Privacy Policy

Envoa is operated by Kamsoft (kamsoft.tech) (“Envoa”, “we”, “us”). If your organisation deploys the Enterprise edition on its own infrastructure, that organisation is the data controller and its own privacy notice applies to the processing; we act only as a software provider. For the hosted Professional edition, we process data on your organisation’s behalf as described below.

When you sign in, Envoa uses delegated Microsoft Graph permissions scoped to your account:

• Mail.Read — to read the message you choose to save and its attachments.
• Files.ReadWrite.All and Sites.ReadWrite.All — to write saved items into the SharePoint libraries you pick, and to insert library files into outgoing mail.

Everything Envoa can reach is something you could already open in Outlook or SharePoint yourself. Envoa never has more access than you do.

No copy of your mail or files. Envoa holds no database of your messages, attachments, or documents. Content moves directly from Microsoft 365 to the SharePoint destination you choose, within your signed-in session.

We do keep a small amount of operational data to run the service:

• Your settings — save rules, filename templates, favourite destinations, and preferences you configure. These describe where things go; they do not contain your email content.
• An activity log — a record of save and insert actions (timestamp, actor, destination, item name) so administrators can audit filing. Retention is configurable by your administrator.
• Diagnostic and security logs — sign-in events and error traces, kept for a limited period to keep the service secure and working.

The Enterprise edition runs entirely on infrastructure your organisation hosts. In that case none of the data above reaches Envoa’s systems.

For the hosted Professional edition we process the operational data above to perform our contract with your organisation and for our legitimate interest in providing, securing, and improving the service. We do not use your data for advertising, and we do not sell it.

We share data only with infrastructure sub-processors that host the Professional edition service, under contract and only as needed to run it. We disclose data if required by law. We do not transfer your data to any other third party.

Settings persist until you or an administrator remove them or the account is deprovisioned. Activity-log retention is set by your administrator. Diagnostic logs are kept for a short, rolling window and then deleted.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. Because we process most data on your organisation’s behalf, please raise requests with your own IT administrator first; we will assist them in responding. You can also contact us directly using the details below.

We will update this page when the service changes and revise the “last updated” date above. Material changes will be communicated to organisation administrators.

Questions about this policy or your data: support@kamsoft.tech.