Privacy notice

Last updated 16 October 2026

Cruz - Sabre Outlook Ingestion is operated by [Publisher legal name] ("we") for Sabre. This page explains what the app reads from Microsoft 365, how it is stored, and how to have it deleted.

What we access

Each person connects their own mailbox by signing in with their Sabre work account. The app uses Microsoft's delegated Mail.Read permission (read-only), plus the standard sign-in permissions (openid, profile, offline_access, User.Read). It cannot send, change, move or delete email, and it cannot read calendars, contacts or files.

What we copy

• Email messages, including subject, body, sender and To/CC/BCC recipients, dates and conversation identifiers.
• Attachments, and text extracted from them so they can be searched.
• Mail from every folder except Deleted Items, Junk Email, Drafts, Outbox, Conversation History and Sync Issues (and their subfolders). Archive and custom folders are included.
• For history, up to 3 GB per mailbox of the most recent mail; after that, new mail roughly every two hours.

Where it is stored and who processes it

• Copied mail is stored in a dedicated PostgreSQL database for Sabre, hosted by DigitalOcean in Singapore, reachable only from Sabre's dedicated server.
• Microsoft sign-in tokens are encrypted at rest with Fernet (AES-128 in CBC mode with an HMAC-SHA256 signature).
• Stored content may be processed by AI models provided by Anthropic to deliver Ask Cruz features to Sabre. Anthropic acts as our processor and does not use this content to train its models.
• We do not sell this data or share it with anyone else.

Disconnecting and deletion

To stop the app reading a mailbox, or to have a mailbox's copied data deleted, email eoxs.innovation@gmail.com. We confirm the request, delete the data and the stored sign-in token, and reply when it is done. You can also remove the app's access at any time from your Microsoft account's "Apps" page.