Terms of Service for Seradex OrderStream Mail Integration Apps

These Terms of Service apply to the following registered applications developed by Seradex for integration with supported email platforms:

This application integrates with the CRM module of Seradex OrderStream. It accesses a designated mailbox to retrieve email messages, making them available within the system for customer-defined use such as logging communications, referencing correspondence, or supporting business workflows.

The Seradex OrderStream application integrates with third-party email providers (including, but not limited to, Google Gmail, Microsoft 365, and other SMTP services) to facilitate email communication functionality. By using these integration features, you acknowledge and agree that:

•	Data Accessed: Our application accesses limited user data from your chosen email provider, including your email address and secure access credentials (e.g., OAuth 2.0 tokens).

•	Purpose of Use: This data is used solely for the purpose of configuring the in-application email client and enabling the sending of manual and automated emails on your behalf as instructed by you within the ERP platform.

•	No Third-Party Sharing: We do not share the data accessed from your email provider with any third parties.

During the process of sending manual or automated emails via any integrated provider (Google Gmail, Microsoft 365/Exchange, or standard SMTP), user data and email content are processed only during transmission through the application and are not permanently stored within the Seradex OrderStream database. An exception applies to Microsoft 365/Exchange integrations, where an optional feature allows persistent storage of email data as described below.

o	For Microsoft 365/Exchange integrations, an optional feature is available that enables persistent storage of incoming and outgoing email data in the Seradex OrderStream database to record Contact Activities. This storage occurs only if the customer explicitly enables and configures the feature.

The Outlook Mailbox Scanner is a separate feature that allows a user to manually trigger the persistent storage of email data from their local Outlook client (including Inbox, Sent Items, and subfolders) within the Seradex OrderStream database to record Contact Activities. This storage occurs only if the user explicitly initiates the scanning process.

•	Security Measures: Access credentials and associated data are handled with appropriate administrative, technical, and physical safeguards. Credentials obtained from all providers are stored securely within the local application environment/database.

•	Provider Policies: Your use of these integrated services is also governed by the terms and policies of the respective email providers, such as the Google Terms of Service and the Microsoft Services Agreement. You are responsible for adhering to these external agreements.

•

Advanced Configuration: Our application offers advanced configuration options allowing clients to utilize their own credentials (such as client IDs, secrets, and scopes) for various email providers, including Google and Microsoft. In such cases, the client assumes responsibility for managing their own credentials securely and ensuring compliance with the respective provider's terms and policies for their specified configuration. All client-provided credentials are still encrypted and stored securely within the local application environment.

This application enables email delivery from Seradex OrderStream. It supports multiple SMTP configurations, allowing emails to be sent on behalf of users or system processes. Delivery may be automated or manually initiated, depending on how the customer configures the system.

Microsoft 365 (OAuth-based authentication). Identified in Microsoft Entra and shown in the consent prompt as Seradex OrderStream Email Delivery Service for Outlook Online

Legacy username/password SMTP (for services that still support basic authentication)

Additional configurations may be supported in the future based on customer requirements and evolving platform capabilities.

No persistent storage of email content outside Seradex OrderStream or the customer s email infrastructure

These applications can use OAuth-based user consent flows to access mailbox resources, depending on the configured email provider. When OAuth is used, users are presented with a consent prompt that clearly outlines the requested permissions. Access is limited to the specific mailbox authorized by the user, rather than to the entire tenant. In other configurations such as SMTP relay or legacy authentication access is granted based on credentials or trusted network rules. The method of authorization depends on the customer s selected email infrastructure and security requirements.

For questions or concerns regarding these applications, please contact:
info@seradex.com
www.seradex.com