Privacy Policy

Blue Dragonfly, LLC (“Blue Dragonfly”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to:

• our website at bluedragonflyllc.com, and
• the Business Central apps (extensions) we publish on Microsoft AppSource / Marketplace.

It does not describe how Microsoft operates Business Central itself, or how your own organization administers its Business Central environment. Those are governed by your agreement with Microsoft and by your organization’s own policies. Consulting and custom development services that Blue Dragonfly provides under a separate agreement are governed by that agreement.

The short version

• The website does not set any cookies of its own, and there is no advertising or cross-site tracking.
• On the website, we collect personal information only when you send it to us through the contact form (your name, work email, optional company, the topic you pick, and your message).
• If you obtain one of our apps through Microsoft AppSource and consent in Microsoft’s dialog to share your information with the publisher, Microsoft sends us your business contact details so we can follow up.
• When you install one of our apps (for a trial or for live use), you complete a registration inside the app (name, phone, email, company, address, and Business Central partner) so we can manage your app registration and license.
• If you purchase an app, we keep billing records so we can invoice you. If you pay an invoice online, your card or bank details go directly to our payment providers (iSolutions and its CardPointe payment platform), not to us.
• Our Business Central apps send operational telemetry (error codes, usage statistics, and pseudonymous ID numbers) to Microsoft Application Insights so we can keep them healthy and improve them. We do not store any of your business data or customer records in Application Insights, and the telemetry contains no names or email addresses.
• We rely on a small number of trusted providers to run everything: Cloudflare (website hosting, security, and cookieless traffic statistics), Resend (contact-form email), and Microsoft (Business Central hosting and Application Insights telemetry).
• We do not sell your personal information and we do not share it for advertising.

Who we are

Blue Dragonfly, LLC PO Box 681971 Park City, Utah 84068 United States

If you have any questions about this policy or your information, contact us through the contact page.

Information we collect

Information you give us

The only place on our website where you can send us personal information is the contact form. When you use it, we collect:

• Name (required)
• Work email address (required)
• Company (optional)
• The topic you select (for example, “Request a demo” or “Support for an installed app”)
• Your message (required)

We ask for this so we can read your request and reply to you. Please do not include sensitive personal information (such as financial, health, or government ID numbers) in the message field. It is not needed to answer a question or arrange a demo.

Information we receive from Microsoft AppSource

When you obtain, trial, or purchase one of our apps through Microsoft AppSource / Marketplace, Microsoft asks for your consent to share your information with the publisher. If you agree, Microsoft sends us lead information such as your name, business email address, company, and the app and action involved (for example, starting a trial). We use this information to follow up on your interest and to provide the app and related support.

Information you provide when registering our apps

When you install one of our apps in Business Central, whether for a free trial or for live use, a user in your organization completes a registration inside the app. Before registering, you are asked to review and agree to this Privacy Policy and our Terms and Conditions. The registration collects:

• Contact information: first name, last name, phone number, and email address
• Company information: company name and mailing address
• Business Central partner information: your partner’s company name and email address
• Environment details, recorded automatically: the Business Central environment name, type (such as production or sandbox), and version

This information is sent to our license management system, hosted on Microsoft Azure in the United States, where we use it to create and manage your app registration and license records. It is required for the app to be registered and supported.

Billing and payment information

If your organization purchases one of our apps, we create a customer record and invoice records in our business systems so we can invoice you. In some cases we invoice your Business Central partner instead, and your partner invoices you. These records are required to do business with you.

An invoice from Blue Dragonfly may include an online payment link from iSolutions, our payment provider. If you choose to pay online by credit card or by EFT/ACH, you enter your card or bank details directly with our payment providers, iSolutions and its payment platform (CardPointe), and the transaction is processed through that platform. Blue Dragonfly does not receive or store your full card number or bank account number. We receive confirmation of the payment along with masked payment details that are routine for online payments in the United States: the first two and last four digits of a card number, or the last four digits of a bank account number. iSolutions handles your payment information under its own privacy policy.

