Mandel Outlook Add-in EULA

Version date: September 14, 2026

1. Parties and acceptance

This End User License Agreement (EULA) governs the Mandel Outlook Add-in (Add-in), provided by Fynt, Inc., a Delaware corporation doing business as Mandel AI (Mandel, we, us). The Add-in provides access from Microsoft Outlook to the procurement workflows enabled for your organisation in the Mandel cloud service (Service).

By accepting this EULA or using the Add-in after these terms have been made available to you, you agree to these terms. If you accept on behalf of an organisation, you represent that you have authority to bind it. Otherwise, you may use the Add-in only as an authorised user of an organisation whose use is covered by an applicable Customer Agreement. An employee’s installation does not by itself amend their organisation’s contracts or make the employee personally responsible for its subscription fees.

Microsoft is not a party to this EULA. Your rights and obligations regarding Microsoft products and services remain governed by your separate agreements with Microsoft. Microsoft is not responsible under this EULA for the Add-in or its support.

2. Your organisation’s existing agreement

Customer Agreement means an executed service, subscription, or evaluation agreement between Mandel and your organisation, together with its applicable orders, amendments, DPA, and deployment or authority schedules. The Customer Agreement governs the underlying Service, including scope, fees, subscription and evaluation periods, service levels, confidentiality, intellectual property, liability, and remedies. The Add-in is an interface to that Service, not a separate purchase of every Mandel capability.

Mandatory law and mandatory data-transfer provisions prevail. The applicable DPA governs personal-data processing. Subject to the additional prospective no-training protection in Section 5, the Customer Agreement prevails over conflicting terms in this EULA. This EULA supplements that agreement only for use of the Add-in; it does not replace it, reset liability periods, create a second liability cap for the same loss, extend a subscription, or expand an order or deployment scope. It does not retroactively authorise processing or actions.

If your organisation does not have a Customer Agreement, installation permits only account-linking and access to any demonstration Mandel expressly makes available using synthetic or public demonstration data. Access to customer mailbox content, uploads of real customer data, and operational workflows require the appropriate service or evaluation terms and any applicable DPA first. This EULA is not itself an order, DPA, or authorisation to begin a real-data trial.

3. License and permitted use

Subject to this EULA and the Customer Agreement, Mandel grants your organisation a limited, nonexclusive, nontransferable license to install and use the Add-in through its authorised users for its internal business purposes during its authorised Service access. Transfers expressly permitted by the Customer Agreement or mandatory law remain permitted. No perpetual Service entitlement arises from installing or downloading the Add-in, and no additional fee or automatic paid conversion arises solely from accepting this EULA.

Your organisation must have the necessary Microsoft licenses, account access, administrator permissions, and rights to the connected data and systems. Features depend on the supported Outlook environment and the customer’s enabled Service configuration. A feature description is not a promise that an unpurchased or unsupported integration is available.

Mandel and its licensors retain ownership of the Add-in and Service and all rights not expressly granted. Your organisation retains its rights in Customer Content. No ownership transfer is created by this license.

You must not bypass access or security controls, access another tenant’s data without authority, use the Add-in unlawfully, distribute malware, remove proprietary notices, or resell or sublicense the Add-in except as expressly agreed. Reverse engineering is restricted only to the extent permitted by applicable law; any non-excludable interoperability rights and applicable open-source license rights are preserved.

4. Permissions, AI, and action authority

The Add-in requests Outlook permissions to work with the current item and provide the enabled experience. The Privacy Policy explains item access, data sent to Mandel, and separately connected mailboxes. Installation, Microsoft permission consent, account linking, and ordinary user prompts do not themselves grant Mandel general authority to bind your organisation or act across its systems.

The Customer Agreement and the customer’s authorised deployment determine the actions Mandel may perform, the permitted systems and recipients, limits, and approval requirements. Routine actions may be automated where expressly authorised. Supplier selection or award, binding purchase orders, price acceptance, contract entry or amendment, settlement or release, payment release or withholding, bank or payee changes, and decisions with significant effects on individuals require specific authority and human approval before the effect occurs. This EULA grants none of those permissions. An instruction cannot authorise an action beyond the agreed scope or applicable law.

Your organisation is responsible for appointing authorised users and approvers and ensuring its instructions and source-system access are lawful. Mandel remains responsible for its own contractual obligations, including agreed authority controls. AI output can contain errors; users should review drafts, evidence, recipients, and material consequences when an action is presented for approval. This does not disclaim Mandel’s obligations or make every AI error the customer’s responsibility. No guaranteed savings, recoveries, accuracy level, or commercial outcome is created by this EULA.

