Privacy Policy
Ponderosa Analytics is a product of Alamon, Inc. ("Alamon," "we," "us"), 315 W. Idaho, Kalispell, MT 59901, USA. This policy explains what we collect, why, and your choices. It covers this marketing website and the Ponderosa Analytics application, which connects to Microsoft Dynamics 365 Business Central to produce financial statements.
1. Information we collect
- Demo requests & enquiries. Name, work email, company, current reporting tool, and any message you submit through the "Request a demo" form.
- Account data. When your organization uses Ponderosa Analytics: your name, email, workspace membership, and role. Authentication is handled by Amazon Cognito.
- Customer financial data. On behalf of your organization ("Customer Data"), we process General Ledger and related data synced from Business Central to produce financial statements. We act as a processor of this data on your organization's instruction.
- Technical data. IP address and standard request logs, used for security, abuse prevention (including CAPTCHA), and reliability.
2. Cookies & similar technologies
We use only strictly-necessary cookies:
- Authentication — httpOnly session cookies that keep you signed in to the app.
- Security — Cloudflare Turnstile (bot protection on our forms) may set short-lived security cookies.
We do not use advertising or cross-site tracking cookies, and we do not sell personal information. If we ever add analytics, it will be disabled until you consent via the cookie banner. You can review your choice any time via Cookie preferences.
3. Subprocessors & third parties
We share data only with service providers that help us operate, under contract:
- Amazon Web Services — hosting, Cognito authentication, and SES email delivery.
- Cloudflare — bot protection (Turnstile) on public forms.
- Microsoft — Dynamics 365 Business Central / Microsoft Graph, for the integrations your organization configures.
- Google — where your organization enables Google Drive delivery or Google sign-in.
4. How we use information
To provide and secure the service, respond to demo requests and support, send transactional email (e.g. invitations, password resets, scheduled reports), and meet legal obligations. We rely on legitimate interests, contract performance, and consent as applicable.
5. Retention
We keep demo-request details for up to 24 months from your last contact unless you ask us to delete them sooner. Account data is kept for the life of your organization's account. Customer Data is retained per your organization's agreement and deleted or returned within 30 days of termination on request; backups are purged on a rolling basis.
6. Your rights
Depending on your location (e.g. GDPR/UK GDPR, or California's CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object or withdraw consent. For Customer Data, please contact your organization (the controller). To exercise rights against Alamon directly, email info@alamon.com.
7. Data location & security
We are based in the United States and data is processed in the United States. We maintain administrative, technical, and organizational safeguards appropriate to the sensitivity of the data, including encryption of sensitive data in transit and at rest and access controls with multi-factor authentication.
8. Children
The service is for businesses and is not directed to children under 16. We do not knowingly collect their data.
9. Changes
We may update this policy; we will post the new date above and, where required, notify you.
10. Contact
Alamon, Inc., 315 W. Idaho, Kalispell, MT 59901, USA — info@alamon.com.