing in it was changed to describe the new mailbox. We counted every occurrence of the word in either spelling.
All three Instinct email mentions, in full
| # | Clause | What it governs | Direction |
|---|---|---|---|
| 1 | “Push Messages” | Alerts, texts and emails the app sends you about deliveries and status | Instinct → you |
| 2 | “Updating these terms” | How you will be told the Terms have materially changed | Instinct → you |
| 3 | “How to contact us” | The [email protected] address for questions | you → Instinct |
Two of the three are spelled “e-mail” with a hyphen, which is itself a tell — this is boilerplate of a certain vintage, carried forward. None of the three describes outbound mail written by software. None of them describes an address the company issues to an agent. The document that governs the Instinct email address does not know the Instinct email address exists.
The words that never appear at all
Counting absences is only meaningful when the absent word is one you would expect. In a 7,683-word contract governing software that now writes mail and opens accounts under its own name, these all return zero: inbox, mailbox, impersonate, spam, phishing, identity, encrypt, CAN-SPAM, GDPR and CCPA. “Automated” appears once. “Bot” appears once — and we will come back to where.
What the terms talk about instead
The document is not thin. It is 7,683 words of carefully drafted risk allocation. It simply allocates risk in one direction, and the subjects it returns to are not the ones a new mailbox raises.
Instinct Email Actions Are Binding on You, Not on Instinct
The Terms do govern what the agent does with an Instinct email address. They just do it through a different vocabulary — “Actions” and “Connected Services” — and the allocation is consistent throughout.
The agency clause behind every Instinct email signup
The pivotal sentence appoints the software as your legal agent: “You hereby appoint the Services as your agent to enter into agreements, commitments or transactions on your behalf or confirm your acceptance to the terms and conditions of any such third party service or application that the Services interact with.” It closes: “Any such agreements or commitments shall be binding on you as if entered into directly by you.”
Read that against the Instinct email feature. The announced purpose of the Instinct email mailbox is signing up for services. Signing up means accepting terms. Under this clause, terms the agent accepts bind you exactly as if you had read and signed them yourself.
The compliance clause
The Terms then hand you the job of policing it: “You are solely responsible for ensuring that interactions the Services take with any Connected Service on your behalf are permitted under the terms and conditions that apply to your use of such Connected Service.”
Many consumer services prohibit automated account creation and automated access in their own rules. If your Instinct email address registers an account somewhere that forbids it, the Terms place that breach on you. You are also asked to represent that you hold “all necessary rights, licenses, permissions and authority” for every Action the agent takes.
The disclaimer
Finally: “We are not responsible for any unintended Actions or any loss, damage, charge, liability, or other consequence arising from Actions, including interactions with any Connected Services on your behalf.”
| The risk | Who the Terms assign it to |
|---|---|
| An Action breaking a third-party site’s own rules | You — “solely responsible” |
| Agreements the agent enters into | You — “binding on you as if entered into directly by you” |
| Unintended Actions, loss, damage, charges | Not Instinct — “we are not responsible” |
| Rights and permissions for every Action | You — you “represent and warrant” you have them |
| Total damages Instinct can be made to pay | Capped at $100 |
| Where a dispute is heard | Arbitration; class actions waived |
The $100 Ceiling Under a $1,300 Month
The liability cap is the number that gives the rest of the Instinct email question its scale. In capitals, the Terms state that total liability “SHALL NOT EXCEED THE GREATER OF ONE HUNDRED DOLLARS ($100.00), OR THE AMOUNT YOU PAID THE COMPANY ENTITIES FOR THE SERVICES, IF ANY, IN THE PAST SIX (6) MONTHS”.
Why the second half is currently worth nothing
Instinct does not charge for the assistant. If you have paid nothing, the greater of the two figures is $100 flat. That is the ceiling regardless of what the agent does with its Instinct email address, its stored credentials or its payment method.
The number on the other side of the ledger
Instinct published a figure of its own on 28 August, in the Stripe announcement: “Instinct users who make purchases spend over $1,300/month on average through Instinct.” That is the company’s own average, from the company’s own post, describing money moving through the same agent.
The cap is 7.7% of a single average month of agent-directed spending. Over a year it is 0.64%. Caps like this are standard in consumer software and courts do not always enforce them, but standard boilerplate was written for software that displays things, not software that buys things and now signs up for things under its own address.
What the Terms Say About Bots, and What Instinct Email Changes
The single “bot” in the document appears in the acceptable-use list. Users may not “use automation software (bots), hacks, modifications (mods) or any other unauthorized third-party software designed to modify the Services”.
