Contacts Manager: privacy
DRAFT for review. Not yet approved for publication.
The short version
Contacts Manager is a web page that runs in your browser. It reads and changes your own Microsoft 365 contacts after you sign in. Wholistic Business Solutions does not receive, see or store your contacts, your backups or your sign-in tokens.
Where your data goes
- Contacts travel directly between your browser and Microsoft 365 (Microsoft Graph). They are held in your browser's memory while the page is open and are gone when you close it.
- Sign-in is handled by Microsoft. The access token is kept in your browser's session storage for this tab only and is cleared when you close it.
- Backups are files saved on your own PC, in a folder you choose or your Downloads folder. If that folder is synced (for example to OneDrive), your sync provider holds a copy under your own agreement with them.
- Preferences (column layout, sort order, contacts you marked "not duplicates") and the backup folder choice are stored in your browser on your PC.
What we do receive
The pages are served by Cloudflare (Cloudflare Pages) as plain files. Like any website, Cloudflare processes your IP address and browser details to deliver the page and protect it from abuse. The app has no analytics, no tracking cookies and no server of its own.
Permissions
User.Read (your name and email, to show who is signed in and to label backups) and Contacts.ReadWrite (your own mailbox contacts). The app cannot reach anyone else's mailbox, your email or your files.
Your choices
Sign out at any time. Delete backups from your backup folder. Your administrator can remove the app from your organisation in the Entra admin center.
Who we are
Wholistic Business Solutions. For our Information Officer and how to contact us under POPIA, see wholistic.group/privacy.