> For the complete documentation index, see [llms.txt](https://docs.tiny.plus/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tiny.plus/guides/integrations/office-365.md).

# Connecting Microsoft 365

Connect your Microsoft 365 or Outlook.com account to tiny+: what it asks for, what it reads and never reads, and how to disconnect.

Each person connects their own Microsoft account to tiny+. One connection gives you four things, each with its own switch:

* [Relationship capture](/guides/integrations/relationship-capture.md): tiny+ learns who in your firm corresponds with which contacts, and when, from the headers of your mail. A Pro plan feature.
* [Contacts sync](/guides/integrations/contacts-and-calendar-sync.md#contacts-sync): the contacts you work with, kept in one Outlook folder, both ways.
* [Calendar sync](/guides/integrations/contacts-and-calendar-sync.md#calendar-sync): your tiny+ meetings and events in one Outlook calendar, with changes coming back.
* [Tasks sync](/guides/integrations/contacts-and-calendar-sync.md#tasks-sync): the tiny+ tasks assigned to you in a Microsoft To Do list, both ways.

The [Outlook Add-in](/guides/integrations/outlook-add-in.md) is separate: it shows you what tiny+ knows about the people in an email while you read it, and files emails by choice. You can use either, or both.

## Prerequisites

1. A Microsoft 365 (Exchange Online) mailbox or an Outlook.com account. The connection doesn't work with an Outlook that reads mail from another kind of server.
2. In some organisations, approval from your Microsoft 365 administrator before you can allow an app yourself. If Microsoft's sign-in tells you that, see [For administrators](#for-administrators) below.

## Before you connect

Microsoft's consent prompt lists the access tiny+ asks for. One line says **Read your mail**. Here is what that means in tiny+, in the same words the connection screen shows you.

**What is read.** tiny+ never fetches the subject, body or attachments of any message. Relationship capture reads only the headers of your inbox and sent items: who a message was from and to, and when. For contacts sync, tiny+ reads and writes the contacts in one folder of your choosing. For calendar sync, it reads and writes the events in one calendar. For tasks sync, it reads and writes the tasks in one To Do list of its own.

**What is never read.** Message subjects, bodies, attachments or previews; contacts outside the folder you pick; calendars you did not pick; To Do lists other than its own; anyone else's mailbox.

**What is stored, and for how long.** For each message, the date, the direction and which tiny+ contact it matched, with the message named only by a hash. No subject, no text, and no address of anyone who is not already a contact in tiny+. Addresses of people who are not contacts are counted by domain for your Suggested contacts panel, never kept. Kept for 24 months, then removed. Your sign-in tokens are stored encrypted and are never written to a log.

**Who can see it.** People in your account who can already see the contact see when your firm last corresponded with them and by whom. Nobody sees what was said.

**How to turn it off.** Switch relationship capture off on the connection screen at any time, or press **Forget everything captured from my mailbox** to remove every record it made. **Disconnect** removes tiny+'s access to your account; you can also revoke it from your Microsoft account's app permissions.

## Connecting

Click the settings cog at the top right, choose **My Settings**, then **Microsoft 365** under Integrations. Read the text above, then click **Connect Microsoft 365**. Microsoft asks you to sign in and to allow the access; your password stays with Microsoft, and tiny+ only receives a token it can use on your behalf.

Once connected, the same page shows your connected account and the three switches. All three start off. Turn on the ones you want; each has its own settings under it, described in the two guides linked above.

## Reconnecting

If Microsoft stops accepting the connection (a password change, a revoked app, a tenant policy), tiny+ tries three times and then pauses the connection and tells you. **Reconnect** on the connection screen starts a fresh sign-in; nothing you set up is lost.

If you connected before relationship capture existed, the screen shows a one-time notice: your connection can't read message headers until you reconnect once. Contacts and calendar keep working either way.

## Disconnecting

**Disconnect**, at the foot of the Connected account card, removes tiny+'s access to your Microsoft account. Capture and both syncs stop. Contacts and events already in your Outlook stay there, and what capture recorded stays until you forget it with the button on the capture card. You can also remove tiny+ from the app permissions of your Microsoft account.

## For administrators

Account Settings has a **Microsoft 365** screen under Integrations, for account admins. It shows who in the account has connected, what each has switched on, and lets you:

* allow a person's Outlook folder to hold **every contact in the account** rather than the ones they are on the team of;
* **purge** everything relationship capture recorded from a person's mailbox, for someone who has left or who asks.

Some firms' Microsoft 365 settings stop people allowing an app themselves. The same screen has a **Grant for the organisation** link, which a Microsoft 365 administrator opens and signs in to once. After that each person connects as usual. It asks for the same access each person would be asked for: read mail headers, read and write contacts and calendars, and keep the access without signing in again.