Mailbox data stays in your environment
Mail content and Graph access tokens are not sent to Sunsetless servers or stored by the library. Requests go from your application to Microsoft Graph.
For IT and security reviewers
Sunsetless EWS security and data flow
The package runs inside your application and calls Microsoft Graph with credentials and permissions configured in your tenant.
Authentication is configured by your team
Use certificate authentication for app-only workloads and grant only the Microsoft Graph permissions required. Scope access to required mailboxes with Exchange Online application RBAC where it fits your design.
Microsoft Graph permissions reference ↗ · Exchange Online application RBAC ↗
License checks run offline
The library validates the signed license key locally. It does not phone home and sends no telemetry.
Review the storefront separately
Purchases, account sign-in, support messages and optional chat use separate website services described in the Privacy Policy. Those services do not carry mailbox traffic from the library.