Privacy notice

Odoo Connection is operated by Trewac. Contact: vivek@trewac.com.

What we store

For each authorization, we store your Odoo address, database, login, user ID, selected API version, and API key together in encrypted storage. We also store granted permissions, hashed connection tokens, and OAuth client registration details. Our server holds the encryption key; encryption protects stored data but does not make it inaccessible to the service operator.

What passes through the service

At your request, the connector sends API calls to your Odoo server and returns the results to ChatGPT. Those results can include business and personal information that your Odoo user can access. Odoo keys are never returned through the tools. Record results and write values are not intentionally stored or logged by this service. OpenAI and your Odoo provider handle received information under their own policies and your agreements with them.

Hosting and security

The service is hosted on Trewac’s Linode server. Connections use HTTPS. We use short-lived access tokens, encrypted credentials, per-authorization isolation, and rate limits. Essential secure cookies maintain a short management session and protect forms. We do not use advertising or analytics cookies.

Retention and deletion

Authorizations expire after at most 90 days. Disconnecting through My connections immediately deletes that authorization’s live stored credentials and invalidates its tokens. Expired authorizations are removed by automatic cleanup. Management sessions last 15 minutes. Logs of write attempts contain only operation metadata and pseudonymous connection references, and are retained for up to 90 days. OAuth client registrations are retained while the registered integration remains available. Infrastructure providers may process operational metadata under their own policies.

Your choices

You can disconnect here, revoke an API key in Odoo, or contact us to request deletion or ask a privacy question. Never include an API key or sensitive records in a support message. Only connect data you are authorized to share with the service and ChatGPT.