Fieldnotes for Business Central privacy policy
ArcherPoint by Cherry Bekaert
Fieldnotes for Business Central (“the extension”) is a browser extension published by ArcherPoint by Cherry Bekaert. ArcherPoint, LLC (“we”, “us”) is responsible for the personal data described in this policy.
In short
- Your notes, screenshots, clips and anything shown on the page stay on your computer. We never receive them unless you file them to a system we operate.
- We receive your name and work email when you accept the setup notice, and details about your organization’s license when the extension checks it.
- We do not sell personal data, and we email you about the product only if you ask us to.
- Write to privacy@archerpoint.com to see, correct or delete what we hold about you.
What stays on your computer
When you save a note, the extension records the address and title of the page you are on, the field you were using, a screenshot of the tab, the text you typed and, if you have turned clips on, a short video clip of the tab. Screenshots and clips show the page as it appears, which can include personal or business data on screen. All of it is stored in the folder you chose during setup. We do not receive it.
It leaves your computer only when you file it. Create Work Item sends it to the Azure DevOps organization or Monday.com board you configured, using an account you control. Send via Email builds an email in your own mail program, which you then send yourself. From there, the destination’s terms and your organization’s policies apply.
To file to Azure DevOps, you sign in with Microsoft and the extension keeps the resulting sign-in in the browser’s extension storage. To file to Monday.com, it keeps an API token you supply in the same place. We do not receive either.
What we receive
Registration. When you accept the setup notice, the extension sends us your name, your work email address, whether you agreed to hear from us, the exact wording you agreed to, the versions of the notice and the extension, and a random identifier for that installation. Personal email addresses are not accepted.
License checks. Some features need a license. The extension checks it when you use one of those features and when you open Settings or a report. If you are signed in with Microsoft, it sends that sign-in, and our licensing service reads your organization’s identifier from it. If your organization’s license is counted per person, the service also keeps your Microsoft account identifier so you hold one of your organization’s seats. If your organization uses a license key instead, the extension sends the key. The service records which organization asked, when, and the answer.
License requests. If you choose Request a License, the extension sends what you enter: your name, your work email address, your organization’s name, how many people need a license and any message. It also sends the feature you were trying to use, the extension’s version, the installation’s random identifier and, if you are signed in, your Microsoft sign-in. If you are not signed in, we check Microsoft’s public sign-in directory to see whether your email domain belongs to a Microsoft organization, to help us confirm who is asking. A short alert naming your organization and your email domain, but not your address, goes to the team that handles requests.
Network address. When the extension contacts our licensing service, we keep only the network part of your internet address (for example, 203.0.113.x), never the full address.
The extension does not collect usage statistics, analytics or crash reports, and it contains no advertising or tracking code.
Why we use it, and our legal basis
| Use | Legal basis (GDPR and UK GDPR) |
|---|---|
| Registering your installation, so we know who uses the extension and can contact you about its operation or security | Our legitimate interest in providing and supporting the extension |
| Emailing you about updates, new features and licensing | Your consent, given by ticking the box in the setup notice. You can withdraw it at any time. |
| Checking your organization’s license and assigning seats | Performing our contract with your organization, and our legitimate interest in making sure licensed features reach licensed organizations |
| Answering a license request and issuing a license | Steps you asked us to take before a contract, and our legitimate interest in confirming who is asking |
| Keeping network addresses and service logs | Our legitimate interest in keeping the service secure and diagnosing problems |
Where we rely on legitimate interests, you can object, as described under Your rights.
How long we keep it
| Data | Kept |
|---|---|
| Registration | Until you remove it, and at most two years after you last accepted the setup notice |
| License check records | Email addresses and network addresses are removed after 90 days; the record is deleted after two years |
| Your Microsoft account identifier, for a per-person seat | Deleted after 60 days without use |
| License requests | Deleted two years after you send it, or sooner if you ask |
| Service logs | 30 days |
Who we share it with
We do not sell personal data or share it for advertising. We use these service providers, under contract, to run the extension’s services:
- Microsoft, which hosts our licensing service and its data in Microsoft Azure, and provides the tools that deliver license-request alerts to our team.
- Our payment processor, if your organization buys a license. It receives the billing details your organization gives it.
We may also disclose data where the law requires it.
Where it is stored
We are based in the United States. The extension sends your data directly to us there, so we do not receive it from anyone in Europe. Our licensing service and its data are hosted by Microsoft in its Central US region.
When our service providers handle your data for us, we rely on their certification under the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework. Microsoft Corporation and our payment processor hold all three.
Data kept in the United States is subject to US law, which can include requests from US authorities. We reduce that risk by collecting only what the extension needs, keeping it only for the periods above, and limiting access to the staff who administer licensing.
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or give it to you in a portable form. You can object to uses based on legitimate interests, and withdraw consent to marketing emails at any time without affecting earlier use.
To make a request, email privacy@archerpoint.com. We answer within one month. If you are unhappy with our answer, you can complain to the data protection authority where you live or work. In the United Kingdom, that is the Information Commissioner’s Office. We would like the chance to resolve it first.
Deleting your data
- Notes, screenshots and clips: delete the session folders on your computer. Items you filed are deleted in Azure DevOps, Monday.com or your mail program.
- Your registration: in the extension, open Settings and choose Revoke Consent. This withdraws your consent, deletes your registration from our service, and clears your name and email from the extension’s settings on your computer.
- Everything else, including license requests: email privacy@archerpoint.com.
- Marketing emails: every email we send includes a way to stop further emails.
Representatives in the EU and UK
We are appointing representatives in the European Union and the United Kingdom whom you will be able to contact about data protection, in addition to us. We will list their names and contact details here once the appointment is complete. Until then, please contact us at privacy@archerpoint.com.
Chrome Web Store user data policy
Fieldnotes for Business Central’s use of information it receives, and its transfer of that information to any other app, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use the data the extension handles only to provide its single purpose: capturing review notes about the page you are viewing and filing them where you choose. We do not use or transfer it for advertising, to determine creditworthiness or for lending, and people do not read it except with your permission, for security, or where the law requires.
Changes
If we change this policy, we will update the date below. If a change affects what we collect, the extension will ask you to accept the notice again.
Contact
privacy@archerpoint.com, or ArcherPoint, LLC, 3800 Glenwood Avenue, Suite 200, Raleigh, NC 27612.
Effective October 21, 2026.