To be able to book a room on the spot, Joan will need access to read and write your company’s calendar. No other permissions are necessary.
Joan does not access any other data besides meeting information provided through the calendar and does not store this data on our servers in any persistent storage. This data is always stored on Office 365 servers and always streamed on-demand in real-time.
To improve usability we do cache the room data between multiple consecutive requests against the calendar API in memory.
Joan will, however, need to save the user details and password when pairing Joan with Office 365 as a delegated user. Read more about the different permissions in pairing Joan with Office 365 here.