Information collected automatically

Website: technical and security data. Like almost every website, ours is served through a content delivery network (Cloudflare). To route traffic, keep the site available, and block malicious or automated requests, Cloudflare processes standard technical information such as your IP address, browser type, and the pages you request. When you submit the contact form, your IP address is also sent to Cloudflare’s Turnstile spam-check service to confirm the request is not from a bot.

Website: aggregate traffic statistics. We use Cloudflare Web Analytics to understand how many people visit the site and which pages are popular. Cloudflare Web Analytics is privacy-first: it does not use cookies, does not fingerprint your device, and does not track you across other websites. It reports totals such as page views, visits, referring sites, browser, operating system, and country, not individual profiles.

Apps: telemetry from our Business Central apps. Our apps are extensions that run inside Microsoft Dynamics 365 Business Central. To monitor their health and improve them, they send operational telemetry to Microsoft Application Insights (a Microsoft Azure service). We deliberately limit this telemetry to operational information and do not store any of your business data or customer records in Application Insights. The telemetry consists of:

• Error codes and related diagnostic information about problems the app encounters
• Usage statistics, such as the number of records processed and the number of errors over a period of time
• Pseudonymous identifiers, in the form of GUIDs (long ID numbers): the Azure AD tenant ID, the Business Central company ID, and the Business Central user ID, together with the app name and version

These identifiers are GUIDs generated by Microsoft’s platform. They contain no names, email addresses, or business-record content. We describe them as pseudonymous rather than anonymous because, in combination, they could in principle be linked back to a specific environment or user, so we treat them as personal data and protect them accordingly.

This telemetry is a required part of how our apps operate and are supported. It allows us to detect and fix problems, and it cannot be disabled for an individual customer.

Cookies and similar technologies

This section is about the website. Our Business Central apps run inside Business Central and do not set browser cookies.

Our website does not set cookies of its own, and it does not use localStorage, tracking pixels, or fingerprinting to profile visitors.

The only cookies that may appear are strictly necessary security cookies set by Cloudflare (for example, a bot-management cookie) when its security or spam-check features run, most noticeably on the contact page, where the Turnstile check appears. These cookies exist to keep the site secure and are not used for advertising or analytics.

Because we use no analytics, functionality, or advertising cookies, this site does not display a cookie consent banner. You can still block or delete cookies in your browser settings; doing so will not affect your ability to read the site, though it could interfere with the contact form’s spam check.

How we use your information

We use the information described above to:

• Read and respond to messages you send through the contact form, including arranging demos, answering pricing questions, and providing support.
• Send you a confirmation email acknowledging that we received your message.
• Follow up on your interest when Microsoft shares your information with us, with your consent, after you obtain or trial one of our apps on AppSource.
• Create and manage your app registration and license records when you register one of our apps.
• Invoice your organization (or your Business Central partner) for purchased apps, record payments, and maintain the business and financial records required to operate.
• Keep the website secure, available, and working correctly, and prevent spam and abuse.
• Understand overall site traffic so we can improve the content and layout.
• Monitor the reliability and performance of our Business Central apps, diagnose and fix errors, and understand which features are used so we can improve the apps.

We do not use your contact-form details to send marketing emails unless you have separately asked us to, and we do not add you to any mailing list from this website.

Who we share your information with

We do not sell your personal information, and we do not share it for advertising. We share information only with the service providers that make the website, the contact form, and the apps work, and only as needed for them to provide that service:

Each provider processes this information on our behalf under its own privacy terms. We may also disclose information if required by law, to respond to a valid legal request, or to protect our rights, safety, or property.

If Blue Dragonfly is ever involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We would let you know before your information became subject to a different privacy policy.

How long we keep your information

• Contact-form messages and AppSource lead information are delivered to our email and business systems. We keep them as long as needed to respond to you and for our ordinary business records, then delete them when they are no longer needed.
• App registration records are kept in our license management system for as long as your organization has a registration or license for one of our apps, and afterward as part of our ordinary business records.
• Customer, invoice, and payment records are kept for as long as required for accounting, tax, and other legal obligations.
• Website traffic statistics in Cloudflare Web Analytics are aggregate and are retained according to Cloudflare’s standard retention period. They are not tied to a named individual.
• App telemetry in Application Insights is retained for 90 days, after which it is deleted automatically.
• Our service providers keep operational logs (for example, email delivery logs) for their own limited periods under their privacy policies.

