Privacy Policy — Pillaro Dataverse Plugin Framework

Effective 21 September 2026.

This policy explains how Pillaro Labs s.r.o. handles personal data in connection with the Pillaro Dataverse Plugin Framework, published on Microsoft AppSource and as open source at github.com/Pillaro-Standard/Dataverse-Plugin-Framework.

Who we are

The controller of personal data described in this policy is:

  • Pillaro Labs s.r.o.
  • Registered office: Nad koupadly 1019/1, Lhotka, 142 00 Praha 4, Czech Republic
  • Company ID (IČO): 24919756
  • VAT ID (DIČ): CZ24919756
  • Registered in the Commercial Register kept by the Municipal Court in Prague, file C 445936
  • Phone: +420 604 646 526
  • Email: obchod@pillaro.cz
  • Website: pillaro.cz

The short version

The software installed by this offer runs entirely inside your own Microsoft Dataverse environment. It sends no data to Pillaro Labs and no data to any third party. There is no telemetry, no usage analytics, no licence check and no call home. We have no access to your environment and we do not receive, store or process any data from it.

Data the software writes inside your environment

The framework creates three tables in the environment where it is installed. You remain the controller of everything they hold.

  • Runtime Setting — configuration values your administrators enter. Not intended to hold personal data, but nothing stops an administrator from putting some there.
  • Autonumbering — sequence configuration and the last number issued. No personal data.
  • Plugin Log — diagnostic records that can contain personal data. The framework logs the execution flow of each plug-in and task together with the context it ran on, which includes the values of the record being created or updated. If that record is a contact, an account or any other record holding personal data, those values appear in the log.

All three live in your Dataverse environment, under your tenant, your retention rules and your security model. They are never transmitted anywhere.

Controlling what is logged

  • The MinimalSeverityLevel runtime setting is the volume control. The recommended production value is 3. Values 0 and 1 produce full debug-level logging, including context data, and are meant for temporary troubleshooting rather than normal operation.
  • Access to Plugin Log records is governed by the security roles installed with the framework. Pillaro Log Reader grants read-only access; restrict it to the people who need it.
  • Plugin Log records are ordinary Dataverse rows. Delete them individually, in bulk, or with a scheduled bulk deletion job to enforce a retention period of your choosing.
  • Uninstalling the managed solution removes the tables and every record in them.

Data we do collect

We collect personal data only when you contact us directly, outside the software.

  • Support and issues. What you write in a GitHub issue or discussion is public and governed by GitHub's privacy statement. Please do not paste customer data into an issue.
  • Email and phone. If you contact us about the offer, commercial support or a security report, we keep the message and your contact details for as long as needed to deal with it and to meet our legal record-keeping obligations. Legal basis: our legitimate interest in answering you, or performance of a contract where one exists.

We do not sell personal data, we do not use it for advertising, and we do not use it to train machine-learning models.

Processors and transfers

The offer package itself is distributed by Microsoft through AppSource; Microsoft's handling of your acquisition of the offer is covered by the Microsoft Privacy Statement, not by this policy. Our own correspondence is handled by our email and code-hosting providers acting as processors. We do not transfer personal data outside the EEA except where those providers do so under an adequacy decision or standard contractual clauses.

Your rights

Under the GDPR you may request access to the personal data we hold about you, its correction or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to obchod@pillaro.cz. You also have the right to complain to a supervisory authority; in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

For personal data held in Plugin Log records inside your own Dataverse environment, the controller is you, not us. Requests from your data subjects go to you, and you can satisfy them by deleting the records as described above.

Security

The source code is public and can be reviewed by anyone. Vulnerability reports go to the process described in SECURITY.md. Because the software holds no data of ours, the security of the data it writes depends on the configuration of your own Dataverse environment.

Changes

We will update this page if the way the software or we handle data changes, and we will move the effective date at the top. The version in force is the one published here.

‍