Chronodat Mailroom Privacy Policy

Effective date: 15 September 2026. Publisher: Chronodat LLC.

This privacy policy describes how Chronodat Mailroom (“Mailroom”), an Outlook add-in and Microsoft 365 service from Chronodat LLC, handles personal information. It applies to the Mailroom add-in hosted at https://mailroom.chronodat.com/ and to related Chronodat licensing for Mailroom. The company-wide Chronodat policy is also published at https://www.chronodat.com/Privacy.

What Mailroom is

Mailroom is an Outlook task pane that files, finds, and shares Microsoft 365 content. Users open Mailroom from Outlook on Windows, Mac, the web, or Outlook mobile (read). Mailroom reads the selected mailbox item through Office.js and writes files and metadata to SharePoint, OneDrive, and Microsoft Teams files libraries through Microsoft Graph using the signed-in user’s delegated permissions.

Personal information Mailroom processes

Mailroom processes the following personal information in order to provide the service:

• Account identity: display name, mailbox email address, and Microsoft Entra tenant ID — used to sign in, show who is connected, and check the Chronodat subscription for Mailroom.
• Mailbox content the user chooses to file: subject, recipients, body, attachments, and related item metadata. This content is read in the user’s browser or Outlook host and uploaded to a library the user selects in that user’s Microsoft 365 tenant. Chronodat does not store message bodies or attachments on Chronodat servers.
• Access tokens: short-lived Microsoft Graph tokens kept in the browser session so Mailroom can call Graph on the user’s behalf. Mailroom does not persist refresh tokens on Chronodat infrastructure.
• Preferences: settings, favorites, filing rules, and optional audit events in browser storage and, when enabled, in the user’s OneDrive app folder (Apps/Filer) or a SharePoint library the customer chooses.
• Licensing and billing: tenant ID, user email, and site or tenant identifiers sent to Chronodat at subscription.chronodat.com and to Stripe for checkout, invoices, and subscription status. Those services do not receive message bodies or file bytes.

Chronodat does not sell, rent, or trade personal information collected through Mailroom. We do not use mailbox content for advertising. Destination suggestions run locally in the browser against the user’s own locations and can be turned off in Settings.

Where content is stored

Email and document content filed with Mailroom is stored in the customer’s Microsoft 365 tenant (SharePoint Online, OneDrive, or Microsoft Teams files). Optional organization policy and audit JSON are stored in a library the customer chooses or in the user’s OneDrive app folder. Mailroom does not operate a vendor-side store for customer mail or files.

Licensing and billing

Subscription status, checkout, and invoices for Mailroom are processed by Chronodat LLC at subscription.chronodat.com and Stripe. Those services receive tenant ID, user email, and related billing identifiers — not message bodies or attachments.

Telemetry

When enabled, operational telemetry is limited to anonymous event names such as email_saved. Message bodies, recipients, and file bytes are not included. Users can turn this off in Settings.

How we protect personal information

Mailroom uses HTTPS, Microsoft Entra ID authentication, and the user’s existing Microsoft 365 permissions. Chronodat applies reasonable administrative and technical safeguards against loss, theft, unauthorized access, disclosure, copying, use, or modification of the limited licensing data we process. You may revoke consent by removing the add-in and, with your administrator, withdrawing Microsoft Graph consent for Chronodat Mailroom in Microsoft Entra ID.

Contact

Privacy questions about Chronodat Mailroom: privacy@chronodat.com. Support: Mailroom support or https://www.chronodat.com/contact.