How OneLatex Protects Your Data and Manages Permissions

If you are not using the "Open in Overleaf" functionality, OneLatex does not store any data on a server (except, of course, on Microsoft's servers where your OneNote notebooks are stored). Your data is only stored in the Internet browser you use, in your OneDrive application folder, and in the target folder you can select. If you use the transfer of data to Overleaf with the "Open in Overleaf" option in the "Download Files" section, the final LaTeX data will also be temporarily stored on an Amazon S3 server.

OneLatex uses your Microsoft account to access your OneNote notebooks. OneDrive access is optional and only requested when you actually need it.

Permissions in detail

Permissions requested at sign-in

Read access to your OneNote notebooks (Notes.Read)

This permission is necessary to load data from your OneNote notebooks into the app for processing. The app reads the content of your OneNote to convert it and temporarily stores it in your browser's memory. It does not modify or delete your notes, and password-protected sections remain inaccessible.

"View your basic profile" — automatic Microsoft sign-in scope

This is not an explicit permission requested by OneLatex. Microsoft automatically includes it as part of every sign-in process. It allows Microsoft to identify you and maintain your login session. OneLatex does not request or use your profile data beyond this standard sign-in mechanism.

Why does the "Maintain access to data..." permission appear?

This entry is added automatically by Microsoft and is not explicitly requested by OneLatex. It allows the app to keep you signed in by silently refreshing your session in the background — without it, you would have to sign in again every time your session expires (typically after one hour).

It does not grant any additional access to your data. Everything the app can access is defined exclusively by the other permissions listed above.

Optional permissions (requested only when you use the feature)

Access to the app's folder in OneDrive (Files.ReadWrite.AppFolder)

This permission is not requested at sign-in. It is only requested when you choose OneDrive as your storage backend — for example, in the Combine section or when uploading converted files to OneDrive. A dialog will appear explaining why the permission is needed and giving you the choice to grant it or continue with browser storage instead. The permission is strictly limited to a dedicated application folder (/Apps/OneLatex/) and cannot access any other files in your OneDrive.

Write access to your OneNote notebooks (Notes.ReadWrite)

This permission is only requested when you use the Auto-import feature in the Template Manager to save a template notebook directly into your OneNote. The app creates a new notebook with the template structure — it does not modify or delete any existing notebooks. If you do not use this feature, this permission is never requested.

Additional information

<aside> 💡

All permissions are strictly limited to the scopes described above. OneLatex cannot access any data beyond what you have explicitly granted — any additional access always requires your prior consent.

</aside>