In this policy, we lay out: what data we collect and why; how your data is handled; and your rights with respect to your data. We never sell your data.
This policy applies to the Extended Browser Module Chrome Extension built and maintained by Hebb Technologies Inc.
Our guiding principle is simple: Your ERP data belongs to you, and it never leaves your browser.
What we collect and why
License Verification (Hashed Data)
To verify that you have a valid trial or active license to use the extension, we collect your Epicor Installation ID.
- How it is handled: This ID is hashed (cryptographically scrambled) on your device before it is sent to our servers. We cannot reverse this hash to see your original Installation ID.
- Why: To confirm your license status without transmitting sensitive system identifiers.
Usage Analytics (PostHog)
We use a third-party service called PostHog to understand how the extension is being used.
- What is sent: We collect minimal, anonymous interaction data, such as which buttons are clicked (e.g., "Execute BAQ" or "Toggle Side Panel").
- What is NOT sent: We do not collect input values, query results, or any text you type into the extension.
Voluntary Correspondence
When you email us with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future.
What we DO NOT collect (Your ERP Data)
We do not collect, store, or transmit your ERP data, session IDs, or API data.
When you use the extension to interact with your ERP system (e.g. running a BAQ):
- Local Storage Only: Connection parameters are stored strictly in your browser's local memory.
- Direct Communication: When you execute a query, the request is sent directly from your browser to your ERP instance. It does not pass through our servers.
- Automatic Purge: This sensitive session data is automatically purged from memory when you close the extension or the browser tab.
When we access or disclose your information
To provide the service: We use third-party subprocessors to provide infrastructure.
- Digital Ocean: Hosts our license verification server.
- PostHog: Processes anonymous usage analytics.
When required under applicable law:
We will only share user information if compelled by legal process (e.g., a court order or subpoena). It is our policy to notify affected users before we disclose data unless we are legally prohibited from doing so.
Your rights with respect to your information
You have the right to know what personal information is collected, used, or shared.
- Right to Access & Correction: You have the right to request access to the information we have about you (primarily your support email history, as we do not hold user accounts).
- Right to Erasure: You may request that we delete your email correspondence or license record.
- Right to Non-Discrimination: We will not treat you differently because you have exercised your data privacy rights.
If you have questions about exercising these rights, please contact us at [email protected].
How we secure your data
- Encryption: All communication between the extension and our license server is encrypted via SSL/TLS.
- Local Security: Your sensitive ERP session data relies on the security of your local browser. We utilize Chrome's local storage, which ensures that data is not persisted to disk and is isolated to the extension environment.
Data retention
- Hashed License IDs: Retained for the duration of your active license or trial to ensure service continuity.
- ERP Session Data: We never had it. This data exists only in your computer's random access memory (RAM) while you are using the extension and is cleared immediately upon ending the session.
- Analytics: De-identified usage data is retained for analytics purposes to improve the product.
Changes and questions
We may update this policy as needed to comply with relevant regulations and reflect any new practices. If we make significant changes, we will update the date at the top of this page.
Have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch by emailing us at [email protected].