Open the Calendar panel → Connect Outlook. Microsoft prompts you to grant calendar and mail access (read/write calendar, read mail, and send mail). We store only an OAuth refresh token, encrypted with AES-256-GCM at the column level — even if our database leaked, your Outlook account stays safe.

We read calendar events to surface deadlines, and we classify incoming mail by matter. We never send mail from your account unless you explicitly compose a message and click Send.

To revoke, click Disconnect Outlook in the Calendar panel — the stored tokens are deleted immediately. You can also revoke access at your Microsoft Account.