Updated on March 11, 2022
The protection of your personal information is our priority. We want you to feel safe while using our apps and add-ins. However, add-ins would not work if we didn't collect certain data. On this page, you can find detailed information on what data we collect, how we protect it, and where we store it.
When you create an account, you enter your name, username, email address, password and subscription plans. We collect this information so that you could log in to your account.
While creating a template, you enter its name, description and contents. All this information is saved so you could use your templates.
We save the names of your teams, descriptions, members, their email addresses and permissions.
We collect log files only locally, on your computers. In the logs, we save only technical information that may help us provide you with technical support service or fix technical issues. We do not send these logs to any servers or services, but we may ask you to send your local logs to our technical specialists to help us reproduce or resolve your issue.
When you contact our customer support service, we keep all your email and chat messages.
Your use of our products does not give us access to any sensitive personal data stored in your Microsoft account, such as physical address or credit card details.
Working with Shared Email Templates, you may see the following permission requests:
Shared Email Templates can read or modify the contents of any item in your mailbox and create new items. It can access personal information, such as the body, subject, sender, recipients, or attachments, in any message or calendar item. It may send this data to a third-party service.
You can start Shared Email Templates only when composing or replying to a message. In this case, the add-in has access to reading or modifying the current opened message only. We do not do anything else with your Outlook data and do not need any other permissions, but unfortunately we cannot request only the permissions we need, this is technically impossible.
If in your templates, you use files that are located in OneDrive or SharePoint, Shared Email Templates will need access to read them. If you upload your files via the add-in UI, we need access to write in them. All operations are performed within Microsoft Office Graph services, we do not collect or store any data from your files.
When you use macros that involve OneDrive or SharePoint files for the first time, you may see a consent screen with the permissions it requires to work:
Allows Shared Email Templates to read basic information from your profile. The reason why we ask for this permission is that the other permissions (listed below) cannot be granted without it.
Allows Shared Email Templates to read files from your OneDrive and upload files from your local storage to your OneDrive.
Allows Shared Email Templates to read files from your SharePoint and upload files from your local storage to your SharePoint.
Allows Shared Email Templates to access data in your OneDrive or SharePoint. This permission must be requested according to Microsoft requirements although this permission itself is not necessary for Shared Email Templates.
Initially, Shared Email Templates was developed by Add-in Express PLLC but now this product belongs to and is managed by Ablebits.com. We continue using the Add-in Express PLLC account in order not to interrupt our current users' work. Unfortunately, Microsoft does not provide an opportunity to transfer products between different vendors' accounts on Office Store.
All your templates are stored in a cloud-based database hosted by Amazon Web Services. This is a protected storage inside an isolated private network. All data can only be accessed through the template sharing service, the core back-end service of Shared Email Templates.
When you create an encrypted team, you are the only person who knows the Team Password. Be sure to pass the password to your teammates in a safe way. In encrypted teams, all templates are encrypted with the SHA-256 symmetric algorithm before being saved to the cloud database.
Also, we store local copies of your templates (the local templates cache) in the following locations on your devices:
The local templates cache is isolated and not accessible by other browser extensions or Outlook add-ins. We store the local templates cache unencrypted because of the performance reasons - otherwise, we would have to decrypt templates each time you start Shared Email Templates, which would dramatically increase its startup time.
The local templates cache is refreshed with each change in templates, e.g. if your teammate creates a new template, the new template goes to the cache.
We do not collect any analytics data and data about your devices and software. We do not track your actions by using tracking technologies or telemetry. Also, we do not sell or pass your personal data to any 3rd parties.
You may find that Microsoft Office telemetry is run together with the Shared Email Templates app and add-in. This is because we use Microsoft's office.js framework.
This clause refers your personal data, i.e. your name, username, email address, teams, subscriptions and orders.
We develop and test our products on specially created testing configurations, so access to your data is very limited and only a few people at our office have permissions.
Full access (provided on request) is given to a couple of our core developers and only in case they need to figure out some complex technical thing.
Read-only access is provided to our senior system administrator to perform online monitoring and periodic maintenance of our servers and services.
Read-only access is also given to our technical support engineers and sales specialists. They need your data to assist you when you contact us with related questions.
We make a lot of effort to keep your data safe. Firstly, we restrict physical access to our office and to our computers with door locking, access control systems, alarm system and surveillance facilities. Secondly, we restrict access to our systems by using central management of system access, no guest accounts policy, password and authentication policies.
Also, we control access to data with the help of differentiated access rights, access rights defined according to duties, measures to prevent the use of automated data-processing systems by unauthorized persons.
To prevent unauthorized access, data alteration and disclosure, all our communication channels are encrypted using virtual private networks for remote access, transport and communication of data. All our sub-networks are joined into a wholly-owned private network. Finally, all our computers are protected with antivirus software and firewall systems.
To remove your data, simply delete all the teams where you are the administrator, and then remove your account in the Profile section. To have all your communications with us removed from our systems, please contact our technical support service.
You can see all the information that is sent to our services and storages with your own eyes with the help of the Fiddler tool or your browser console. Also, you can inspect our client-side source code directly in your web browser.