This policy explains what data Schedrix™ Allergen Matrix for Microsoft Dynamics 365 Business Central (the app) collects, why, where it is kept and for how long. Capability Systems Ltd publishes the app.
In short: the app keeps its records inside your Business Central tenant and sends none of your item, recipe or allergen data to us or anyone else. Business Central sends us usage telemetry about the app, described below.
Who we are
Capability Systems Ltd, a company registered in England and Wales (company number 03060219), 128 City Road, London EC1V 2NX. We are registered with the Information Commissioner's Office under number ZC271164.
For anything about this policy or your data, email privacy@capability-systems.com.
What the app reads and keeps in your tenant
The app runs inside your Business Central tenant. It reads:
- your items, the item attribute you choose for allergens, and item categories;
- production BOMs (bills of materials, i.e. the recipes), with their versions and lines;
- released and finished production orders, with their lines, components and routings, and your locations, work centres and machine centres, for the Allergen Changeovers page;
- users and their permission sets, to show who can confirm allergens and to keep the full name of the person who confirms a list.
It writes only its own records, which stay in your tenant:
- its setup: the allergen attribute, how orders are grouped into lines, and the centres shown as lines;
- confirmations and the confirmation history, each with the allergens confirmed, the user ID, the full name and the time. When a confirmed list is first found changed, the history also keeps the user ID of whoever's page found it, who may be any user of the app, and the time. When an item is deleted, its history is kept, with the item's description, the user ID of whoever deleted it and the time.
The app never writes an item's attributes, so it never changes an item's own allergen list.
These records are your data. Your organisation decides who can see them, through Business Central's permissions, and we don't receive them. Microsoft hosts them as part of your Business Central service.
What the app sends
The app makes no web calls of its own. The one link out is Open Schedrix on the Allergen Changeovers page: when Schedrix Production Sequencing isn't installed, it opens capability-systems.com/schedrix in your browser. That visit is covered by our website's privacy policy.
Telemetry
Business Central sends telemetry about the app to Capability Systems, as it does for every app whose publisher asks for it. We use it to count installs and use, and to find problems.
- Business Central's standard signals: when the app is installed or upgraded; which of the app's pages are opened; an error shown on one of the app's pages, with its text, which can name an item, BOM or allergen; and operations and report runs that take a long time.
- Three events of the app's own: how many items' lists one Confirm confirmed; that Open Schedrix was chosen, and whether Schedrix or its web page opened; and that Allergen Where-Used had to read each item's recipe itself because Business Central's own where-used gave an error or reached its limit.
The app's own events hold no item numbers, item names, allergens or users' names. Business Central adds your Microsoft Entra tenant ID, the environment's name, the company's name and the app's version to each signal.
Page views also carry the user's telemetry ID, from their User card in Business Central, with the browser, operating system, language, screen size and country. The telemetry ID doesn't tell us who the user is, but your organisation can match it to the person.
The telemetry is stored in Microsoft Azure Application Insights, in the UK South region, and kept for 90 days. Telemetry stays in the UK.
Who else processes the data
- Microsoft, through Azure, stores the telemetry for us as our processor, in the UK South region.
We don't sell data, and we don't use telemetry for anything other than understanding how the app is used and improving it.
Our role and the legal basis
For the records the app keeps in your tenant, your organisation decides how they are used, and Capability Systems doesn't receive or process them. For the telemetry, Capability Systems decides how it is used, on the basis of our legitimate interest in knowing how the app is used and in finding and fixing problems.
Your rights
Under UK data protection law (the UK GDPR) you can ask for a copy of personal data we hold about you, and ask us to correct or delete it. You can also object to our use of telemetry about you, as it rests on our legitimate interest. Email privacy@capability-systems.com. If you aren't satisfied with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).
For the records the app keeps in your Business Central tenant, ask your own organisation.
Turning it off
Uninstalling the app stops its telemetry. Business Central keeps the app's records in your tenant after uninstalling unless an administrator chooses to delete the extension's data when uninstalling it.
Changes to this policy
When this policy changes, we update the date at the top of this page. If a change affects what data the app reads, keeps or sends, we say so in the app's release notes.