Privacy policy

Comostasis is operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("Comostasis", "we"). For anything in this policy, write to privacy@comostasis.com.

When you request a quote from the estimate page we receive your name, company, email address, your message, the scope you selected in the estimator and the estimate it produced. We also record the time of the request and the IP address and country it came from, to deal with abuse.

We use this to reply to you and prepare a proposal. Quote requests are delivered to us by email through Resend. The site is hosted on Cloudflare, which processes request data such as IP addresses to serve and protect it. We do not use advertising or analytics cookies.

When you engage us, we process data from your Dynamics GP and Business Central environments under the agreement and data processing agreement we sign with you. That data is used only to deliver your engagement, and how it is accessed, isolated, retained and erased is described on our security page.

The processors we use for engagement data are Anthropic (AI models, under terms that exclude training on your data), Deepgram (speech, only if you choose a voice interview), and the email and storage providers our deployment runs on, which are named in the data processing agreement.

Comostasis Reconciliation Readback is a read-only extension that publishes API pages inside your own Business Central tenant. It sends no data anywhere and collects no telemetry. Figures are read from those pages only by a Comostasis engagement you have authorised, with credentials you grant and can revoke.

Quote requests are kept for as long as we are in contact about a possible engagement, and deleted on request. Engagement data is kept and erased as set out in your agreement and on our security page.

Depending on where you are, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we process it. Write to privacy@comostasis.com and we will respond within the time the law requires. You can also complain to your local data protection authority.

We will update this page when our practices change and revise the date at the top.