Privacy policy: Waypoint Power Tools for Cin7

Applies to the Chrome extension "Waypoint Power Tools for Cin7", published by Waypoint.

The short version

The toolkit adds a keyboard layer on top of Cin7 Core. It runs inside your own signed-in browser session and reads the same data Cin7 already shows you. There is no Waypoint server, no account to create and no API key to configure. Nothing you look at in Cin7 is sent to Waypoint or to anyone else.

That is not the same as "we collect nothing", and this page says exactly what the extension touches, what it keeps, and the small number of things that do leave your browser.

Where it runs

Only on inventory.dearsystems.com. The extension has no access to any other site, and it asks for no permission that would give it any. It cannot see your other tabs.

What it reads

The pages and data Cin7 Core sends to your browser when you are signed in. In practice that is product, sales order, purchase order, stock, customer and supplier records, and the figures shown alongside them.

It reads this with your existing session. It never reads or stores your Cin7 login, your password, an API key or an authentication cookie.

It is read-only against your Cin7 account with no exceptions. It does not create, change or delete anything, and Cin7 stays the system of record.

What it keeps, and where

The following are stored in this browser's own local storage, on this device. They are never uploaded:

• Your settings, including which features you have switched on and your keyboard shortcuts
• Pinned records and saved searches
• Recently viewed records, so the palette can offer them again
• A short log of actions taken in the toolkit, used to make the palette's suggestions useful

Clearing the extension's data, or removing the extension, removes all of it. There is no copy anywhere else.

What leaves your browser

Three things, and that is the complete list.

1. Read calls to Cin7. The toolkit fetches from Cin7's own endpoints, from your tab, using your session. Every one of them is a read. Nothing is created, changed or deleted.

2. Files you save. A health check, a reference workbook or a copy of your settings is written to your own device by your browser when you ask for one. It is not sent anywhere.

3. Two values on a link, when you click one. The Help tab opens Cin7's help centre, the Waypoint website or a Waypoint request form as a normal browser tab. The request form link carries which of the four options you clicked and your toolkit version number, as a v= parameter. It carries nothing else: not your Cin7 account name, not the page you were on, and nothing from the screen. Each option names where it sends you and what it carries before you click. The welcome page shown after installing carries the same version number and nothing more.

Support runs

So it can read what Cin7 sends back, the toolkit sits alongside your browser's own network calls on Cin7 pages. It keeps none of it.

If you ever ask Waypoint for help, a support run can be started from the toolkit. While a run is open it records endpoint and field names, value types and counts only. It does not record a customer name, a product code, an order number, a quantity or a figure. It runs only while you have started it, only on Cin7 pages, and the result stays in this browser until you choose to send it to us. Closing Chrome ends any run that was left open.

Nothing is recorded before you start a run.

Data types we declare to the Chrome Web Store

Chrome requires an extension to declare what it handles, whether or not anything is transmitted. We declare:

• Website content. Cin7 Core page and response data, which is the point of the tool.
• User activity. Which records you opened and which searches you saved, so recent records and pins work.
• Web browsing activity. Paths within Cin7 Core only, for the recent records feature. Nothing about any other website.
• Personally identifiable information. Customer and supplier names, contacts and email addresses appear in previews, search results and exports because they are in your Cin7 data.
• Financial information. Order values, pricing, credit limits and similar business figures. This means business financial data. The toolkit never touches card numbers, bank details or payment instruments.

We do not handle health information, personal communications, location data or authentication credentials.

Limited Use

Our use of information received from Google APIs, and of user data handled by this extension, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

• We do not sell user data, and we do not transfer it to third parties, other than where a transfer is needed to comply with applicable law.
• We do not use or transfer user data for any purpose unrelated to the extension's single purpose.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.
• We do not use user data for advertising, and the extension contains no advertising or tracking.

There is no analytics in the extension.

Third parties

None receive your data. There is no Waypoint server behind the extension, no database and no account system. The only parties involved are Cin7, whose data it is and whose service you are already signed in to, and Google, who distribute the extension through the Chrome Web Store.

If you use the Help tab, opening those links takes you to Cin7's help centre, to the Waypoint website, or to our request form, each of which has its own privacy handling as an ordinary website visit.

Your controls

• Every feature has an on and off switch in the extension's Features list, and a master switch turns all of it off at once.
• Recent records, pins and saved searches can be cleared from the extension.
• Removing the extension removes everything it has stored.

Children

The extension is a business tool and is not directed at children.

Changes to this policy

If what the extension handles changes, this page changes with it, before the new version ships. The date at the top is the date of the last change.

Contact

Questions about this policy, or about what the extension does, go to Waypoint at [email protected].