Privacy Policy

The short version

Oddll AI Brain is a copilot that lives inside your Odoo. Queries run on your own server under the signed-in user's own permissions — records are resolved locally, and the cloud receives opaque handles (not the names or values behind them), the message you type, and the figures needed to phrase the answer (such as a count or total). We use AI providers under no-training terms and don't store your business data.

Who we are

Oddll ("we", "us") provides the Oddll AI Brain service. For any question about this policy or your data, contact us at [email protected].

What we receive

• The chat message you type into the copilot.
• Opaque record handles and field templates needed to render a reply — never the underlying field values.
• Your account details (name, email, country) and your registered Odoo domain and version.
• Usage metadata (token counts, timestamps) for billing and rate-limiting.

What stays in your Odoo

Your records are resolved and every reply is rendered inside your own database. The AI works from opaque handles rather than the names, financial details or documents behind them, the query runs under the acting user's own access rights, and we don't store your business data.

No training on your data

We send requests to our AI providers under business/enterprise terms, under which your data is not used to train, fine-tune or improve their models. We act as your data processor and list every sub-processor in our DPA.

Sub-processors

To generate an answer we send the request text, opaque handles and templates to a large-language-model provider — by default Google's Gemini API, with Groq as failover — and/or our self-hosted model. Providers process the prompt only to return a completion, under business terms that do not train on it. The current list is in our DPA (Annex I).

Data retention

Chat messages are retained only as long as needed to operate the service and are then deleted. Account and billing records are kept while your account is active and for as long as the law requires afterwards.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA and similar), you can request access to, correction or deletion of your personal data, object to processing, or export it. Email [email protected] and we will respond within the legal time limit.

Security

Data is encrypted in transit (TLS). Access is scoped by API key, bound to your registered domain and Odoo version, and every action the copilot takes is re-checked against the acting user's own Odoo permissions and audited.

Cookies

The marketing site uses only essential cookies, such as remembering your language. We do not use advertising or cross-site tracking cookies.

Changes to this policy

We will update this page when our practices change and revise the "last updated" date above. Material changes will be communicated to account holders.