Privacy Policy

• Directly from a website visitor, contact, subscriber, account owner, or user.
• From a customer that creates or manages user access.
• From connected customer systems, including Microsoft Dynamics 365 Business Central and approved integrations.
• From payment, email, hosting, identity, security, analytics, support, or communications providers.
• Automatically through use of the website, application, browser, device, session, and network.
• From publicly available business sources when reasonably required for business-to-business communication and permitted by law.

• Provide, configure, operate, maintain, secure, and improve AJAX OES.
• Create and administer tenants, users, roles, subscriptions, billing accounts, and go-live checklists.
• Process checkout, payment, subscription, cancellation, and billing activity.
• Authenticate users, manage sessions, reset passwords, prevent unauthorized access, and investigate security events.
• Run enabled operational workflows and customer-approved integrations.
• Respond to product, sales, pricing, support, implementation, billing, security, and partnership requests.
• Send account, service, security, billing, support, and operational communications.
• Measure usage, diagnose errors, maintain reliability, prevent abuse, and improve product performance.
• Meet contractual, legal, accounting, tax, regulatory, dispute-resolution, and recordkeeping obligations.
• Protect AJAX Software, customers, users, partners, and the public.

We do not use customer operational data for unrelated advertising or sell customer operational data as a data broker.

Depending on the jurisdiction and context, AJAX Software may process personal information with consent, to perform a contract, to take requested steps before entering a contract, to comply with law, to protect vital or legitimate interests, or for another permitted legal basis.

Where consent is required, it may be express or implied as permitted by law. Consent may be withdrawn subject to legal, contractual, security, and operational limits. Withdrawal does not affect processing already lawfully completed.

Customers control the business purpose, source, accuracy, configuration, user permissions, and lawful use of information placed in their AJAX OES tenant. Customers are responsible for providing required notices and obtaining required authority from their employees, contractors, growers, suppliers, customers, carriers, drivers, and other individuals.

AJAX Software accesses customer operational data only as reasonably required to provide, secure, maintain, troubleshoot, support, recover, or improve the contracted service, to follow customer instructions, or as required by law.

Tenant administrators determine which authorized users may access modules, locations, workflows, records, Business Central connections, devices, and settings.

• Cloud hosting, database, storage, networking, backup, monitoring, and security providers.
• Payment and subscription providers.
• Email delivery, customer support, communication, and notification providers.
• Identity, authentication, fraud-prevention, logging, and diagnostic providers.
• Microsoft Dynamics 365 Business Central and customer-authorized integration providers.
• Professional advisers, auditors, insurers, financial institutions, and legal service providers.

We may also disclose information when required by law, legal process, regulatory request, court order, or to protect rights, security, property, users, customers, or the public.

If AJAX Software is involved in a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, information may be reviewed or transferred subject to applicable confidentiality and legal requirements.

Hosted checkout and subscription payment processing may be provided by Stripe or another disclosed payment provider. Payment providers process payment credentials under their own terms and privacy notices.

AJAX Software receives transaction references and business information needed to administer checkout, customers, subscriptions, payment status, invoices, refunds, disputes, and accounting. AJAX Software does not intend to collect or store full payment-card numbers in AJAX OES application forms.

AJAX Software may use cookies and similar browser technologies required for authentication, security, session continuity, tenant selection, preferences, anti-forgery protection, and reliable application operation.

Public pricing and savings tools may use browser storage to preserve estimates on the user’s device. Clearing browser data may remove those saved estimates.

Optional analytics, advertising, or marketing technologies, if introduced, should be disclosed and managed according to applicable consent requirements. Browser settings may block some technologies, but doing so may prevent required application functions from working correctly.

We retain personal information only as long as reasonably required for the identified purposes, contractual services, customer instructions, security, fraud prevention, support, legal compliance, accounting, tax, dispute resolution, and enforcement.

Retention periods vary by record type. Account, subscription, billing, audit, security, and transaction records may be retained after account closure where required for legitimate business or legal purposes. Customer operational data is retained and deleted according to the applicable agreement, customer instructions, technical limitations, and backup cycles.

Information may remain in protected backups for a limited period before being overwritten or securely removed through normal recovery and retention processes.

AJAX Software uses administrative, technical, and organizational safeguards designed to protect personal information according to its sensitivity and the risks of unauthorized access, use, disclosure, alteration, loss, or destruction.

Safeguards may include tenant separation, access control, role permissions, authentication, session management, encryption in transit, secure development practices, logging, monitoring, backups, incident response, and restricted administrative access.

No website, network, cloud service, database, device, or transmission method can be guaranteed completely secure. Customers and users are responsible for protecting their devices, credentials, networks, browser sessions, and authorized access.

Do not submit passwords, payment-card numbers, private keys, access tokens, Stripe secrets, or Business Central credentials through public contact forms, ordinary email, or setup notes.

AJAX Software and its service providers may process or store information in Canada, the United States, or other jurisdictions where providers or customer-authorized services operate. Information in another jurisdiction may be subject to that jurisdiction’s laws and lawful access requirements.

Where required, AJAX Software uses contractual and other measures intended to support lawful cross-border processing. Customers with specific residency or transfer requirements should address those requirements before implementation.

• Request information about personal information held about them.
• Request access to or a copy of personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion, restriction, or objection to certain processing.
• Withdraw consent where processing depends on consent.
• Request portability where legally required and technically applicable.
• Opt out of eligible marketing communications.
• Make a complaint to AJAX Software or an applicable privacy regulator.

Rights are subject to identity verification and legal, contractual, security, confidentiality, privilege, recordkeeping, and technical limitations.

For information controlled by an AJAX OES customer, contact that customer first. AJAX Software may refer the request to the customer or assist the customer as required by the applicable agreement and law.

Account, security, billing, support, operational, and service notices may be necessary to provide AJAX OES and may not offer a marketing unsubscribe option.

Marketing emails will include an unsubscribe method where required. Unsubscribing from marketing does not prevent necessary transactional or service communications. Customers may also contact AJAX Software to update communication preferences.

AJAX Software and AJAX OES are business services and are not directed to children. We do not knowingly solicit personal information directly from children for public account creation or marketing.

Customers are responsible for ensuring that their use of AJAX OES complies with laws governing minors and employment, education, consent, or guardian authorization where those issues apply.

We may update this policy to reflect changes in AJAX OES, business practices, service providers, technology, contracts, or legal requirements. The current version will be posted on this page with an updated revision date.

Where required, we will provide additional notice or seek consent before a material change applies to previously collected personal information.

Contact AJAX Software with privacy questions, access or correction requests, consent withdrawals, security concerns, or complaints. Provide enough information to identify the relevant relationship or tenant, but do not send passwords, payment credentials, or system secrets.

We may need to verify identity and authority before responding to a privacy request. Individuals may also have the right to contact the privacy regulator in their jurisdiction.