Updated on March 24, 2021
The protection of your personal information is our priority. We want you to feel safe while using our apps and add-ins. However, add-ins would not work if we didn't collect certain data. On this page, you can find detailed information on what data we collect, how we protect it, and where we store it.
When you create an account, you enter your name, username, email address, password and subscription plans. We collect this information so that you could log in to your account.
While creating a template, you enter its name, description and contents. All this information is saved so you could use your templates.
We save the names of your teams, descriptions, members, their email addresses and permissions.
We use cookies to recognize you as a user and log you in automatically when you return to the Shared Email Templates app or the Shared Email Templates add-in.
We collect log files only locally, on your computers. In the logs, we save only technical information that may help us provide you with technical support service or fix technical issues. We do not send these logs to any servers or services, but we may ask you to send your local logs to our technical specialists to help us reproduce or resolve your issue.
When you contact our customer support service, we keep all your email and chat messages.
Your use of our products does not give us access to any Personal Data stored in your Microsoft account, such as name, email address, physical address, or credit card details.
Working with Shared Email Templates, you may see the following permission requests:
Shared Email Templates can read or modify the contents of any item in your mailbox and create new items. It can access personal information, such as the body, subject, sender, recipients, or attachments, in any message or calendar item. It may send this data to a third-party service.
If in your templates, you use files that are located in OneDrive or SharePoint, Shared Email Templates will need access to read and write back to them. The records are processed within Microsoft Office Graph services, we do not collect or store any data from your files.
When you use macros that involve OneDrive or SharePoint files for the first time, you may see a consent screen with the permissions it requires to work:
Allows Shared Email Templates to read your profile.
Allows Shared Email Templates to read, create, update and delete all files you can access.
All your templates are stored in a cloud-based database hosted by Amazon Web Services. This is a protected storage inside an isolated private network. All data can only be accessed through the template sharing service, the core back-end service of Shared Email Templates.
When you create an encrypted team, you are the only person who knows the Team Password. Be sure to pass the password to your teammates in a safe way. In encrypted teams, all templates are encrypted with the SHA-256 symmetric algorithm before being saved to the cloud database.
Also, we store local copies of your templates (the local templates cache) in the following locations on your devices:
The local templates cache is isolated and not accessible by other browser extensions or Outlook add-ins. We store the local templates cache unencrypted because of the performance reasons - otherwise, we would have to decrypt templates each time you start Shared Email Templates, which would dramatically increase its startup time.
The local templates cache is refreshed with each change in templates, e.g. if your teammate creates a new template, the new template goes to the cache.
We do not collect any analytics data and data about your devices and software. We do not track your actions by using tracking technologies or telemetry. Also, we do not sell or pass your personal data to any 3rd parties.
You may find that Microsoft Office telemetry is run together with the Shared Email Templates app and add-in. This is because we use Microsoft's office.js framework.
This clause refers your personal data, i.e. your name, username, email address, teams, subscriptions and orders.
We develop and test our products on specially created testing configurations, so access to your data is very limited and only a few people at our office have permissions.
Full access (provided on request) is given to a couple of our core developers and only in case they need to figure out some complex technical thing.
Read-only access is provided to our senior system administrator to perform online monitoring and periodic maintenance of our servers and services.
Read-only access is also given to our technical support engineers and sales specialists. They need your data to assist you when you contact us with related questions.
We make a lot of effort to keep your data safe. Firstly, we restrict physical access to our office and to our computers with door locking, access control systems, alarm system and surveillance facilities. Secondly, we restrict access to our systems by using central management of system access, no guest accounts policy, password and authentication policies.
Also, we control access to data with the help of differentiated access rights, access rights defined according to duties, measures to prevent the use of automated data-processing systems by unauthorized persons.
To prevent unauthorized access, data alteration and disclosure, all our communication channels are encrypted using virtual private networks for remote access, transport and communication of data. All our sub-networks are joined into a wholly-owned private network. Finally, all our computers are protected with antivirus software and firewall systems.
To remove your data, simply delete all the teams where you are the administrator, and then remove your account in the Profile section. To have all your communications with us removed from our systems, please contact our technical support service.
You can see all the information that is sent to our services and storages with your own eyes with the help of the Fiddler tool or your browser console. Also, you can inspect our client-side source code directly in your web browser.
Responses
Why would this app collect and send information about my emails and calendar items and send them to a third party? Who is the third party? And why are you collecting and sending them my personal information? This seems to fly in the face of everthing you say about protecting privacy.
Hello Janet,
Thank you for your comment. The only third party that can get access to your data is Microsoft itself because our add-in is built on Microsoft Office extensibility technology and your Outlook account should be connected to Microsoft 365, Exchange Online, or Outlook.com. I think we need to clarify this point and update our privacy policy. Thank you once again for sharing your feedback with us.
Hi,
I was wondering the routine for restoreing missing templates? and how is the backup routine on your end? can i be sure my data won't be lost?
Hi Maren,
Thank you for your questions. The Trash folder as well as the Export / Import feature are on our roadmap for upcoming beta releases. As for the backup routine, we use a cloud-based database with its own backup scheme in Amazon Web Services.