The asymmetry
Instinct’s product is automation software that visits other companies’ services, creates accounts on them and now emails them from an Instinct email address it controls. Instinct’s own Terms forbid you from pointing automation software at Instinct. The same clause also bars using “any robot, spider, crawler, scraper or other automated means” to collect data from the Services.
That is not hypocrisy — every platform writes this, and a company is entitled to protect its own surface. It is worth naming because the whole agent economy runs on it. The rules that make an agent useful on someone else’s site are the rules the agent’s own operator will not accept on theirs. There is no reciprocity clause in either document.
What robots.txt says
Instinct’s robots.txt is, by contrast, generous. It explicitly allows Googlebot, Bingbot, Applebot, OAI-SearchBot, ChatGPT-User, PerplexityBot, Claude-SearchBot and Claude-User, then allows everything else by default. Search and answer engines are welcome. The prohibition in the Terms is on automation that acts, not automation that reads.
They Rewrote These Terms in 48 Hours Once Before
The most useful evidence about how quickly the Instinct email terms could be updated is that this paperwork has already been rewritten once, at speed.
The August backlash
On 24 August, TechCrunch reported that testers were circulating screenshots of Instinct’s Terms of Service. The clauses in question granted Instinct a “perpetual and irrevocable” licence to “access, use, host, cache, store, reproduce, transmit, display, publish, distribute, and modify” a user’s materials, including for training its models, and described receiving screen captures, cursor movements and keyboard inputs from users’ devices.
What the document says today
Both legal pages carry the date 26 August 2026 — two days after that report. In the version live now, “perpetual” appears zero times. So does “irrevocable”. So do “screen captures”, “cursor” and “keyboard”.
What replaced them is narrower and, in one respect, better: materials added to Instinct’s Vault “will not be used to train AI models“, there is a documented opt-out at app.instinct.com/settings, and the training language is now tied to improving the service. The opt-out has a carve-out — flagged material can still be used for safety review, and models already trained on your data stay trained.
Why this matters for the Instinct email question
The company demonstrated, in 48 hours, that it will rewrite its terms when the gap between the document and the product becomes publicly embarrassing. Thirteen days after that rewrite it shipped an agent-owned mailbox, and the document did not move. The absence of email language is not a drafting speed problem. It is a choice about what needed covering.
What the Privacy Policy Says That the Terms Do Not
The two documents share a date and a legal entity but not a vocabulary, and the gap between them is instructive.
“Autonomous” appears five times — none of them in the Terms
The Privacy Policy calls the product an “autonomous personal assistant” in its opening sentence and uses the word five times. The Terms of Service use it zero times. The document that describes what the software is and the document that says who pays when it goes wrong are not describing the same thing in the same language.
The risks it names out loud
The Data security section is the most candid paragraph either document contains. It warns that agent features “may present additional privacy and security considerations”, then lists them: “the possibility of unintended actions (including unintended payments or communications to outside parties), incorrect or incomplete outputs, and interactions with third parties who may include misleading instructions intended to influence autonomous agents.”
That last clause is prompt injection, described accurately, in a consumer privacy policy. It remains an unsolved cybersecurity problem, and naming it in plain language for consumers is more than most vendors manage. “Unintended communications to outside parties” is a plain description of the new failure mode an Instinct email address introduces. The policy names it. The Terms do not, and the Terms are the document that decides who absorbs it.
Where the Instinct email actually goes
The Privacy Policy also confirms that third parties the agent interacts with “(including autonomously)” receive information, and that the assistant can reach “the content of your messages, emails, and other private communications”. Instinct advises you to “review actions taken by the personal assistant” and “remain attentive”. That is sound advice, and it sits awkwardly beside a feature whose stated benefit is that mail no longer clutters your inbox.
What an Instinct Email Address Means on the Other End
Every account an Instinct email address opens lands in some business’s customer database, and that business has no way to know.
The Instinct email obscurity problem
TechCrunch put it plainly: for businesses trying to build a relationship with a customer, an agent-managed account “would provide a layer of obscurity as to who they’re actually dealing with”. A restaurant answering a special request, a retailer processing a return, a service handling a signup — each is corresponding with software, from an address that gives no signal, with no header or protocol marking it as machine-operated.
The volume problem is already real
This is not hypothetical. Inc. reported that the restaurant platform Resy deactivated a user after their automated assistant made 200 requests an hour. Rate limits and abuse systems are tuned for human cadence. An address that a business cannot identify as automated is an address it can only respond to after the fact — by banning the account, which means banning the person.
What a business can actually do
Very little, technically, and that is the point worth sitting with. There is no standard for declaring agent-operated mail. The practical options today are behavioural: watch for request rates no person could produce, treat account creation from unfamiliar domains as higher-friction, and decide deliberately whether agent-mediated customers are ones you want. Some businesses will conclude they are — an intelligent automation pipeline that reliably books appointments is a good customer. Others will not.
| Date | Announcement | What it extended | Views on X |
|---|---|---|---|
| 28 Aug 2026 | Stripe partnership | Payments | 510,841 |
| 4 Sep 2026 | 1Password integration | Credentials | 336,434 |
| 5 Sep 2026 | Location sharing | Position and history | 353,673 |
| 8 Sep 2026 | Instinct email address | Its own identity | 149,495 |
The email announcement drew the least attention of the four, at 29% of the Stripe post’s reach. It was also the newest when these figures were read, so the gap will narrow. The ordering is still worth noting: the capability that gives the agent an identity of its own landed more quietly than the one that gave it a card.
The Website Behind the Instinct Email Feature Is One Page
A small detail rounds out the picture of a company shipping the Instinct email faster than it documents it.
The sitemap
Instinct’s sitemap.xml declares exactly one URL: the homepage. The Terms of Service and Privacy Policy both exist and both return full documents, but neither is listed. Every other path we probed — /security, /docs, /pricing, /about, /blog, /legal, /acceptable-use, /dpa — returns the single-page application shell, which is a soft 404. There is no security page, no documentation, no acceptable-use policy at its own address, and no data processing agreement.
What that implies
For a consumer product still handing out access in waves, this is unremarkable. For a product that now issues email identities to software acting with stored credentials and a payment method, the documentation surface is thinner than the capability surface by a wide margin. The company is 23-year-old founder Noah Shinn’s, previously a research scientist at Sierra, and it went from roughly $100 million to $2.5 billion in weeks. TechCrunch reported the round at $350 million; several other outlets reported it as a $250 million Series B.
What to Check Before You Claim an Instinct Email Address
None of the above says do not claim an Instinct email address. Agentic tooling of this kind is genuinely useful, and the honest parts of Instinct’s own privacy policy suggest a company that is not hiding the risks so much as documenting them in the wrong file. If you are claiming an address, these are the things worth doing deliberately.
Decide what the agent may sign you up for
The agency clause is the one with teeth. Anything the assistant agrees to on your behalf binds you. Before the Instinct email address starts registering accounts, form a view on which services you are content to be contractually bound to without reading the terms yourself.
Check the other side’s rules first
You carry the compliance risk. If you intend the agent to operate accounts on a platform whose terms prohibit automated access, that is your exposure, not Instinct’s — and enforcement usually means losing the account.
Set the ceiling you are comfortable with
The $100 cap is the practical limit of recovery from Instinct. Size the payment method, the credential scope and the account access you grant against that number rather than against the company’s valuation.
Use the opt-out that exists
Materials in the Vault are excluded from model training by default, and there is a general training opt-out at app.instinct.com/settings. Both are documented in the Terms. Use them if you want them; they only apply going forward.
Watch what the Instinct email receives
The stated benefit of an Instinct email address is that agent correspondence stays out of your inbox. That is also the mechanism by which you stop seeing what is being said in your name. Instinct’s own advice is to review the assistant’s actions and remain attentive, which is harder when the design goal is that you do not have to.
Where This Goes Next
Giving software its own Instinct email address is a small feature and a large precedent. It is the point at which an assistant stops borrowing your identity and starts holding one. The Instinct email rollout is the first mainstream consumer example, and it arrived thirteen days after a terms revision that did not anticipate it, governed by a document whose three uses of the word “email” all describe mail arriving in a human’s inbox.
The Instinct email gap will close. Either Instinct revises the Terms — it has form, and it moved in 48 hours last time — or the questions get answered somewhere less convenient, by a business that banned a customer it could not identify or a user bound to an agreement they never saw. The counting exercise in this article took an afternoon and needed no access to anything private. Anyone can do it to any artificial intelligence product before trusting it: read what the company published, count what it left out, and notice which document the risks ended up in.
References and Further Reading
TechCrunch — Viral AI assistant Instinct now has its own email address
TechCrunch — Instinct’s powerful AI assistant is raising privacy and security concerns
TechCrunch — Viral AI startup Instinct has raised $350 million at a $2.5 billion valuation
Instinct — Terms of Service, last revised 26 August 2026
Instinct — Privacy Policy, last revised 26 August 2026
Noah Shinn — the email address announcement
Noah Shinn — the 1Password credential partnership
Noah Shinn — the Stripe payments partnership
More AI coverage: explore Progressive Robot's AI Models, Tools & Releases hub — hands-on reviews, setup guides and benchmarks in one place.