Data Processing Agreement
Between Oddll ("Processor") and the Customer ("Controller").
1. Roles & instructions
Where you process personal data of your users/contacts through the Service, you are the Controller and we are your Processor. We process only on your documented instructions.
2. Nature of processing
The Service interprets your users' requests against your Odoo. We transmit to the AI model only (a) the schema shape of your database and (b) the text of the request — never the values of your business records. Confirmed actions run locally in your Odoo under the user's permissions.
Where you register or upload a custom module, we additionally process its structure only (module name, model and field names/types) by static parse — never your record values or code. If the same module structure is detected from two or more customers it may be retained in a shared catalog and its AI training reused across tenants; a module unique to you is deleted when you remove it (see Terms §6.1).
3. Our obligations
Confidentiality; the security measures in the annex; assistance with data-subject requests and breach/DPIA duties; and deletion or return of data on termination.
4. Sub-processors
You authorize: Google LLC (Gemini API) and Groq, Inc. (generating AI responses; United States, EU SCCs); Stripe, Inc. (payments); and Contabo GmbH (application + database hosting; Germany, EEA). We give notice of changes so you may object on reasonable grounds. Self-hosted models run on our own EEA infrastructure and are not a third-party sub-processor.
5. Transfers, breach, deletion, audit
Cross-border transfers use a lawful mechanism (e.g. SCCs). We notify you of a personal data breach without undue delay. On termination we delete or return data within 30 days. We make available information to demonstrate compliance.
Annex — security measures
Hashed API keys/passwords; TLS in transit; least-privilege access; rate limiting and audit logging; data minimization (schema shape + request text only); backups, monitoring, and key rotation.