Privacy Policy

Last updated: June 18, 2025

1. Introduction

BC Teams Chat (“we”, “our”, or “the Extension”) is a Chrome extension that lets you chat with Microsoft Teams from within Dynamics 365 Business Central. This Privacy Policy explains what personal information we access, collect, and transmit, how we use it, and what choices you have.

2. Information We Access and Collect

Microsoft Account Profile

• Display name
• Email address (userPrincipalName)
• Azure AD object ID

OAuth Tokens

• Access and refresh tokens issued by Microsoft identity platform (kept in memory only)

Optional Usage Logs

• Error messages (e.g. token refresh failures) for troubleshooting (no PII beyond what’s in the profile)

We do not access or collect your contacts, calendar, location, or any other Microsoft Graph resources beyond your basic profile.

3. How We Use Your Information

Authentication & Authorization

• To sign you in via Microsoft identity (MSAL) and obtain access tokens.

User Experience

• To fetch your profile from Microsoft Graph for display within the Extension UI.

Feature Functionality

• To enable chat, badge counts, and related notifications tied to your identity.

4. How We Share Your Information

• We do not sell, rent, or lease your personal information.
• We transmit tokens and profile requests only to Microsoft Graph (https://graph.microsoft.com).
• We do not share your data with any other third parties.

5. Data Retention

• All personal data (profile info, tokens) is stored in memory and cleared when your browser session ends or you sign out.
• We do not persist any personal data to disk, server, or cloud storage.

6. Security

• Tokens and profile data are held in your browser’s extension context, never sent to our servers.
• We follow best practices for secure storage in MV3 service workers and use HTTPS for all communications with Microsoft Graph.

7. Your Choices and Controls

• Uninstall the extension at any time via Chrome’s Extensions page.
• Sign out at any time using the Extension’s logout command, which clears all in-memory tokens and profile data.
• Revoke the Extension’s permissions in your Azure AD App Registrations or via your Microsoft account’s App permissions page; this will prevent further data access.

8. Changes to This Policy

We may update this Privacy Policy to reflect changes in features or legal requirements. We’ll post the revised date at the top and encourage you to review it periodically.

9. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: support@humboldt.io