Privacy Policy

Last updated: September 24, 2025

1. Introduction

OdooSync ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WordPress plugin service that synchronizes data between Odoo ERP and WooCommerce stores.

2. Information we collect

2.1 Account information

  • Email address and name when you create an account
  • Billing information processed securely through Stripe
  • Subscription plan and payment history

2.2 API and domain data

  • API keys generated for your WordPress sites
  • Registered domain names where the plugin is installed
  • Domain verification status and usage logs
  • API request frequency and usage statistics

2.3 Contact form data

  • Name, email, company, and message content when you contact us
  • Communication preferences and support ticket history

2.4 Technical data

  • IP addresses, browser type, and device information
  • Website usage patterns through Google Analytics
  • Error logs and diagnostic information for troubleshooting

3. How we use your information

  • Provide and maintain the OdooSync service
  • Authenticate API requests and enforce domain-based licensing
  • Process payments and manage subscriptions
  • Send service updates and security notifications
  • Provide customer support
  • Monitor usage patterns to prevent abuse
  • Analyze website traffic to improve our service
  • Comply with legal obligations

4. Third-party service providers

  • Supabase: Database hosting and authentication
  • Stripe: Payment processing
  • Vercel: Hosting and CDN
  • Google Analytics: Usage analytics
  • Resend / Email providers: Transactional and support email

5. Data security

  • Encrypted data transmission (HTTPS/TLS)
  • API keys stored as SHA-256 hashes, never plaintext
  • Row-level security on database tables
  • Access controls and authentication for our internal systems
  • Regular backups and disaster recovery

6. Data retention

  • Account information: until account deletion or 3 years after last login
  • API usage logs: 12 months
  • Billing records: 7 years (tax and accounting regulations)
  • Support communications: 3 years

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Delete your personal data
  • Portability: Transfer your data to another service
  • Objection: Object to processing
  • Restriction: Restrict processing in certain circumstances

To exercise these rights, email support@odoo-sync.io.

8. International data transfers

Your data may be transferred to and processed in countries other than your own. We ensure such transfers comply with applicable data protection laws and implement appropriate safeguards.

9. Children's privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post any changes here and update the "Last updated" date.

11. Contact

Questions about this Privacy Policy? Email support@odoo-sync.io.