Phishport Outlook Add-in Privacy Policy

This policy describes how the Phishport Outlook add-in and the connected Phishport service process data when a user signs in and scans an email.

Data We Process

Microsoft identity data needed to authenticate the user, such as subject identifier, display name, tenant metadata, and email address when Microsoft provides it.
The currently open email message exported as raw EML when the user explicitly starts a scan.
Derived analysis output, including verdict, reasons, suspicious URL findings, suspicious attachment findings, and quota usage state.

How We Use Data

Authenticate the Outlook add-in user.
Run phishing analysis and return results in the task pane.
Prevent duplicate processing and enforce beta usage quotas.
Investigate service abuse, failures, and support requests.

Operational Notes

The add-in only sends the message currently selected by the user for analysis. The Phishport service may retain scan metadata and verdict state for operational, anti-abuse, and support purposes. Contact support if you need help regarding your data.