How we protect your information

The contact form is submitted over an encrypted (HTTPS) connection, and messages are delivered through reputable providers. App telemetry is transmitted to Microsoft Application Insights over encrypted connections and stored on Microsoft’s Azure infrastructure. No method of transmission or storage is completely secure, but we take reasonable measures to protect the information we handle.

International visitors

Blue Dragonfly is based in the United States, and our website and apps are directed to businesses in the United States. Our service providers may process data in the United States and other countries. Where our providers transfer personal data internationally, they rely on recognized safeguards such as the EU-US Data Privacy Framework or standard contractual clauses, as described in their own privacy documentation. Business Central and Application Insights data are hosted on Microsoft’s infrastructure in the regions Microsoft operates.

Your privacy rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, or delete it, or to object to certain processing. The simplest way to exercise any of these rights is to send us a request through the contact page. We will respond as required by applicable law.

If you are in the European Economic Area or the United Kingdom (GDPR): for contact-form and marketplace lead information, our legal basis is your request to us and our legitimate interest in responding to inquiries and keeping the site secure. For app registration, billing, and payment records, our legal basis is the performance of our contract with your organization and our legal obligations to keep business and tax records. For app telemetry, our legal basis is our legitimate interest in monitoring the health and security of our apps and improving them; the telemetry is pseudonymized, limited to operational data, and deleted automatically after 90 days. You have the right to access, correct, delete, or port your information, to object to or restrict processing, and to complain to your local data-protection authority.

If you are a resident of a US state with a privacy law (such as California, Utah, Colorado, Virginia, or Texas): you may have the right to know what personal information we collect and why, to request access to or deletion of it, and not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under these laws. The categories we handle are limited to identifiers (name, email, and phone number from the contact form, an AppSource lead, or an app registration; and, for app telemetry, pseudonymous GUIDs such as tenant, company, and user IDs), commercial information (company details, inquiries, app registrations, and billing and payment records), and internet or network activity (website technical data, app usage statistics, and Business Central environment details). To make a request, contact us through the contact page.

Do Not Track

Because we do no cross-site tracking and use no advertising or tracking cookies, there is nothing for a “Do Not Track” browser signal to turn off on this site.

Children’s privacy

Our website and apps are intended for business audiences and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Our apps and the Microsoft Marketplace

Blue Dragonfly builds apps for Microsoft Dynamics 365 Business Central. Here is how data works with those apps:

• Getting the apps. Our apps are distributed through Microsoft’s commercial marketplace (Microsoft AppSource / Marketplace), and you can start a trial directly from a listing. When you obtain, trial, or purchase an app through Microsoft, that transaction is handled by Microsoft under Microsoft’s own terms and privacy statement, not by Blue Dragonfly. During this process, Microsoft asks for your consent to share your information with the publisher. If you agree, Microsoft sends us the lead information described above.
• Where the apps run. Once installed, the apps run inside your own Business Central online environment, which your organization operates and Microsoft hosts on its Azure infrastructure. Your business data stays within your Business Central environment. Aside from the registration information you submit when registering an app and the operational telemetry described above, the apps do not send your data to us.
• Telemetry. As described above, the apps send operational telemetry to Microsoft Application Insights so we can monitor their health and improve them. This telemetry is required for the apps to operate and be supported. Blue Dragonfly is the party that decides what telemetry our apps collect and why (the “controller”); Microsoft hosts Business Central and the Application Insights service that stores it (a “processor” and host). Your organization remains in control of its Business Central environment and its business data.

For information on how Microsoft handles data in Business Central and Azure, see Microsoft’s privacy statement and Trust Center.

Changes to this policy

We may update this policy from time to time. When we do, we will post the new version on this page and update the “Last updated” date above. Significant changes will be highlighted where appropriate.

Contact us

If you have any questions about this Privacy Policy or your information, contact us through the contact page.

Blue Dragonfly, LLC PO Box 681971 Park City, Utah 84068 United States