Last updated: 9 July 2026
The short version. TSE-Assistant is local-first by design. Your source code, your metadata index, and your environment data are processed on your machine and never uploaded to us. What we hold is what any subscription service needs: your account identity, your plan, and privacy-safe operational records.
TSE-Assistant is operated by TSE IT SOLUTIONS LIMITED ("we", "us"), company number 15419504, registered in England and Wales at 25 Waterfield Way, Clipstone Village, Mansfield, NG21 9FD — the data controller for the personal data described here. We provide a metadata and X++ development copilot for Microsoft Dynamics 365 Finance & Operations, delivered as a locally-installed agent with a companion web service for accounts, licensing and team administration. Contact: support@tse-assistant.com.
Account data. When you sign in we receive your identity from your chosen provider — Microsoft (name, email, directory/account identifiers) or GitHub (username, account id, email). We use it to create and secure your account. We never see your passwords.
Subscription and billing data. Your selected plan and add-ons, trial and license state, and activation history. Card payments are processed by our payment provider; we do not store card numbers.
Team administration data (company plans). Seat assignments, roles and tiers, registration-token issuance, environment/machine status reports (index build id and freshness timestamps — never index contents), and the organization's configuration and instruction packs that admins author for their own teams.
Audit fingerprints. For accountability, the agent records which tool was invoked, when, by which seat, with a cryptographic fingerprint and — for change-making tools — a names-only summary (object and model names). These records are value-free by construction: they never contain source code, query results, or business data. Company-plan audit records are retained 90 days (180 days for change-making events), then deleted automatically.
The metadata index built from your PackagesLocalDirectory; your X++ source code; the contents of files the tools read or write; results of any data reads from your environment; your local activity log and editable instruction packs (Ops features); your database credentials, which are sealed in a local encrypted store. None of this is transmitted to us.
To operate the service: authentication, license issuance and enforcement, seat and billing management, support, and abuse prevention. We do not sell personal data, we do not use your data to train AI models, and we do not serve advertising.
Microsoft Azure (hosting, UK South region), Microsoft Entra ID and GitHub (sign-in), and our payment processor for subscription billing. Each processes only what its function requires.
Account and subscription records are kept while your account is active and for a limited period thereafter as required for legal and accounting purposes. Audit fingerprints follow the retention windows above. You may request deletion of your account and associated personal data at any time via the contact address; local data on your machines is yours to delete directly (uninstalling the agent removes its state directory).
Transport encryption (TLS) everywhere, secrets held in managed stores, per-tenant isolation of team data, single-use time-limited activation codes and registration tokens, and signed licenses. The local agent encrypts its backups and credential store on your machine.
Depending on your jurisdiction (including under the GDPR if you are in the EU/EEA or UK), you may have rights of access, rectification, erasure, restriction, portability and objection. Write to the contact address and we will respond within the statutory period.
We will post any changes to this policy on this page and update the date above. Material changes will be highlighted on the website or by email.