This Cordex-Insights Privacy & Data-Flow Statement forms part of the Cordex-Insights EULA.
Scope & roles
This statement explains what data Cordex-Insights stores, where it goes, and who is responsible for it. It forms part of the Cordex-Insights EULA and supplements our Privacy Policy.
For Customer Data, you decide what is collected and why, and you are responsible for it under privacy law. We are the provider of the Software. We do not host or receive your Customer Data through the Software.
What is stored, and where
- Your Dataverse environment: your records, saved charts, boards, layouts, settings and AI configuration.
What reaches us
For licence checks, the Software sends Key-Warden your licence code, environment identifier, Plan and seat count. It does not send us your records.
Third parties
- Microsoft Dataverse: where everything is stored, in your tenant.
Each third party handles data under its own terms and privacy policy.
AI data flows
Cordex AI is off by default. When an administrator turns it on and a user asks a question, the Software sends the column names, filters and data needed to answer the request directly from your environment to the AI provider you configure, using your own account and key. It does not pass through us. The provider’s retention and training settings are set in your agreement with that provider; choose a provider and plan that meet your obligations. Responses are shown to the user and may be saved in your environment.
With a direct provider, users who can use Cordex AI can technically read the provider key. To avoid this, use an in-tenant option such as your own Power Automate flow where available.
Security
We design the Software to keep Customer Data in your environment, use encrypted connections, sign licence tokens, and avoid storing secrets in the browser. You are responsible for the security of your devices, servers, tenants, accounts, keys and backups, and for the access you grant.
Retention & deletion
You control how long Customer Data is kept in your environment. Uninstalling the managed solution deletes its tables, saved charts and settings. Your own business records are not deleted. Export any saved charts and layouts you need first.
We keep licence, account and billing records for as long as needed to provide the service and meet legal obligations (generally 7 years for tax records), then delete or de-identify them.
Your obligations
You must have a lawful basis and any required consents for the data you record, give any required notices, respond to access and correction requests, and meet the Australian Privacy Principles and any health records or sector laws that apply to you.
Overseas disclosure
Data in your environment stays where you host it. Our licensing and account records are held in Microsoft Azure in Australia. Payment providers and any AI provider you choose may process data overseas under their own terms.
Contact
MYITANDAPPS PTY LTD · ABN 82 659 633 888 · PO Box 7570, Redland Bay QLD 4165, Australia
Email: cordex-insights@myitandapps.com.au