1. About HeyBC
HeyBC ("the Service", "the App") is an AI-powered assistant for Microsoft Dynamics 365 Business Central, developed and operated by Duveka GmbH ("we", "us", "our"). HeyBC is available as a web application and as an Android mobile application (and planned iOS).
The Service allows authenticated users to query and manage Business Central data through a conversational AI interface, including voice input.
2. Eligibility and Business Use
HeyBC is a business-to-business (B2B) service. To use the App you must:
- Be at least 18 years old.
- Have a valid Microsoft Entra ID (Azure AD) account with access to a Microsoft Dynamics 365 Business Central environment.
- Be acting on behalf of a legal entity or as an authorized employee thereof.
- Have authority to bind your organization to these Terms.
Personal consumer use is not supported. We reserve the right to terminate accounts that do not meet these requirements.
3. Authentication and Account Security
HeyBC uses Microsoft Entra ID (Azure Active Directory) OAuth 2.0 for authentication. We do not store your Microsoft password, and we do not issue or manage passwords. Your identity is verified exclusively through Microsoft's authentication infrastructure.
You are responsible for:
- Maintaining the confidentiality of your Microsoft account credentials.
- All activity occurring under your authenticated session.
- Notifying your organization's IT administrator if you suspect unauthorized access.
4. Business Central Data Access
HeyBC accesses your Microsoft Dynamics 365 Business Central environment on your behalf using tokens you authorize via Microsoft sign-in. Specifically:
- Access tokens are acquired by your browser or device and transmitted to our backend within each request.
- Tokens are not stored by HeyBC beyond the duration of a single API call.
- HeyBC reads and, where you explicitly confirm, writes Business Central records (e.g. sales orders) through the standard Business Central API v2.0.
- Write operations always require explicit user confirmation before execution.
You are responsible for ensuring that use of HeyBC complies with your organization's data governance policies, Business Central tenant policies, and any applicable Microsoft licensing terms.
5. AI Features and Accuracy
HeyBC uses a large language model (LLM) to interpret your queries and generate responses. You acknowledge that:
- AI-generated content may contain errors, inaccuracies, or omissions.
- HeyBC is an assistive tool and should not be used as the sole basis for financial, legal, or business-critical decisions without independent verification.
- Suggested or generated data (e.g. order lines, customer records) must be reviewed before confirmation.
- We do not guarantee the completeness, accuracy, or fitness for purpose of any AI-generated output.
6. Voice Features and Microphone Access
HeyBC includes optional voice transcription and hands-free features. When you use these features:
- The App requests access to your device microphone. You may deny this permission; core text-based features remain available.
- Audio is recorded only when you actively initiate a voice input (button press or hands-free trigger).
- Recorded audio is sent to our transcription service and immediately converted to text. Raw audio is not stored.
- The "Ok Google" / Google Assistant App Actions integration invokes the App through a deep link; the microphone is not activated by the App Actions trigger itself.
7. Data We Collect and Process
Please refer to our Privacy Policy for full details. In summary:
- Conversation history — Your chat messages and AI responses are stored per-user in an encrypted SQLite database to provide conversation continuity. You may delete conversations at any time.
- Authentication claims — We process your Microsoft user ID (OID) and tenant ID from your JWT token to associate conversations with your account. We do not store your name or email address beyond session scope.
- Usage telemetry — Aggregated, anonymized usage metrics may be collected to improve the Service.
- Voice audio — Processed in real time and not retained.
We do not sell your data. We do not use your Business Central data to train AI models.
8. Google Assistant and App Actions
The Android application integrates with Google Assistant App Actions to allow voice-launched access to HeyBC ("Ok Google, ask Hey BC…"). This integration:
- Is governed by the Google Assistant Terms of Service.
- Does not share Business Central data with Google.
- Only passes query text entered or spoken by the user as a URL parameter to launch the App.
9. Acceptable Use
You agree not to use HeyBC to:
- Access Business Central data you are not authorized to access.
- Attempt to reverse-engineer, scrape, or extract data in bulk beyond normal use.
- Circumvent authentication or security controls.
- Transmit malicious content, prompt-injection payloads, or content designed to manipulate the AI for unauthorized purposes.
- Violate any applicable law, regulation, or Microsoft licensing terms.
10. Intellectual Property
HeyBC, its source code, branding, and associated materials are the property of Duveka GmbH and are protected by applicable intellectual property law. Nothing in these Terms grants you any right to reproduce, distribute, or create derivative works of the Service or its branding.
You retain all rights to your Business Central data. Conversation content you generate remains your intellectual property.
11. Third-Party Services
HeyBC relies on the following third-party services, each governed by their own terms:
- Microsoft Azure / Entra ID — authentication and Business Central API access.
- Microsoft Dynamics 365 Business Central — ERP data source.
- Duveka ClousAI / OpenRouter — AI model inference and voice transcription.
- Google Assistant — optional App Actions integration (Android).
12. Disclaimer of Warranties
The Service is provided "as is" and "as available" without warranty of any kind, express or implied. We do not warrant that the Service will be uninterrupted, error-free, or free from security vulnerabilities.
13. Limitation of Liability
To the fullest extent permitted by applicable law, Duveka GmbH shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or relating to your use of the Service, including but not limited to loss of data, revenue, or business opportunity.
Our aggregate liability to you shall not exceed the amount paid by you (or your organization) for the Service in the twelve months preceding the claim.
14. Changes to These Terms
We may update these Terms from time to time. We will notify users of material changes via in-app notification or by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.
15. Governing Law
These Terms are governed by the laws of Switzerland, without regard to conflict of law principles. Any disputes shall be subject to the exclusive jurisdiction of the courts of Zurich, Switzerland.
16. Contact
If you have questions about these Terms, please contact us:
- Duveka GmbH
- Email: info@duveka.de
- Website: duveka.de