Privacy Policy

Last updated: 2026-07-04. This is a plain-English summary of how OutlookDog handles your data; it will be expanded before general availability.

The short version

OutlookDog asks for permission to read your email because no email assistant can work without it. Here is the deal we make with that access: your mail is never stored on our servers, never sold, and never used to train AI models. The add-in runs inside your own Outlook. When you use an AI action, your message text is sent for processing in that moment — directly to your own AI provider if you bring your own key, or through our encrypted relay to Microsoft Azure OpenAI — and nothing is kept afterwards except a usage count.

What OutlookDog reads

To do its job, OutlookDog reads the message you have open (subject, body, sender, attachment names, and message headers). If you use Scan & categorize inbox, it also reads your recent inbox messages — that data flows directly between your Outlook and Microsoft's own service (Microsoft Graph) and never touches OutlookDog's servers. The optional sender-history signal ("first message from this sender") likewise queries your own mailbox via Microsoft Graph directly.

Two AI lanes

Bring your own key (BYO): your message goes directly from the add-in to your chosen AI provider. It never passes through or is stored on OutlookDog's servers. Your key is stored in your own mailbox settings (so it roams with your account) and is sent only to the provider you chose — never to OutlookDog's servers.

OutlookDog-AI (managed): your message is sent over an encrypted connection to our backend, which relays it to Microsoft Azure OpenAI to generate the result, and returns it to you. OutlookDog never stores your message content, and it is never used to train any models. As part of Microsoft's Azure OpenAI service, prompts may be retained by Microsoft for up to 30 days solely for abuse monitoring, after which they are deleted. We retain only usage counts and the account details described below.

Link safety checks

To warn you about known-dangerous links, OutlookDog may check the web addresses (URLs) found in a message against Google Safe Browsing via our backend. Only the URLs are sent — never the message text, subject, or sender.

Feedback

If you tap 👍/👎 on a result, we record the rating and which labels were on screen at the time (for example "Marketing" or "Suspicious") so we can improve accuracy — never the message itself.

Your account

When you sign in with Microsoft, we store your account email address and name to operate your account, enforce free-tier limits, and send you occasional product updates (for example, new features or upgrade options during Beta). We never sell it or use it for third-party advertising. You can opt out of product emails anytime by emailing support@outlookdog.com.

Data retention & deletion

We keep usage counts and your account email and name while your OutlookDog account is active, to run the service and contact you about it. You can access or delete your data, or unsubscribe from product emails anytime by emailing support@outlookdog.com; we'll action deletion requests promptly.

What we never do

We never sell your data, never store your email content, and never delete, move, or send mail on your behalf.

Contact

Questions: support@outlookdog.com.