Legal
Privacy Policy
1. Who we are and what this covers
HostedBI is operated by Parity Development LLC (“we”, “us”). We provide a branded analytics portal and scheduled report delivery service that businesses use to share their Power BI reports with their teams.
This policy explains what personal information we collect, how we use and share it, and your choices. It covers:
- our marketing website at hostedbi.com;
- people who sign up for, buy, or manage an account with us (business customers’ owners, administrators and billing contacts);
- people who use a customer’s portal or receive its report emails, to the extent we act for ourselves (for example, security and service operation).
When we act for our customers. Our customers decide who can see their reports and who receives their emails, and what data those reports contain. For that information we are a service provider (processor) acting on the customer’s instructions under our Data Processing Agreement. If you use a portal at an address like <company>.hostedbi.app or a company’s own domain, or receive a report email from a company, that company is responsible for your information. Please contact them first with questions or requests; we will help them respond.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, work email, company, role, organization memberships, billing contacts | You, or the administrator who invites you |
| Sign-in and security | Password (stored only as a hash), two-step sign-in secret, hashed recovery codes, sign-in attempts | You and our systems |
| Signup questions | When your Power BI licenses renew; which data sources your reports use | You, at signup |
| Billing | Plan, invoices, tax details. Card and bank details are collected and held by Stripe; we see only limited details such as card brand and last four digits | You, via Stripe |
| Report recipients | Email address, assigned report security roles, unsubscribe status | The customer’s administrators |
| Customer reports | Power BI files and the business data inside them, which may include information about people | The customer (we process this for the customer; see Section 1) |
| Activity and usage | Sign-ins, invitations, role and access changes, uploads, refreshes, report opens and views, email deliveries, with time stamps; plus the IP address used for rate limiting (stored only as a salted hash) | Our systems |
| Support | Messages and attachments you send us | You |
| Website | Emails you send us from the website; standard web server logs kept by our hosting provider; cookie-free analytics such as pages viewed, referring site, browser and device type, and country derived from your IP address (the IP address itself is not stored) | You and our systems |
What we do not collect. We do not store the passwords or keys for your data sources: you enter them in our credential wizard, and they go directly to Microsoft Power BI, which stores them encrypted. We do not knowingly collect protected health information, which our terms prohibit.
3. How we use information
- Provide the service: create accounts, sign people in, show reports with the right security filters, refresh data, and send scheduled emails, invitations, password resets and failure alerts.
- Keep it secure: two-step sign-in, rate limits, fraud and abuse prevention, investigating incidents, and an activity log that customers’ administrators can see.
- Bill and administer accounts: payments, invoices, receipts, renewals and service messages.
- Show customers their usage: report views, who has viewed what, and email deliveries, in the customer’s own usage analytics.
- Support and improve the service: answer questions, fix problems, plan the service and its pricing using aggregated, de-identified statistics.
- Legal reasons: meet legal, tax and accounting obligations and enforce our terms.
We do not sell personal information, share it for cross-context behavioral advertising, or use customer report data to train AI models. We send customer contacts service and account emails only, and send marketing emails or newsletters only to people who opt in, with an unsubscribe link in each.
4. Cookies and similar technologies
The customer portals use only essential cookies: a session cookie that keeps you signed in (for up to 12 hours, tied to one portal address) and a security cookie that protects forms. Both are secure and HTTP-only. We do not use advertising or analytics cookies in the portals. The portals do not cache reports offline on your device.
Reports are displayed using Microsoft Power BI, which may set its own cookies or use browser storage within the embedded report. These are needed to display the report and are governed by Microsoft’s privacy statement.
Our marketing website sets no cookies and uses no browser storage to track you. We measure visits with Cloudflare Web Analytics, which counts page views without cookies, fingerprinting or cross-site tracking. We do not use advertising, chat or session-recording tools on the website. The website has no contact form: the contact page opens your own email app.
5. How we share information
Within a customer’s organization. A customer’s administrators can see the people in their organization, their roles, the activity log (including report views and actions our staff take for them) and usage analytics. Report email recipients’ addresses are visible to those administrators.
Service providers. We share information with providers that help us run the service, under contracts that limit their use of it:
| Provider | What they do |
|---|---|
| Microsoft Azure | Hosting, database, file storage, key management, logging |
| Microsoft Power BI / Fabric | Storing, refreshing and displaying reports; storing data source credentials |
| Stripe | Payments, invoices, tax |
| Maileroo | Sending report emails, invitations, password resets and alerts |
| Cloudflare | DNS and, later, custom domains |
| Microsoft 365 | Support and business email |
| Cloudflare Web Analytics (Cloudflare, Inc.) | Cookie-free measurement of visits to our marketing website (not the customer portals); Cloudflare also hosts the website |
The current list is kept in our Data Processing Agreement, which we update when providers change.
Other cases. We may share information to comply with law or valid legal process, to protect rights, safety and security, or as part of a merger, acquisition or sale of assets, subject to this policy.
Microsoft. We use Microsoft Power BI as the underlying engine for reports. We are not affiliated with or endorsed by Microsoft. Viewers do not get Microsoft accounts. Microsoft processes report data as our service provider.
6. Where information is stored
We store information in the United States, in Microsoft Azure’s Central US region. Some service providers, such as Stripe, Maileroo and Cloudflare, may process limited information in other locations. The service is intended for businesses in the United States.
7. How long we keep information
| Information | Kept for |
|---|---|
| Account, recipient and report data | While the customer’s subscription is active, then exported on request and deleted after 30 days |
| Activity log | While the customer’s subscription is active; deleted with the customer’s organization |
| People with no remaining organization | Their account is deleted when their last organization is deleted |
| Backups | Expire within 35 days |
| Rate-limit counters | Hashed, purged after their time window |
| Application logs | 30 days |
| Billing, tax and invoice records | 7 years, or longer if the law requires |
| A record that an organization was deleted | Kept, with only its random ID, date, reason and counts — no names or people |
8. Security
We protect information with encryption in transit and at rest, separation of each customer’s data, two-step sign-in for administrators and staff, rate limits, an enforced content security policy, secrets kept in a key vault, and logs that exclude passwords, tokens and report contents. No system is perfectly secure. If a breach affects your information, we will notify the affected customer, and you where the law requires.
9. Your choices and rights
Report emails. Every scheduled report email has a one-click unsubscribe link. Once you unsubscribe, we stop sending you that subscription. You can also ask the sending company to remove you.
Your account. You can update your password and two-step sign-in settings in the portal. A customer’s administrators can change or remove your access.
Privacy rights. Depending on where you live, you may have rights to know, access, correct, delete or get a copy of your personal information, and to opt out of sale or targeted advertising (we do neither). If your information is in a customer’s portal or emails, we will pass your request to that customer, who decides how to respond. For information we hold for ourselves, contact us at [email protected]. We will verify your request and will not discriminate against you for making it. An authorized agent may make a request for you with proof of authority.
10. Children
The service is for businesses and is not directed to children under 13 (or under 16 where that is the threshold). We do not knowingly collect their information.
11. Changes to this policy
We will post any update here with a new effective date, and notify customers’ owners of material changes by email at least 30 days before they take effect.
12. Contact us
Parity Development LLC
Privacy questions and requests: [email protected]
Security issues: [email protected]
Effective date: November 9, 2026