Privacy Policy

1. Who we are

ImportToD365 is a software service developed by Hexabyrd. We are the data controller responsible for the personal data we collect through this site.

2. What data we collect

Waitlist / Early Access: when you submit the early access form, we collect your email address, registration timestamp, and language preference.

Contact form: when you write to us, we collect your name, email address, and message content.

Usage data: through Vercel Analytics, we collect anonymous visit data (pages visited, country of origin, device type). This data does not include personally identifiable information, and we do not use tracking cookies.

3. How we use your data

Email (waitlist): to notify you when ImportToD365 is available and deliver your Early Access benefit if applicable.

Contact form: solely to respond to your inquiry.

Usage data: to understand visitor behavior and improve the site experience.

4. Legal basis

We process your personal data based on your explicit consent when submitting our forms. You may withdraw consent at any time by contacting us, without affecting the lawfulness of prior processing.

5. Who we share data with

We do not sell or share your personal data with third parties for commercial purposes. We work with the following trusted providers:

— Vercel: hosting and anonymous analytics (vercel.com/legal/privacy-policy).

— Google Workspace: form processing via Google Apps Script.

6. How long we retain your data

Waitlist emails: until product launch, or until you request deletion.

Contact messages: up to 12 months from receipt.

Analytics data: per Vercel's policy (anonymized, no personal data).

7. Your rights

You have the right to access your personal data, request its correction or deletion, withdraw your consent, and request data portability. To exercise any of these rights, contact us and we will respond within 30 days.

8. EU Users

If you are located in the EU, your rights are protected by the General Data Protection Regulation (GDPR — Regulation 2016/679). If you believe we process your data unlawfully, you may lodge a complaint with the data protection authority in your member state.

9. US Users — CAN-SPAM & State Privacy Laws

If you are located in the United States, the following applies:

CAN-SPAM Act: every commercial email we send identifies ImportToD365 as the sender, includes our contact information, and provides a clear way to opt out. We honor all opt-out requests within 10 business days.

California (CCPA): we do not sell your personal data. California residents may request access to or deletion of their personal data by contacting us.

Other states (Virginia, Colorado, Texas, etc.): we apply the same rights — access, correction, and deletion — to all US residents regardless of state.

9. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration. However, no internet transmission system can be guaranteed 100% secure.

10. Cookies

This site does not use tracking or advertising cookies. Vercel Analytics operates without cookies and is GDPR-compliant by design.

11. Changes to this policy

We may update this policy periodically. We will notify you of significant changes by email if you are on our waitlist. The last updated date is always shown at the top of this page.

12. Contact

—