How we protect your privacy
on odoo and when you use our services
odoo
and its affiliates offer many services to help you run your business, including a platform to host your own
odoo
database. As part of running those services we collect data about you and your business. This data is not only essential to run our services, but also critical for the safety of our services and all our users.
This policy explains what information is collected, why it is collected, and how we use it.
Information we collect
Most of the personal data we collect is directly provided by our users when they register and use our services. Other data is collected by recording interactions with our services.
Account & Contact Data: When you register on our odoo to use or download one of our products, or to subscribe to one of our services (
odoo
Online, Free Trial,
odoo
Apps,
odoo
.sh, etc.), or fill in one of our contact forms, you voluntarily give us certain information. This typically includes your name, company name, email address, and sometimes your phone number, postal address (when an invoice or delivery is
required),your business sector and
interest in
odoo
, as well as a personal password.
We never record or store credit card information from our customers, and always rely on trusted third-party PCI-DSS-compliant payment processors for credit card processing, including for recurring payment processing.
Job Application Data: When you apply for a job on our odoo or via an employment agency, we usually collect your contact information (name, email, phone) and any information you choose to share with us in your introduction letter and
Curriculum Vitae. If we decide to send you a job proposition, we will also ask you to provide extra personal details as required to fulfill our legal obligations and personnel management requirements.
We will not ask you to provide information that is not necessary for the
recruitment process. In particular, we will never collect any information about your racial or ethnic origin, political opinions, religious beliefs, trade union membership or sexual life.
Browser Data: When you visit our odoo and access our online services, we detect and store your browser language and geolocation in order to customize your experience according to your country and preferred language. Our servers also passively
record a summary of the information sent by your browser for statistical, security and legal purposes: your IP address, the time and date of your visit, your browser version and platform, and the web page that referred you to our
odoo.
Your browser may also be used to store and retrieved your current session data, with the help of a session cookie (see also the Cookie section for more details).
Form protection: some forms on our odoo may be protected by Google reCAPTCHA. This technology relies on heuristics that are based on technical characteristics of your browser and device, and may also use specific Google cookies. See also Google Privacy Policy and Terms of Use in the Third Party Service Providers section below.
Customer Databases: When you subscribe to an
odoo
Cloud service and create your own
odoo
database (for example by starting a Free Trial), any information or content you submit or upload into your database is your own, and you control it fully.
Similarly, when you upload an on-premises database to the
odoo
Upgrade odoo, you own the data in it.
This data will often include personal information, for example: your list of employees, your contacts and customers, your messages, pictures, videos, etc. We only ever collect this information on your behalf, and you always
retain ownership and full control on this data.
Free Trial Session Recording: When you start a free trial on our
odoo
Cloud service, you may be offered the possibility to consent to the recording of the beginning for your free trial session in order to help us improve the user experience of our products.
If you consent, the information that is collected includes what is visible on the screen
during the first 2 hours of your free trial, as well as your interactions with our apps (where you click, which menu you open, etc.). This data is consolidated in the form of a video that our User Experience experts can watch for a limited time.
This will likely include some
personal data such as names, emails, phone numbers, pictures, depending on what real-world information you input into your database during the recording period. Password fields and other sensitive fields are automatically excluded from the recording, but we cannot entirely
exclude the possibility that some sensitive information may be recorded, depending on where you type it.
The other sections of this Policy explain:
- how we process this data,
- how long we keep it,
- and how you can access or request deletion of this data
- and which third-party service providers are involved.
If you do not consent or if we do not offer you the option to opt-in, your trial session will not be recorded and no data will be collected for this purpose.
Github.com Account Data: When you subscribe to the odoo .SH platform and create your project, the platform requires authorization to access your Github.com account, which includes an OAuth token granting access to your account, and later, the contents of your project repository.
In-App Purchase (IAP) Transaction Data: When you use
odoo
on the
odoo
Cloud or on your own self-hosted deployments, some optional "In-App Purchase" services may be active by default. This typically includes auto-completion features to help you quickly input client and supplier info, as well as integration with third-party service providers for sending and receiving SMS, paper
letters, etc.
When you use these services, with our without payment, some necessary transaction data is transmitted to
odoo
Cloud services and have to be communicated to third-party services for the purpose of executing the service. You can find the detailed privacy policy for each service on the IAP Privacy Policy page.
The IAP services are always optional, even when enabled by default, and the IAP Privacy Policy also explains how you can opt-out of those services.
How we use this information
Account & Contact Data: We use your contact information in order to provide our services, to answer your requests, and for billing and account management reasons. We may also use this information for marketing and communication purposes (our marketing messages
always come with a way for you to opt-out at any time). We also use this data in aggregated/anonymised form in order to analyze service trends.
