metamorphOS
PlatformSolutionsAI strategyPricingCompanyBlog
Sign inBook a discovery call

Privacy Notice: metamorphOS Tasks for Microsoft Teams

This notice covers the metamorphOS Tasks app for Microsoft Teams. It adds to our general Privacy Policy, which covers this website.

Last updated: 9 October 2026

Who is responsible

The organisation that uses metamorphOS decides which processes and tasks run in its workspace and who works on them. It is the controller for that data. MetamorphOS FlexCo processes the data on its behalf under the data processing agreement (Art. 28 GDPR).

MetamorphOS FlexCo

Science Park Graz, Sandgasse 36 / IV, 8010 Graz, Austria

FN 634658x, Regional Court for Civil Matters Graz

Email: office@metamorphos.io

What the app does

  • A personal Tasks tab in Teams shows your open and completed metamorphOS tasks with the task form.
  • An activity-feed notification tells you about a new task assigned to you, or to a role or group you belong to.
  • A workspace admin can import people from the Microsoft 365 organisation into the workspace.
  • The app has no bot and no access to chats, channels, meetings, mail, files or calendars.

Microsoft permissions

  • TeamsActivity.Send (application permission): posts the task notification into the activity feed of a person who has the app installed. It reads no data.
  • User.Read (delegated): sign-in.
  • GroupMember.Read.All, User.ReadBasic.All (delegated, with admin consent): only while a workspace admin runs an import. Microsoft Graph returns only what that admin may read.

Data we store

  • The connection: your organisation's Microsoft Entra tenant ID, the connected workspace, the admin who connected it, and when the connection and consent were made.
  • For each person who opened the tab or was imported: the Entra tenant ID, the Entra user object ID, the sign-in email address Microsoft has verified, the linked metamorphOS account (if any), the time of the first sign-in, for imported people the import time, and for people without an account the day of the latest sign-in.
  • For imported people, a metamorphOS account with display name and user principal name as email address, without a password.
  • For each notification until it is delivered: the workspace, the task ID, the task title, and the recipient's Entra tenant ID and user object ID.
  • During an import: the admin's delegated Microsoft Graph token and the organisation's user list (object ID, display name, user principal name) for the preview.
  • Tasks and form data, as part of the workspace, exactly as when tasks are worked in the metamorphOS web app.

Data we do not store

Teams sign-in tokens are checked on each request and discarded. Refresh tokens, Teams messages, files, calendars and presence are neither read nor stored. Your organisation's directory is read only during an import an admin starts; there is no scheduled sync.

Data sent to Microsoft

One call to Microsoft Graph per notification, in your organisation's own Microsoft 365 tenant, carrying the recipient's object ID, the task title and a link that opens the task in Teams. The task title is the name of the task and of the process instance and can contain business information.

Microsoft provides Teams to your organisation under your organisation's own agreement with Microsoft and is responsible for that processing itself; Microsoft is not a subprocessor of MetamorphOS FlexCo. How long activity-feed items are kept is set by your Microsoft 365 tenant.

Retention and deletion

  • The connection is kept until a workspace admin disconnects Microsoft 365. Disconnecting deletes the connection and every stored Microsoft identity of the organisation.
  • A person's Microsoft identity is deleted when an admin removes it, when the person leaves the workspace, or when the organisation is disconnected.
  • Notification data is removed from the queue one hour after delivery, one day after the final failure.
  • The import token is deleted when the first changes are applied, when the admin closes the import, or when reading fails, at the latest after 10 minutes. The preview expires 10 minutes after the last action.
  • Logs are kept for 30 days. They carry IDs (workspace, task, Entra tenant, Entra user object), no email addresses and no task titles.
  • Deleted data remains in encrypted database backups for up to about 9 days.
  • Tasks and form data follow the retention agreed for the workspace.

Security

All connections use TLS, and stored data is encrypted. The app authenticates to Microsoft with a certificate, not a password or client secret; its private key is kept in a managed secret store. Sign-in tokens are accepted only from organisations a workspace admin has connected, and each person sees only their own tasks.

Where the data is processed

Instances operated by MetamorphOS FlexCo run in the European Union with Scaleway SAS: data centre in Amsterdam (Netherlands), backups in Paris (France). Transactional email is sent by AWS EMEA SARL from the EU.

Your rights

You have the right to access, rectify, erase and restrict the processing of your personal data, and to object to it. As your organisation is the controller, please contact it first. You can also write to us, and we will forward your request or answer it where we are responsible. You have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

Contact

MetamorphOS FlexCo

Science Park Graz, Sandgasse 36 / IV, 8010 Graz, Austria

FN 634658x, Regional Court for Civil Matters Graz

Email: office@metamorphos.io