Legal
Last updated: July 15, 2026
This Privacy Policy describes how AMReport ("we", "us", or "our") collects, uses, stores, and protects information when you use the AMReport Reliability Performance Review application (the "Service"). By using the Service, you agree to the practices described below. This policy applies to all users, whether or not they are logged in.
Account information: When you register or sign in, we collect your email address, display name, and authentication credentials. We support sign-in via email/password, Google, and Microsoft accounts, and we receive the email address and basic profile information those providers share with us.
Customer profile information: A site administrator or company administrator may associate your email address with a customer (company) profile. This grants you access to that customer's reports and dashboard. Profile data may include the company name, contact name, site location, and the list of team email addresses authorized to view the company's data.
Report recipient list: Administrators may add email addresses to a company's report notification list so those recipients receive an email when a scheduled report is published. Being on this list does not grant dashboard access — it only enables report notification emails.
Connection metadata: When a Dynamics 365 environment is connected, we store the environment URL, the Azure tenant ID, the service principal (app) client ID, and the account email that authorized the connection, so we can retrieve maintenance data on your behalf.
When you authorize the Service through Microsoft Azure, we request delegated permission to read Asset Management and Inventory data entities from your Dynamics 365 environment. This may include work orders, work order jobs, maintenance requests, maintenance schedules, assets, asset criticalities, asset bill of materials, asset counters, released products, product translations, item coverage settings, warehouse and site on-hand inventory, and work order line schedules. We use this data solely to generate reliability performance and inventory data-quality reports for your account.
We do not modify or delete data in your Dynamics 365 environment. All access is read-only. We do not access financial, HR, or customer relationship data beyond what is required to produce maintenance reliability and inventory reports.
Identity verification for report viewers: To comply with Microsoft multiplexing licensing requirements, every non-administrative user who views live D365-sourced dashboard data must verify their Microsoft Entra ID identity. The Entra ID tenant of the verified identity must match the tenant of the connected Dynamics 365 environment. This ensures each report viewer holds a valid licensed identity in the target tenant. Users whose identity cannot be verified or whose tenant does not match are blocked from accessing live D365 data until verification is completed.
We use the information we collect to:
• Operate, maintain, and secure the Service, including authenticating you and linking you to the correct company profile.
• Retrieve maintenance and inventory data from your Dynamics 365 environment and generate reliability and data-quality reports.
• Send you scheduled report notification emails when a new report is published for your company.
• Communicate with you about your account, subscription, and service updates.
• Improve the Service, including the accuracy of report calculations and the quality of data analysis.
• Enforce access controls so each user only sees data for the company profile(s) they are linked to.
We do not sell your personal information or your Dynamics 365 data to third parties. We do not use your data to train external machine-learning models.
Report data, inventory snapshots, and configuration metadata are stored in a secure, encrypted database hosted on managed cloud infrastructure. Access tokens for Dynamics 365 connections are encrypted at rest. Data is isolated per customer account — each client can only access data associated with their own customer profile. Row-level security policies enforce that non-administrative users can only read records belonging to their linked company.
We restrict internal access to customer data to authorized personnel who need it to operate the Service. All actions involving sensitive operations (D365 data fetch, access revocation, report generation, subscription changes, user management) are recorded in an audit log with the actor, timestamp, and outcome.
We use industry-standard safeguards including encrypted data transmission (TLS/HTTPS), encrypted data storage, and least-privilege access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain your account information for as long as your account is active. Reliability report records and inventory snapshots are retained for the lifetime of the associated customer profile so historical trend analysis remains available. You may request deletion of your account and associated data at any time by contacting us, and we will remove your personal information and disconnect any linked Dynamics 365 environment.
Audit log entries are retained to support security monitoring and compliance. Automated scheduled reports are generated only at the frequency and time configured by an administrator on the customer profile — the Service does not generate reports except at those configured times or on explicit manual request.
We do not share your personal information or Dynamics 365 data with third parties except:
• As required by law or in response to a valid legal request.
• As necessary to operate the Service (for example, cloud infrastructure, database, and email delivery providers bound by confidentiality and data-processing agreements).
• With your consent.
We use Stripe for subscription payment processing. When you purchase a subscription, Stripe processes your payment information under Stripe's own privacy and security practices; we do not store your full card details. We store the Stripe subscription identifier and billing period so we can manage your access.