If you have registered to participate in an event published on our odoo, we may transfer your name, email address, phone number and
company name to our local organizer and to the sponsors of the event for both direct marketing purposes and in order to facilitate the preparations and booking for the event.
If you have expressed interest in using
odoo
or otherwise asked to be contacted by an
odoo
service provider, we may also transfer your name, email address, phone number and company name to one of our official Partners in your country or region, for the
purpose of contacting you to offer their local assistance and services.
Job Application Data: We will only process this information for our recruitment process, in order to evaluate and follow-up with your application, and in the course of preparing your contract, if we decide to send you a job proposition. You may contact us at any time to request the deletion of your information.
Browser Data: This automatically recorded data is anonymously analyzed in order to maintain and improve our services. Google reCAPTCHA may also be used for security purposes, in order to prevent abuse of our services. In that case we only process the anonymous score that
reCAPTCHA determines based on your browser and device.
We will only correlate this data with your personal data when required by law or for security purposes, if you have violated our Acceptable Use Policy.
Customer Database: We only collect and process this data on your behalf, in order to perform the services you have subscribed to, and based on the instructions you explicitly gave when you registered or configured your service and your
odoo
database.
Our Helpdesk staff and engineers may access this information in a limited and reasonable manner in order to solve any issue with our services, or at your explicit request for support reasons, or as required by law, or to ensure the security of our services in case of violation of our Acceptable
Use Policy in order to keep our services secure.
Free Trial Session Recording: The purpose of these recordings is to improve our products: they will be seen and analysed solely by our R&D Usability team, who will treat your data as strictly confidential information. By watching the recordings they will be able to
see a tangible representation of a user’s first steps into
odoo
and improve the User Experience accordingly.
The recordings are processed and stored with tools provided by FullStory (cf. our list of service providers), under strict confidentiality terms.
The other sections of this Policy explain :
- what is recorded,
- how long we keep it,
- and how you can access or request deletion of this data.
Github.com Account Data: During the configuration phase of your
odoo
.SH project, the platform uses your OAuth token to setup the Github.com project you will use for
odoo
.SH, including the necessary web hooks and deployment key to allow
odoo
.SH to detect every commit you push to your project repository. The OAuth token is not stored and is deleted as soon as you close your
odoo
session, or after 2 days.
The contents of your project repository is stored as long as your
odoo
.SH subscription is active in order to provide the service itself.
Our Helpdesk staff and engineers may access this information in a limited and reasonable manner in order to solve any issue with our services, or at your explicit request for support reasons, or as required by law, or to ensure the security of
our services in case of violation of our Acceptable Use Policy in order to keep our services secure.
In-App Purchase (IAP) Transaction Data: You can find the detailed privacy policy for each service on the IAP Privacy Policy page.
Accessing, Updating or Deleting Your Personal Information
Account & Contact Data: You have the right to access and update personal data you have previously provided to us. You can do so at any time by connecting to your personal account on odoo. If you wish to permanently delete your account or personal information for a legitimate purpose, please contact our Helpdesk to request so. We will take all reasonable steps to permanently delete your personal information, except when we are required to keep it for legal reasons (typically, for administration, billing and tax reporting reasons).
Job Application Data: You may contact us at any time to request access, updates or deletion of your application information. The easiest way to do it is to reply to the last message you exchanged with our Human Resource personnel.
Customer Database:You can manage any data collected in your databases hosted on
odooat any time, using your administration credentials, including modifying or deleting any personal data stored therein.
At any time you can export a complete backup of your database via our control panel, in order to
transfer it, or to manage your own backups/archive. You are responsible for processing this data in compliance with all privacy regulations.
You may also request the deletion of your entire database via your control panel, at any time.
When you use the
odoo
Database Upgrade service, your data is automatically deleted after your upgrade was successfully completed, and may also be deleted upon request from you.
Free Trial Session Recording: You may contact us at any time to request access to or deletion of the recording of your trial session (see contact info below). Please remember to include the name or the URL of your database to allow us to retrieve your specific recording.
Recordings are automatically destroyed after 2 months, so if your trial is older than that the data does not exist anymore.
The other sections of this Policy explain :
- what is recorded,
- how we process this data,
- how long we keep it
- and which third-party service providers are involved.
Github.com Account Data: You can view and manage the project repository data collected from your Github.com account directly on
odoo
.
You may request the deletion of this information via your control panel on
odoo, at any time.
You can also request the deletion of your Github.com OAuth token by simply logging out from
odoo
.
In-App Purchase (IAP) Transaction Data: You can find the detailed privacy policy for each service on the IAP Privacy Policy page.
چطور می تونیم کمکتون کنیم؟