Privacy Policy
Last updated: June 2026
This Privacy Policy describes how Erlly Technology ("we", "us", or "our") collects, uses, and protects information when you use D365 Agent ("Service"). By using the Service, you agree to the practices described here.
1. Who we are
Erlly Technology is a software company based in British Columbia, Canada. We operate the D365 Agent platform, a business-to-business SaaS product. We are the data controller for the information described in this policy. For privacy inquiries: bingqi.zhang@erlly.com
2. Information we collect
2.1 Account information — name, email, organisation details via Clerk. We do not store passwords directly.
2.2 Dynamics 365 connection credentials — Tenant ID, Client ID, Client Secret, organisation URL, and Power Automate environment ID (optional). Client secrets are encrypted using AES-256 before storage and are never logged or transmitted in plain text.
2.3 Ticket and job content — ticket text (submitted directly or imported from Jira, Azure DevOps, ServiceNow, or Linear), AI-generated analysis and instructions, job execution logs.
2.4 Usage data — job counts, tier usage, timestamps, error logs.
2.5 Payment information — processed and stored by Stripe. We receive subscription status, plan type, and transaction history only.
2.6 Communications — support messages and our responses.
3. How we use your information
- Provide and operate the Service
- Process payments and manage subscriptions
- Send transactional emails (job completion, approval gate notifications)
- Improve the Service using anonymised job outcomes to improve AI prompt quality
- Respond to support requests
- Comply with legal obligations
We do not sell your personal information. We do not use your data for advertising.
4. Third-party services we use
| Service | Purpose | Data shared | Location |
|---|---|---|---|
| Anthropic | AI analysis (Claude API) | ticket content and configuration instructions | USA |
| Supabase | database hosting | all stored data | USA (us-west-2) |
| Vercel | application hosting | request logs | USA |
| Railway | background job processing | job queue data | USA |
| Clerk | authentication | name, email, org details | USA |
| Stripe | payment processing | payment details and subscription info | USA |
| Resend | transactional email | email address and notification content | USA |
Regarding Anthropic: Anthropic's API does not use your data to train their models by default. See anthropic.com/privacy for details.
5. Data retention
- Account and org information: duration of account + 90 days after deletion
- D365 connection credentials: deleted immediately on connection removal
- Job content and logs: 12 months from job creation
- Payment records: 7 years (legal requirement)
- Support messages: 2 years
6. Data security
- D365 client secrets encrypted at rest with AES-256
- All data transmitted over TLS 1.2 or higher
- Access to production systems restricted to authorised personnel
- Authentication managed by Clerk with MFA support
No method of storage is 100% secure. We will notify you of any breach as required by law.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, or port your personal data, or object to certain processing.
Canadian residents (PIPEDA): right to access and challenge accuracy of your personal information.
EU/EEA residents (GDPR): right to lodge a complaint with your local supervisory authority. Legal basis: contract performance (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
Contact bingqi.zhang@erlly.com to exercise any rights. We respond within 30 days.
8. International data transfers
Our service providers are primarily in the United States. By using the Service, you consent to your data being processed in the United States and other countries where our providers operate.
9. Cookies
We use only essential cookies required for authentication and session management (set by Clerk). No advertising or tracking cookies.
10. Children's privacy
The Service is not directed at individuals under 18.
11. Changes to this policy
We will notify you of material changes by email or by posting a notice in the Service.
12. Contact us
Email: bingqi.zhang@erlly.com
Erlly Technology, British Columbia, Canada