Information LensMail accesses
After sign-in, LensMail may access Microsoft account profile information and Outlook message metadata, message bodies, recipients, folders, attachment indicators, Focused Inbox classification, read state, and drafts required for the feature the user chooses.
Delegated permissions are openid, profile, offline_access, User.Read, Mail.ReadWrite, and Mail.Send.
How information is used
Mailbox information is used only to display and manage the signed-in user's Outlook mailbox. User-requested actions are sent directly to Microsoft Graph. LensMail does not sell personal information, use mailbox content for advertising, train AI models with mailbox content, or run third-party analytics.
Storage and data flow
The public Client ID, tenant selection, access token, refresh token, and account label are stored in the installed app's local Even Hub/WebView storage. LensMail does not ask for a Microsoft client secret. Mail content is held only as needed in the running interface; LensMail has no application database or developer-operated mail backend.
Microsoft sign-in uses static pages at https://auth.lensmail.net. LensMail sends short-lived PKCE context to the start page in a URL fragment, which is not transmitted to the hosting server. The start page holds it in tab-scoped session storage and gives Microsoft only a random state value. The callback exchanges Microsoft's authorization code in the user's browser, clears the temporary state, and returns the result to the local app. The host has no persistent token store.
External services and security
LensMail connects only to Microsoft identity, Microsoft Graph, and the LensMail callback domains declared in its Even Hub network permission. It uses Authorization Code with PKCE, validates OAuth state, limits callback age, and restricts callback returns to local LensMail origins. Microsoft and Even Realities process information under their own terms.
User choices and deletion
Users can clear Graph setup and locally stored sign-in information in LensMail, uninstall the app, and revoke consent through Microsoft. Mailbox actions already completed remain subject to Microsoft and organizational retention policies.
Children and changes
LensMail is intended for Microsoft 365 account holders and is not directed to children under 13. Material policy changes will appear on this page with a revised effective date.
Contact
Privacy, feedback, and support inquiries: support@lensmail.net.