Privacy Notice: ArcherPoint apps for Business Central and our licensing service
ArcherPoint, LLC · Effective October 21, 2026
This notice explains what personal information we collect when you install, license, buy or use ArcherPoint by Cherry Bekaert apps for Microsoft Dynamics 365 Business Central, and what we do with it. Our website has its own privacy policy.
ArcherPoint, LLC (“we”, “us”) is responsible for the information described here.
The short version
- The business data you keep in Business Central stays in your Business Central environment. Our apps do not send it to us.
- Our licensing service keeps the minimum it needs to know which organizations are licensed: mostly identifiers, not names.
- We don’t sell personal information, and we don’t use it or your business data to train AI models.
What we collect, and why
To check licenses. Each app asks our licensing service whether your organization is licensed. For that we keep:
- your Microsoft Entra tenant ID (identifies your organization’s directory, not a person) and your organization’s name;
- the names of your Business Central environments;
- for apps licensed per user, an identifier for each person holding a seat. This is their Microsoft Entra object ID, a random-looking code, not their name or email.
When you buy. Card payments are handled by Stripe, which collects the buyer’s name, email, billing address and card details. Card details never reach us. We see the name, email and address Stripe passes back so we can match the payment to your organization.
When you contact us. If you request a license, a quote or support, or register for a free product, we keep the name, email, organization and message you send.
Network addresses. We never store a full IP address. Where we keep one (for example, to investigate refused requests), it is cut to its network part: the first three blocks of an IPv4 address, or the first 48 bits of an IPv6 address.
Diagnostics from the apps. Business Central sends us technical telemetry about our apps: events, errors and performance, labeled with your tenant ID, environment and company names, and a pseudonymous user telemetry ID that Business Central generates. It does not include the contents of your records. Your Business Central administrator can see and control telemetry settings in Business Central.
AI features. Some apps can send data to an AI or document-reading service, but only to a provider you set up with your own account, after an administrator turns the feature on in Business Central. That data goes straight from your environment to your provider; we never receive it.
How we use it
To decide whether an app is licensed, to bill and administer subscriptions, to answer your requests, to support and secure our software and fix problems, and to verify that use matches the license. We do not use it for marketing.
For customers in the EU and UK, we rely on performance of our contract with your organization for licensing, billing and support, and on our legitimate interests for security, diagnostics and license compliance.
Who we share it with
- Microsoft, which hosts our licensing service in Azure and provides sign-in.
- Stripe, our payment processor.
- Cherry Bekaert and its affiliates, which support and administer our products.
- Authorities, when the law requires it.
We don’t sell personal information or share it for advertising.
Where it is kept
Our licensing service, its database and its logs run in Microsoft Azure in the Central United States region. If you are outside the United States, your information is transferred there. For customers in the European Union or the United Kingdom, that transfer relies on the European Commission’s Standard Contractual Clauses, with the UK Addendum to them for the United Kingdom.
How long we keep it
| Information | Kept |
|---|---|
| License records (tenant ID, licensed apps, periods) | as long as we need them to administer licenses and meet our legal and accounting obligations |
| Your organization’s name | until 2 years after you last held a license or paid us |
| Seat identifiers (per-user apps) | deleted after 60 days without use |
| Product registrations | deleted 2 years after they were last renewed |
| License, quote and support requests | until you ask us to delete them, or we remove them |
| Names and emails in our audit log | removed after 90 days; the log entry itself is deleted after 2 years |
| Service logs | 30 days |
| App diagnostics (telemetry) | 90 days |
| Payment records | as our finance and tax obligations require (held by Stripe) |
Your choices and rights
You can ask us for a copy of the personal information we hold about you, to correct it, or to delete it. Email privacy@archerpoint.com. We’ll confirm the request and respond within 30 days. Deleting payment details also happens in Stripe, which we’ll do once no invoice needs them. Depending on where you live (for example, California, the EU or the UK, or Canada), you may have further rights, including to complain to your data protection authority.
If you are an employee of one of our customers, your organization may also control some of this information, and we may refer your request to them.
Security
License checks and administration in the licensing service require an authenticated Microsoft sign-in or a credential we issued. Credentials we issue are stored only as salted hashes, and service secrets are kept in Azure Key Vault. Access to the data is limited to the staff who run the service.
Children
Our software is for businesses and isn’t directed at children.
Changes
We’ll post any change here with a new effective date, and notify customers of material changes by email.
Contact
ArcherPoint, LLC, 3800 Glenwood Avenue, Suite 200, Raleigh, NC 27612. privacy@archerpoint.com.
Our person in charge of the protection of personal information, including for Quebec, is Greg Kaupp, Privacy Officer. You can reach him at privacy@archerpoint.com.