Effective October 30, 2026
Privacy policy
CopierBridge is operated by Augment Inc., a Delaware corporation ("we"). This policy explains what we collect when you use CopierBridge, why, and what you can do about it. Questions: support@copierbridge.com.
What we collect
Your account: when you sign in with Microsoft, we receive your name, email address and the identifiers of your Microsoft user and organization.
Your connected mailbox: its address, and the access Microsoft grants us for it. The permissions we ask for are sending mail as that mailbox (SMTP.Send and Mail.Send), reading your basic sign-in profile (User.Read) and staying connected without a new sign-in (offline_access). None of them lets us read the mailbox's email.
Your devices: the names you give them and their sign-in passwords, which we store only as one-way hashes.
Delivery records: for each message, the device, the time, its size, how many recipients it had and Microsoft's result code; for a failed device sign-in, the connecting IP address. We do not store or log the contents of your email, its subject or who it was addressed to.
Billing: our payment processor (Stripe) handles your card. We see the plan, the number of devices billed and the payment status, never your card number.
How we use it
To deliver the email your devices send, through your own Microsoft 365 mailbox, as your devices instruct.
To show you your devices and their delivery results, to help when something fails, to bill you and to keep the service secure (for example, locking out repeated wrong passwords).
We do not sell your data, use it for advertising, or read the email passing through the service.
Who we share it with
Microsoft, which delivers your email. Our hosting providers: Vercel (this website and your dashboard) and Google Cloud (the relay server). Stripe, for payments. No one else, unless the law requires it.
How we protect it
Connections from your devices to us require TLS. Your mailbox's Microsoft access is encrypted at rest with AES-256-GCM, and the short-lived access Microsoft issues from it is kept in memory only. Email passes through memory for the seconds a send takes and is never written to disk.
How long we keep it
Disconnect a mailbox and we delete its stored Microsoft access at once. Delivery records are kept for 30 days. Your account and device records stay until you delete them or ask us to.
Your choices
Disconnect a mailbox or remove a device in your dashboard at any time. You can also remove our app in your organization's Microsoft Entra admin center, which ends our access on Microsoft's side.
To get a copy of your data or have it deleted, email support@copierbridge.com.
Changes
If we change this policy, we will update the date above and, for material changes, tell account holders by email before they take effect.