Privacy Policy
How Smarter Apps Ltd handles personal data, both on this website and in the apps we publish for Microsoft Dynamics 365 Business Central.
Who we are
Smarter Apps Ltd is the data controller for personal data collected through this website. We are registered in England and Wales, company number 16161911, with our registered office at 167-169 Great Portland Street, London, W1W 5PF.
We are registered with the Information Commissioner's Office under registration number CSN9018966. Questions about this policy or about the data we hold should go to smarter@smarterd365.com.
What this covers
This policy covers two separate situations, and they are very different from each other.
- Personal data you give us through this website, where we are the controller.
- Data handled by the apps we publish for Business Central, which runs inside your own Microsoft tenant and which we never receive.
Where we deliver consulting or implementation services and process data on your behalf, that is governed by the data processing agreement in place for that engagement rather than by this policy.
The website
What we collect
If you contact us or ask us to call you, we collect your email address and anything else you choose to tell us in your message. We do not ask for more than that.
Our hosting provider records standard technical information such as IP address and browser type in its server logs, as any web server does.
Why we use it
We use your email address to reply to you and to carry on the conversation you started. Our lawful basis is legitimate interests, specifically responding to an enquiry you made of us. Where we later send you anything you did not ask for, we rely on your consent and you can withdraw it at any time.
How long we keep it
We keep enquiry correspondence for as long as the relationship is live and for six years afterwards, which matches the period in which a contractual claim can be brought. Correspondence that leads nowhere is deleted within twelve months.
Who we share it with
We do not sell personal data and we do not share it for advertising. Our business systems run on Microsoft 365, so your correspondence sits in Microsoft's cloud as our processor. We disclose data to a public authority only where we are legally required to.
Cookies
This site uses only the cookies needed to make it work. We do not use advertising cookies and we do not use cookies to build a profile of you. You can block or delete cookies through your browser.
Our apps
Our apps are installed into your own Microsoft Dynamics 365 Business Central environment and run there. This has a consequence worth stating plainly.
We do not receive any data from the apps. They send us no telemetry, no error reports and no usage information. Your company data stays in your Microsoft tenant, under your control, governed by your own agreement with Microsoft. We are neither the controller nor a processor of it.
Third-party AI services
Two of our apps, Smarter AI CoA Generator and Smarter Customer/Vendor Generator, use an AI service to produce their suggestions. That service sits outside Business Central.
You choose the provider and you hold the account with them. The services the apps can be configured to use are:
| Service | Operated by | Relationship |
|---|---|---|
| Microsoft Copilot | Microsoft Corporation | Used through your own Microsoft tenant, under your existing agreement with Microsoft. |
| Anthropic API | Anthropic PBC | Used through your own Anthropic account and API key, under your agreement with Anthropic. Anthropic bills you directly. |
Because you hold the account, your relationship is with that provider directly. Smarter D365 does not provide the service, does not resell access to it and does not receive or process what is sent to it.
What the apps send
Only what you type. For the AI CoA Generator that is the country, the industry and any refinement text, together with the descriptions of the account categories already in your company. For the Customer/Vendor Generator it is the website address you enter.
What the apps do not send
- General ledger entries, balances and posted transactions.
- Customer, vendor, employee and contact records.
- Any other company or personal data held in Business Central.
Where you supply an API key, it is stored encrypted in Business Central Isolated Storage, scoped to the individual company, and is never displayed again after entry. It is sent only to the endpoint configured on the app's setup page.
International transfers
Anthropic PBC is based in the United States. If you configure an app to use the Anthropic API, the information described above leaves the United Kingdom and the European Economic Area when it is sent. That transfer happens under your agreement with Anthropic rather than under ours, and you should satisfy yourself that it is appropriate for your business before you enable it.
Where Microsoft Copilot is used instead, the transfer position is the one set out in your existing agreement with Microsoft.
Your rights
In relation to the personal data we hold as controller, you have the right to ask for a copy of it, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable form, and to withdraw consent where we rely on consent. Write to smarter@smarterd365.com and we will respond within one month.
If you are not satisfied with how we have handled a request you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first.
Changes
We update this policy when what we do changes. The date at the foot of the page tells you when it was last reviewed. Material changes will be flagged on the page rather than made quietly.
Contact
Smarter Apps Ltd, 167-169 Great Portland Street, London, W1W 5PF.
smarter@smarterd365.com