This Privacy Policy explains how 3JX Consulting Ltd (“we,” “us,” or “our”) processes information in connection with the Kyriba Integration extension (the “App”) for Microsoft Dynamics 365 Business Central, distributed via Microsoft AppSource.

1. Roles & Data Controller Status

Under the UK Data Protection Act 2018, UK General Data Protection Regulation (UK GDPR), and EU GDPR:

• The Customer (“You”): Acts as the Data Controller for all commercial, treasury, vendor, customer, and transactional data stored or processed within your Business Central tenant and Kyriba instance.
• 3JX Consulting Ltd: Acts as the Software Provider / Application Developer. Our extension executes code locally within your Business Central tenant to facilitate direct data interchange with Kyriba.

2. Information We Handle

A. Core Business & Treasury Data (No Intermediary Storage)

The Kyriba Integration provides direct, point-to-point communication between your Microsoft Dynamics 365 Business Central environment and Kyriba (or your designated SFTP/API endpoints). 3JX Consulting Ltd does not host, intercept, copy, or store your banking files, payment instructions, GL entries, or reconciliation files on any third-party or intermediary servers.

B. API Credentials & Secrets

Sensitive connection parameters (e.g., API keys, passwords, and private certificates) are stored securely within Business Central’s native Isolated Storage or retrieved from your customer-managed Azure Key Vault. 3JX Consulting Ltd has no access to your credentials.

C. Telemetry & Diagnostics

To monitor application stability and validate licensing, the App may log non-sensitive technical metadata (such as Tenant ID, Environment Name, Extension Version, and unhandled exception stack traces) via Microsoft Application Insights. This telemetry does not contain financial records or identifiable personal customer details.

D. Support Inquiries

If you contact our technical team for support, we may collect your name, business email address, company name, and details of your technical issue to assist in resolving the query.

3. Legal Basis for Processing

We process support communications and technical telemetry under:

• Contractual Necessity: To deliver support services and validate software licenses.
• Legitimate Interests: To maintain software stability, diagnose bugs, and maintain compatibility with Business Central release waves.
• Legal Obligations: Where required to comply with statutory accounting and regulatory duties.

4. Third-Party Infrastructure

The application interacts with the following service providers to deliver functionality and support:

We do not sell, rent, or lease your personal or business data to third parties.

5. Security & Data Retention

The App runs within Microsoft Dynamics 365 Business Central and benefits from Microsoft Azure’s enterprise-grade security controls (TLS 1.2+ encryption in transit and AES-256 encryption at rest). Your business and treasury records remain strictly within your tenant under your own retention policies.

6. Contact Details

For any questions or support requests concerning this Privacy Policy, please contact our team: