SearchFlow reads your Microsoft 365 mail and documents with read-only permission (Mail.Read, Files.Read.All, Sites.Read.All). It never sends, changes or deletes anything.
What it reads: every mail folder of each signed-in account, the text of pdf and Office attachments, your OneDrive and team-site documents, and the file-server folders you add. File-server folders are read on your PC only.
The index is built and kept on your PC, in the app's data folder. There is no central copy: our server never receives your mail or your documents.
You sign in with Microsoft. The sign-in token stays on your PC.
The app sends its own log to our server every 5 minutes: its install id, its version, the domain of the signed-in accounts (not the address) and what synced when (folder names and counts, errors). Not your mail, not your documents, not what you searched, not what you asked. We keep it 14 days.
The website uses Microsoft Clarity to see how its pages are used: which parts are read and where people click. It sets no cookies unless you agree to them, and what you type is masked. Microsoft processes that data under its own privacy statement.
When you ask a question (Ask), the question and the mail and document text the model reads to answer it go to OpenAI with storage turned off: OpenAI keeps no copy of the conversation. OpenAI may hold what it receives for up to 30 days for abuse monitoring and does not train on it.
Nothing is sold or shared with anyone else.
The form on this site goes through Formspree to us: your name, work e-mail, company and message.
To stop: remove an account in Settings and its mail, documents and sign-in token are deleted from the PC. Uninstalling removes the program but not the data folder; delete %LOCALAPPDATA%\DomusSearch yourself and the index is gone.
DomusFlow BV, Belgium, VAT BE 0750792272. Questions: sales@domusflow.io.