Privacy Policy

Last updated: March 23, 2026

Overview

ADO Attach is an Outlook add-in that attaches emails to Azure DevOps work items. It runs entirely in your browser or Outlook client — there is no backend server, and no data is sent to the add-in developer.

Data collected

The add-in does not collect, store, or transmit any personal data to third parties. Specifically:

• No analytics or telemetry is collected.
• No cookies are set by the add-in.
• No user data is sent to the add-in developer or any third-party service.

Data processed locally

When you use the add-in, the following data is processed entirely within your browser or Outlook client:

• Email content — exported as an .eml file via Office.js and sent directly to your Azure DevOps organization.
• Azure DevOps credentials — your Personal Access Token (PAT) or Microsoft Entra ID OAuth token is used to authenticate with Azure DevOps. PATs are stored in Outlook's roaming settings (synced by Microsoft, not by this add-in). OAuth tokens are managed by MSAL.js and stored in browser session storage.
• Connection settings — your Azure DevOps organization URL and project name are stored in Outlook's roaming settings.

Third-party services

The add-in communicates directly with:

• Azure DevOps (dev.azure.com) — to fetch work items and upload email attachments, using credentials you provide.
• Microsoft Entra ID (login.microsoftonline.com) — only if you choose the Entra ID sign-in method, to authenticate via OAuth.

These communications go directly from your client to Microsoft's services. No data passes through any intermediary server operated by the add-in developer.

Data retention

The add-in does not retain any data. Settings stored in Outlook roaming settings are managed by Microsoft and can be cleared by removing the add-in.

Children's privacy

This add-in is not directed at children under 13 and does not knowingly collect data from children.

Changes to this policy

Updates will be posted on this page with a revised date.

Contact

Questions about this policy can be directed to the project's GitHub Issues page.