1. Scope
This Privacy Policy explains how TSI ("TSI", "we", "us") handles information in connection with software published under the TSL Labs name (each a "Product"), whether obtained from Microsoft AppSource, the Microsoft commercial marketplace or directly from TSI. It covers:
- Multisource Exchange Rate Management (Dynamics 365 Finance & Operations)
- License Management (Dynamics 365 Finance & Operations)
- Xero Bills Connector for Business Central
- Fund & Grant Management
- Equipment Rental Management
Use of this website is covered by our website Privacy Policy. Use of the Products is also governed by the TSL Labs Software Terms of Use.
2. Summary
- The Products run inside your own Microsoft Dynamics 365 environment. The data they create or process is stored in your Microsoft tenant, not on TSI systems.
- TSI does not receive, store or sell your business data during normal operation of the Products.
- Where a Product connects to a third-party service, such as Xero or a public exchange rate provider, it does so on your instruction and using your own credentials or settings.
- TSI collects limited contact and account information when you request a trial, buy a Product or ask for support.
3. Data the apps process in your environment
When you use a Product, it reads and writes data in your Dynamics 365 environment to perform its function. You, as our customer, control this data and decide who can access it, through Microsoft's security and your assignment of the Product's roles and permission sets. For this data, you are the controller and Microsoft is your processor under your agreement with Microsoft. TSI does not act as a processor of this data unless you give us access for support (see section 8).
Microsoft's handling of data in Dynamics 365 is described in the Microsoft Privacy Statement and your Microsoft agreements.
4. Product details
Multisource Exchange Rate Management. Requests published exchange rates from the Bank of Canada or other public exchange rate APIs that you configure, and stores the rates in Finance & Operations. Requests to these providers contain dates and currency codes, not personal information. API keys you enter are stored encrypted in your environment, and request URLs are recorded with keys removed. Run history records the user who started or resolved a run. If you turn on payload samples, a copy of the provider's response is stored in your environment. Run alerts are sent to the email address you configure, through your own Finance & Operations email setup.
License Management. Processes user IDs, user names, network aliases, security role assignments and the Microsoft 365 license assignments that you record, in order to calculate license compliance. It reads standard user and security data without changing it, and stores its results in its own tables in your environment. Optional sample data contains fictitious users only.
Xero Bills Connector for Business Central. Reads approved supplier bills, supplier contacts (which may include names, addresses, email addresses and tax numbers) and tax rates from the Xero organisation you authorise, and creates vendors and purchase invoices in Business Central. Access to Xero is read-only and uses an OAuth connection that you set up with your own Xero app credentials. Credentials and access tokens are stored in your Business Central environment. Xero's handling of your data is governed by your agreement with Xero.
Fund & Grant Management. Processes grant, fund, donor and pledge information that you record in Business Central, which may include donor names and contact details.
Equipment Rental Management. Processes rental assets, bookings, maintenance and billing information that you record in Business Central, which may include customer names and contact details.
5. Information we collect
TSI collects the following information directly:
- Leads from Microsoft. When you select "Contact me", request a trial or acquire a Product on Microsoft AppSource or the Microsoft commercial marketplace, Microsoft shares your contact details with us, such as your name, email address, phone number, company, country and the Product you were interested in.
- Account and purchase information. Contact, billing and licensing details needed to provide, license and invoice the Products.
- Support information. Details you send when requesting support, such as your name, contact details, environment and version information, descriptions, screenshots and run or error IDs.
- Communications. Records of emails, meetings and other communications with us.
6. How we use information
We use the information we collect to:
- respond to enquiries, arrange demos and trials, and provide quotes;
- deliver, license, invoice and renew the Products;
- provide support, troubleshoot issues and improve the Products;
- send service notices about updates, security or changes to the Products; and
- send marketing about our services, where permitted by law and with the option to unsubscribe at any time.
We do not sell personal information, and we do not use data from your Dynamics 365 environment for advertising.
7. Sharing and third parties
We share information only as needed to operate our business, with:
- Microsoft, for marketplace listings, leads, transactions and the Microsoft services our business runs on;
- service providers who help us with email, scheduling, accounting and similar services, under contracts that require them to protect the information; and
- authorities, when required by law or to protect our rights.
The Products connect to third-party services only as you configure them. These include Xero for the Xero Bills Connector and public exchange rate providers such as the Bank of Canada for Multisource Exchange Rate Management. Those providers handle data under their own privacy policies. TSI is not affiliated with Xero Limited or the Bank of Canada.
8. Support access
TSI has no access to your Dynamics 365 environment unless you grant it. If you give us access to help with a support case, or send us screenshots, exports or logs, we use that information only to resolve the case, keep it confidential, and delete copies we no longer need once the case is closed. Please share only what is needed and remove personal information where you can.
9. Security
The Products are designed to keep data in your Microsoft environment and to rely on Microsoft's security model. They use HTTPS for connections to external services, store API keys and secrets in encrypted fields, and include security roles so you can limit access. TSI protects the information it holds with reasonable administrative, technical and physical safeguards. No system is completely secure, and you remain responsible for managing user access and credentials in your environment.
10. Retention and deletion
- Data in your environment stays under your control. Some Products let you set how long history is kept, for example the run history retention period in Multisource Exchange Rate Management. Uninstalling a Product does not delete records it already created; you can delete them using standard Dynamics 365 tools.
- Information TSI holds is kept only as long as needed for the purposes in this policy, including active customer relationships, support, and legal, tax and accounting obligations, and then deleted or anonymised.
11. International transfers
TSI and its service providers may process the information it collects in countries other than yours. Where required, we use appropriate safeguards for such transfers. Data in your Dynamics 365 environment stays in the Microsoft region you selected for that environment.
12. Your rights
Depending on where you are, you may have rights to access, correct, delete or restrict the use of personal information TSI holds about you, to object to marketing, and to complain to a data protection authority. To make a request, contact us using the details below. For personal information stored in a customer's Dynamics 365 environment, please contact that organisation, as it controls that data; we will assist our customers with such requests where we can.
13. Children
The Products are business software and are not intended for children. We do not knowingly collect personal information from children.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If a change materially affects how the Products handle data, we will also tell customers through our usual communication channels.
15. Contact us
Questions or requests about this policy can be sent to info@techsarwar.com or through our Contact page.