Privacy focused mail merge add-in to for Outlook that let's you send personalized emails to a list from within the Outlook context without sending any data to a third party server..
What is the hosting environment or service model used to run your app?
Paas
Which hosting cloud providers does the app use?
Azure
Questions
Questions or updates to any of the information you see here? Contact us!
How the app handles data
This information has been provided by Sol Inventum OÜ about how this app collects and stores organizational data and the control that your organization will have over the data the app collects.
Information
Response
Does the app or underlying infrastructure process any data relating to a Microsoft customer or their device?
Yes
What data is processed by your app?
The add-in reads Outlook contacts and categories and it sends Outlook mails. All done via MS Graph, but no data is ever transferred away from the user's computer.
Does the app support TLS 1.1 or higher?
Yes
Does the app or underlying infrastructure store any Microsoft customer data?
Yes
What data is stored in your databases?
If the user does not purchase a license we store nothing at all. Only if they purchase a license we store the object id, tenant id and email. Payment information is handled only by our third party payment providers (Paddle and Microsoft).
If underlying infastructure processes or stores Microsoft customer data, where is this data geographically stored?
Netherlands (the), Ireland
Do you have an established data rentention and disposal process?
Yes
How long is data retained after account termination?
More than 90days
Do you have an established data access management process?
Yes
Do you transfer customer data or customer content to third parties or sub-processors?
No
Questions
Questions or updates to any of the information you see here? Contact us!
Does the app perform automated decision making, including profiling that could have a legal effect or similar impact?
No
Does the app process customer data for a secondary purpose not described in the privacy notice (i.e. marketing, analytics)?
No
Do you process special categories of sensitive data (i.e. racial or ethnic origin, political opinion, religious or philosophical beliefs, genetic or biometric data, health data) or categories of data subject to breach notification laws?
No
Does the app collect or process data from minors (i.e., individuals under the age of 16)?
No
Does the app have capabilities to delete an individual's personal data upon request?
N/A
Does the app have capabilities to restrict or limit the processing of an individual's personal data upon request?
N/A
Does the app provide individuals the ability to correct or update their personal data?
N/A
Are regular data security and privacy reviews performed (for example, Data Protection Impact Assessments or privacy risk assessments) to identify risks related to the processing of personal data for the app?
N/A
Questions
Questions or updates to any of the information you see here? Contact us!
Information
Response
Does your application integrate with Microsoft identity platform (Microsoft Entra ID) for single-sign on, API access, etc.?
Yes
Have you reviewed and complied with all applicable best practices outlined in the Microsoft identity platform integration checklist?
Yes
Does your app use the latest version of MSAL (Microsoft Authentication Library) or Microsoft Identity Web for authentication?
Yes
Does your app support Conditional Access policies?
No
Does your app support Continuous Access Evaluation (CAE)
No
Does your app store any credentials in code?
No
Apps and add-ins for Microsoft 365 might use additional Microsoft APIs outside of Microsoft Graph. Does your app or add-in use additional Microsoft APIs?
No
Data access using Microsoft Graph
Graph Permission
Permission Type
Justification
Microsoft Entra App ID
Calendars.Read.Shared
delegated
In order to read categories from shared mailboxes this permission is required (as per a Microsoft support case we opened).
We read the categories (masterCategories) for the current user and shared mailboxes that the user has access to (for creating mail merges from Contacts).