5. Customer data, confidentiality, and model training

Customer Content includes messages, attachments, documents, prompts, records, and other content supplied by or on behalf of the customer, and customer-specific outputs and records derived from it. Usage Data means information about use of the Add-in and associated Service features. Customer Personal Data means personal data processed on the customer’s behalf. Customer ownership and confidentiality protections remain governed by the Customer Agreement; Mandel receives only the processing rights needed to provide the authorised Service. Feedback does not include Customer Content or confidential information embedded within a suggestion. Where no Customer Agreement applies, each party must use reasonable care to protect the other’s nonpublic information, use it only to provide or use the permitted access, and disclose it only to recipients who need it for that purpose and are bound to protect it, or as required by law. Where legally permitted, the receiving party must give advance notice of legally required disclosure. These duties continue while the information remains confidential, except for information lawfully obtained elsewhere, independently developed, or made public without breach.

For Customer Content, Customer Personal Data, and Usage Data processed through the Add-in, Mandel will not use or permit subprocessors to use that data to develop, train, or improve artificial-intelligence or machine-learning models. There is no anonymised-data or opt-in exception to this restriction. It applies to that data from acceptance of this EULA and survives termination, including where another term would otherwise permit such training. Stricter protections in the Customer Agreement continue to apply.

Inference, retrieval, extraction, reconciliation, response generation, and configuration of the customer’s own instance on its documented instructions are permitted to provide the authorised Service. They do not authorise model training or reuse of customer content for other customers. Mandel does not sell Microsoft 365 content or use it for advertising.

Processing remains subject to the applicable DPA, including its instructions, security, subprocessor, transfer, retention, assistance, and audit provisions. This EULA neither replaces the DPA nor supplies missing transfer instruments. Restricted data, including export-controlled data, may be accessed only where the Customer Agreement, applicable law, and the approved environment permit it; read-only access is not an exemption.

6. Security, support, and third-party services

Report suspected unauthorised access promptly to privacy@mandel.ai and your organisation’s administrator. Use the support arrangements in your Customer Agreement; for Add-in assistance, contact nick@mandel.ai. The EULA does not create a separate availability guarantee, response deadline, certification, or staffed support commitment.

Microsoft and other customer-selected services may change their APIs or availability. Mandel may provide compatibility and security updates, subject to its Customer Agreement and applicable marketplace requirements. Such dependencies do not excuse Mandel from the obligations it has expressly undertaken. Separate third-party terms apply to those services without expanding their rights to Customer Content under Mandel’s agreements.

7. Term, suspension, and disconnection

Your license continues while you are authorised to access the Service and comply with the applicable terms. Suspension and termination for customers with a Customer Agreement follow that agreement. For the limited installation or demonstration access described in Section 2, either party may end access at any time; Mandel may suspend it where reasonably necessary to address misuse or a security threat.

You may stop using and uninstall the Add-in. Uninstalling does not itself cancel your organisation’s subscription, terminate its Customer Agreement, disconnect other integrations, delete data already held in the Service, or cancel previously requested backend work. To revoke action authority or stop a separately connected mailbox, an authorised administrator must use the relevant Service controls or contact Mandel. Mandel will handle revocation and affected work under the Customer Agreement; messages already delivered and external actions already completed may not be reversible.

Data export, deletion, backup retention, legal holds, and any statutory switching rights remain governed by the Customer Agreement, DPA, and mandatory law. Ending Add-in access does not extinguish privacy rights or existing confidentiality and no-training obligations.

8. Warranties and liability

For use covered by a Customer Agreement, its warranties, indemnities, limitations, exclusions, and remedies apply to the Add-in as part of the Service. This EULA does not reduce those protections.

Only where no Customer Agreement applies, the limited installation and demonstration access in Section 2 is provided as available, without additional warranties to the extent permitted by law. For that access alone, each party’s aggregate liability under this EULA is limited to US$1,000, and neither party is liable for indirect or consequential loss or lost profits. These restrictions do not apply to fraud, wilful misconduct, gross negligence, breach of confidentiality or the no-training obligation, infringement of the other party’s intellectual property, death or personal injury caused by negligence, or liability that cannot lawfully be limited. Mandatory privacy and consumer rights remain unaffected.

9. Changes and general terms

The version date identifies these terms; this EULA takes effect for you when accepted as described in Section 1. A website edit does not amend an executed Customer Agreement or DPA. Any change requiring consent or an agreed amendment must follow that agreement and applicable law. We will provide notice of material Add-in term changes before applying them and obtain acceptance where required. Existing users retain any rights protected by applicable marketplace rules. No update silently removes the no-training protection for data already covered by Section 5.

The Customer Agreement’s governing law, dispute process, notices, and assignment terms apply. Only where there is no Customer Agreement, Delaware law governs this EULA, excluding its conflict-of-laws rules, and disputes are subject to the courts located in Delaware, without limiting mandatory local rights or jurisdiction rules. Notices for that limited access may be sent by email and take effect when received. If a provision is unenforceable, the remaining provisions continue; a failure to enforce a term is not a waiver. No agency or general authority to bind either party is created. Neither party may assign this EULA without the other’s consent except with a transfer of substantially all of the relevant business, subject to mandatory law and existing data protections.

10. Contact

Fynt, Inc. (doing business as Mandel AI)
1111B S Governors Ave STE 6339, Dover, DE 19904, United States
Add-in support and contractual notices: nick@mandel.ai
Privacy and data requests: privacy@mandel.ai