You may review, update, or request deletion of your personal information. You can disconnect your Dynamics 365 environment at any time, which removes the stored access tokens for that connection and stops all further data retrieval. A site administrator may also disconnect a client's Dynamics 365 environment on the client's behalf, clearing the stored tokens and connection state while preserving the environment configuration so the client can reconnect without re-entering it. Company administrators can add or remove team email addresses and report notification recipients for their company profile.
Your data may be processed and stored on servers located outside your country of residence. By using the Service, you consent to such transfers in accordance with this Privacy Policy.
The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Material changes will be communicated to active users where feasible.
If you have questions about this Privacy Policy or your data, please contact us at the address provided in your service agreement.
These Terms of Service ("Terms") govern your use of the AMReport Reliability Performance Review application (the "Service"). By creating an account or using the Service, you agree to be bound by these Terms.
You are responsible for maintaining the security of your account credentials and for all activity that occurs under your account. You agree to notify us immediately of any unauthorized use of your account. You must provide accurate and complete information when registering.
The Service supports three roles. Site administrators manage customers, imports, reports, and user accounts. Company administrators manage their own company profile, team email lists, and report schedules, but cannot modify other companies. Clients view the dashboard and reports for the company profile they are linked to. Each client account is restricted to its own data and environment.
You agree not to misuse the Service, attempt to access data that does not belong to your customer account, or use the Service in a way that could damage, disable, overload, or impair it. You may not reverse engineer, decompile, or attempt to extract the source code of the Service.
Connecting a Dynamics 365 environment is optional. You grant the Service read-only access to your environment by authorizing it through Microsoft Azure or by providing service-principal (app registration) credentials. You may revoke access at any time from your Azure account or by disconnecting within the Service, and a site administrator may disconnect a client environment on the client's behalf. You are responsible for ensuring you have the right to authorize access to the connected environment and the data it contains.
To preserve Microsoft multiplexing licensing compliance, non-administrative users viewing live D365-sourced data must verify a Microsoft Entra ID identity whose tenant matches the connected environment's tenant. Access to live data is denied until this verification succeeds.
Some features of the Service require a paid subscription. Subscription fees are billed in advance through Stripe and are non-refundable except as required by law or as described in your plan. Access to live dashboards and report features is controlled by your subscription tier and billing status. Monthly access is controlled by ongoing payment status; annual subscriptions begin a fixed term that ends at the period end date if not renewed.
Site administrators may waive billing for specific accounts, assign subscription tiers, or add manual subscriptions (for accounts paying outside the integrated payment system) from the admin Subscriptions page. A waived or manually-added subscription grants the same access as a Stripe-driven subscription for its configured period.
Reports are generated automatically only at the frequency (weekly or monthly), day, and time configured by an administrator on the customer profile. The Service does not generate reports at any other time except on explicit manual request. Scheduled report notifications are emailed to the company's report recipient list and contain a link to view the report in the client portal.
The Service, including its design, methodology, and documentation, is provided for your use. Reports generated from your data belong to you. We retain all rights in the Service software, report calculation methodology, and branding.
We strive to keep the Service available but do not guarantee uninterrupted or error-free access. We may modify, suspend, or discontinue features with reasonable notice. Maintenance may occasionally cause temporary downtime.
The Service integrates with Microsoft Dynamics 365, Microsoft Azure, Google, and Stripe. Your use of those services is governed by their respective terms and privacy policies. We are not responsible for the availability or accuracy of data provided by third-party services.
The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. Report calculations and data-quality assessments are based on the data available in your Dynamics 365 environment and may contain errors or omissions.
To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or data, arising from your use of the Service. Our total liability for any claim arising from the Service is limited to the amount you paid us in the twelve months preceding the claim.
You agree to indemnify and hold us harmless from claims arising from your use of the Service, your violation of these Terms, or your infringement of any third-party rights, including the right to access the connected Dynamics 365 environment.
You may stop using the Service at any time. We may suspend or terminate your access if you violate these Terms, if your account is no longer authorized, or if your subscription expires and is not renewed. Upon termination, we will cease retrieving data from your connected environment and will remove stored access tokens.
We may update these Terms from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the new Terms.
Questions about these Terms can be directed to the contact address provided in your service agreement.
© 2026 AMReport. All rights reserved.