Privacy Policy

D365 AI Data Manager - Chrome Extension

Your D365 data stays under your control.

The extension reads from your Microsoft environment with your browser sign-in. AI is optional, and there are no publisher data servers, analytics, or tracking.

D365 data and local storage

The extension reads Dynamics 365 Finance and Operations data through OData using your existing browser sign-in. Requests to D365 are read only; the extension does not create, update, or delete D365 records. There is no intermediary server run by us.

Settings, favorites, saved queries, detected Copilot Power Apps, provider keys, and cached metadata are kept in this browser profile. Saved dashboards and widgets can retain sampled field values, aggregates, analysis, and alert settings in local browser storage. A short lived Copilot connection token is kept in browser session storage. Exports you request are written to a file on your device.

Optional AI

AI is off by default. You can connect your company's Copilot Studio agent through a Power App that you publish. This route does not require an API key. The extension observes that app's Copilot connector request and uses its session connection. If no AI route has been set up, opening your published Copilot Power App lets the extension remember and connect to it. It also keeps a local list of up to ten detected Copilot apps that you can choose from in Settings.

Alternatively, you can provide your own key for Google Gemini, OpenAI, Anthropic, or OpenRouter. The key is stored only in this browser and sent only to the selected provider's API host after you grant permission for that host: generativelanguage.googleapis.com, api.openai.com, api.anthropic.com, or openrouter.ai, respectively. The extension can fetch that provider's model list; this request does not include D365 data.

When you use AI analysis or ask an AI question, the selected AI route receives your prompt and the data needed for that task: field names and profiles, computed aggregates, and small samples of selected rows or local file excerpts. A paired local AI app can also start analysis; if AI is connected, opening that dashboard can start generation without another click. The extension may read all matching D365 rows to compute aggregates, but sends bounded profiles and samples to the configured AI route. Dashboard edits can include saved sampled profiles and earlier analysis. Data in chosen fields may contain personal or sensitive business information. The extension does not send this material to another AI route or to a server run by us. Uploaded files are parsed locally; the original file is not uploaded to us.

Optional local connector

The connector for Claude Code, Codex, Claude Desktop, and Codex desktop on the same computer is off by default. You turn it on in Settings and pair it with a one-time code. Once paired, those apps can request D365 reads through your signed-in browser, create and pin widgets, set widget alerts, open dashboards and the explorer, start analysis, and export selected views to your Downloads folder. Data returned to one of those apps can then go to that app's own AI service under its terms. Remove the pairing or turn off the connector in Settings to stop this access.

Widget alerts and Microsoft 365

If you enable a widget alert, the browser checks it about once an hour while the browser is available. You may grant the optional notifications permission for desktop alerts; the extension can show alert status without that permission.

If you add Office 365 Outlook, Microsoft Teams, Office 365 Users, SharePoint or Excel Online to your own Power App, the extension can read those sources through your own connections, the same way it reads D365. They appear under Connected sources. Their data is shown in the extension and, only when you use an AI feature on it, sent to the AI route you chose. Apart from the alerts described below, the extension does not send messages, and it never edits or deletes anything in these services.

If you turn it on for an alert, the alert can also be delivered to your own Teams chat or your own mailbox through your own connection. It is never sent to anyone else.

Dataverse (Power Platform)

When you open the extension on make.powerapps.com or make.powerautomate.com, it reads the environment list that page already keeps in your browser, only each environment's name and Dataverse address, to find the selected environment. It never reads sign-in tokens or anything else on the page. If your browser has no session for that Dataverse environment yet, the extension opens it once in a background tab so your normal single sign-on runs, then closes the tab. Dataverse tables are then read with your own session and your own security roles, read only, the same way as D365 data.

Setup video

The welcome page and setup guide show a setup video. Nothing is loaded from YouTube until you press play. When you do, the video plays from YouTube's privacy-enhanced domain (youtube-nocookie.com) under YouTube's own privacy policy. No D365 data is sent.

Deleting your data

Reset in Settings removes display, AI, and environment preferences, including saved provider keys and cached model lists. You can delete individual saved dashboards and widgets in the extension. Reset does not remove favorites, saved queries, detected Copilot app history, or saved dashboard data. To remove all extension data from this browser profile, uninstall the extension. Delete any files you exported separately from your device.

Permissions

Children's Privacy

This extension is designed for business use with Dynamics 365 and is not directed at children under 13.

Contact

For privacy questions, contact your organization's IT department.

Last updated: October 10, 2026