Privacy statement

Last updated 9 November 2026

i-ODO is an Outlook add-in from The Inforge Group Pty Ltd, trading as Inforge (ABN 19 703 550 850). It turns an email into an Azure DevOps work item and can keep later messages in that conversation on the work item. This statement explains what i-ODO reads, where it goes and what is stored. It adds to Inforge's Privacy Policy, which covers how Inforge handles personal information generally.

The short version

• i-ODO runs inside Outlook on your device. It sends email content from your mailbox to your own organisation's Azure DevOps, and nowhere else.
• Inforge runs no server that receives your email, your work items or your sign-in. Inforge can't see what you send.
• i-ODO has no analytics, advertising or tracking.

What i-ODO reads

• The email you have selected, when you open i-ODO on it: subject, body, sender, recipients, dates, attachments and its message and conversation identifiers.
• Other messages in a conversation you choose to track. If you turn on "Track all future messages in this conversation", i-ODO reads the later messages in that conversation from your own mailbox, including replies you send, so it can add them to the work item.
• The selected email's attachments and original file on Outlook for iOS and Android, where Outlook can't provide them to add-ins directly.
• Your Azure DevOps details: your name and email address, the organisations, projects, teams, team members, sprints, work item types, tags and work items you have access to, and the comments on work items linked to the selected email.

To read your mailbox for tracked conversations and on mobile, i-ODO uses Microsoft Graph with the delegated Mail.Read permission. Delegated means i-ODO can only read your own mail, only while you are using it, and only with your consent or your organisation administrator's. i-ODO never changes, sends or deletes mail through Microsoft Graph.

Where it goes

When you create a work item or a tracked conversation is updated, i-ODO sends the email content, its attachments and the message and conversation identifiers from Outlook directly to the Azure DevOps organisation you chose in i-ODO's settings. The data travels over encrypted connections between your device and Microsoft's services. It doesn't pass through Inforge.

What is stored, and where

• In Azure DevOps: the work items i-ODO creates, with the email's content and attachments, and comments recording each email's message and conversation identifiers and captured messages. Your organisation controls this data under its own Azure DevOps settings and agreement with Microsoft.
• In your mailbox: your i-ODO settings (organisation, project, team, default work item type and default tags), which follow you to other Outlook clients, and a small note on each email recording the work items created from it. Only you can see these.
• On your device: Microsoft's sign-in library keeps sign-in tokens in the add-in's browser storage so you aren't asked to sign in each time.

Inforge stores none of this.

Sign-in and permissions

You sign in with your work or school Microsoft account through Microsoft Entra ID. i-ODO asks for these permissions:

• Outlook: read the selected item.
• Azure DevOps: read your profile, and read and write work items.
• Microsoft Graph: sign you in and read your profile (User.Read), and read your mail (Mail.Read) for tracked conversations and mobile attachments.

Hosting

i-ODO's program files are served from addins.inforge.com.au, hosted on Microsoft Azure. Like any website, the hosting service may keep standard technical logs of requests for those files, such as IP addresses. These requests don't contain your email or work item content.

Your choices

• Remove i-ODO from Outlook at any time, or ask your administrator to. Your settings stay in your mailbox but are no longer used.
• Turn conversation tracking off for any work item, or leave it off. It is off unless you turn it on.
• Work items, comments and attachments created through i-ODO are managed and deleted in Azure DevOps by your organisation.
• Your administrator can review or revoke i-ODO's permissions in Microsoft Entra ID.

Questions and complaints

Contact Inforge's Privacy Officer at privacy@inforge.com.au. How we handle access requests and complaints, including how to contact the Office of the Australian Information Commissioner, is in our Privacy Policy.

Changes

If i-ODO starts handling information differently, we will update this statement before the change reaches users, and change the date above.