Privacy Policy

1. Who is responsible

OdooBridge is a product of IndaPoint Technologies Private Limited, which is the data controller for the information described in this policy.

2. What we collect

We collect two things, and only two things. There is no hidden third.

a. What you type into the demo request form

That's the complete list. We don't enrich it, buy data about you, or look you up in third-party databases.

b. Your IP address — briefly

When you submit the form we record the originating IP address for a maximum of one hour. It is used for exactly one purpose: to stop a script from requesting hundreds of demo tokens (we allow 3 sign-ups per IP per hour). It is deleted automatically once that hour has passed — not archived, not aggregated. It is never used to identify, profile, or track you.

3. Why, and on what legal basis

Where the GDPR applies to you:

• To give you what you asked for — issuing your demo token and emailing you the setup guide. Legal basis: performance of a contract / steps taken at your request prior to entering into one (Art. 6(1)(b)).
• To reply to you about your enquiry, and to follow up about partner terms if you asked about them. Legal basis: legitimate interests (Art. 6(1)(f)) — responding to a business enquiry you initiated.
• To prevent abuse of the demo endpoint via the short-lived IP record. Legal basis: legitimate interests (Art. 6(1)(f)) — keeping a free service available.

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share it with anyone for their own marketing. You will not be added to a marketing list because you requested a demo.

4. Cookies and tracking

Our web server keeps ordinary short-term operational logs (the kind every web server keeps) for security and debugging. Traffic to this site passes through Cloudflare, which acts as our CDN and network-security layer and processes connection data on our behalf.

5. Your Odoo data and BYOK

OdooBridge runs as a stateless container. It holds no copy of your Odoo records: data passes through in memory to answer the request in front of it and is not retained. Your own Odoo credentials stay with the OdooBridge instance you or your provider runs, and are not transmitted to us.

Audit logging records that an action happened — which tool, which model, when, by whom — not the field values involved.

If you deploy OdooBridge for your own clients, note that for their data you are the controller and we are not a party to it, unless we have separately signed an agreement saying otherwise. If you need a Data Processing Agreement in place before a deployment, email us and we'll arrange one.

6. The demo Odoo instance

The demo token we issue points at a shared demo Odoo instance we run, pre-loaded with Odoo's sample data. It exists so you can see the product work against something real.

Demo tokens are scoped and metered: 10 Odoo actions, expiring after 3 days.

7. Who else processes data

The complete list of third parties involved in the data described above:

Our own infrastructure is operated by IndaPoint. Because we are based in India, data you send us is processed in India; some of the providers above operate internationally. Where personal data of EU/UK residents is transferred, it is transferred on the basis of the appropriate safeguards those providers maintain, and it is limited to the minimal fields listed above.

Your AI provider is deliberately not in this table — because it is your choice, not ours, and the relationship is between you and them. See section 5.

8. How long we keep it

9. Your rights

You can ask us to: give you a copy of what we hold about you; correct it; delete it; restrict or object to how we use it; or send it to you in a portable form. Where we rely on legitimate interests, you can object — and for marketing-style follow-up, we will stop, no questions asked.

Email [email protected]. We'll respond within 30 days. There's no form and no fee.

Given the amount of data involved, "delete everything you have about me" is usually a single database row and takes us about a minute.

If you're in the EU or UK and you think we've handled your data badly, you're entitled to complain to your local supervisory authority. We'd genuinely rather you told us first.

10. Security

The site and API are served over HTTPS. Demo tokens are random, scoped, metered and short-lived. Installer downloads are served only through time-limited signed links to people who requested a demo — the storage bucket itself is private. Access to the systems holding sign-up data is limited to the IndaPoint staff who need it.

No system is perfectly secure, and we won't pretend otherwise. If you find a security issue, please report it to [email protected] — we will thank you properly.

11. Children

OdooBridge is a business product sold to companies. It is not intended for anyone under 18, and we do not knowingly collect data from children.

12. Changes

If we change this policy we'll update the "Last updated" date at the top and bump the version. If a change materially affects people who have already given us their details, we'll email them — we have their address; using it for that is the least we can do.

Questions about this policy? [email protected] · See also our Terms of Service.