🔒 Privacy Policy

Last updated: June 2025

1. What Check-it Does

Check-it is an Outlook add-in that helps you triage unread emails by scanning, prioritizing, summarizing, and replying to them. It runs entirely in your browser — no data is sent to or stored on any external server.

2. Data We Access

When you sign in, Check-it requests the following Microsoft Graph permissions:

• Mail.Read — to read your unread emails for scanning and summarization
• Mail.Send — to send replies on your behalf when you use the Quick Reply or Auto-Reply features

These permissions are delegated, meaning Check-it can only access data that you, the signed-in user, have access to.

3. Data We Store

Check-it stores the following data locally in your browser (localStorage):

• Your folder preference (which folder to scan)
• Your license key (if you have a Pro license)
• Daily usage counters (scans, summaries, replies)
• Authentication tokens (managed by Microsoft's MSAL library)

We do not store any email content, email addresses, or personal data on any server.

4. Data We Share

We do not share, sell, or transmit any of your data to third parties. All processing happens client-side in your browser.

5. Third-Party Services

• Microsoft Graph API — used to read emails and send replies. Governed by Microsoft's Privacy Statement.
• GitHub Pages — hosts the add-in's static files. No user data is collected by GitHub Pages.

6. Security

All communication between Check-it and Microsoft Graph uses HTTPS encryption. Authentication is handled by Microsoft's MSAL library using OAuth 2.0 with PKCE, the industry standard for secure browser-based authentication.

7. Your Rights

You can revoke Check-it's access at any time:

• Go to myaccount.microsoft.com/permissions
• Find "Check-it" and click Revoke

You can also clear all locally stored data by clearing your browser's localStorage for this site.

8. Contact

If you have questions about this privacy policy, contact us at support@checkit-addin.com.