Privacy Policy

Last updated: March 23, 2026

1. Who We Are

Oduist OÜ ("Company", "we", "us") operates the license server at license.oduist.com and develops Odoo addons. Our registered office is in Estonia. For any privacy-related inquiries, contact us at team@oduist.com.

2. Data We Collect

We collect the following categories of data:

• Instance data — a cryptographic hash of your Odoo instance (instance_hash), Odoo version, and instance type. This identifies your installation without revealing its contents.
• Contact data — email address, if you choose to provide it for security alerts, onboarding, or update notifications.
• Payment data — payment records including purchased modules, amounts, and Paddle transaction IDs. Payment card details are handled exclusively by Paddle and never reach our servers.
• Technical data — IP address (used only for rate limiting, not stored persistently), request timestamps, and Odoo version.

3. How We Use Your Data

We use the collected data to:

• Issue and verify license keys for purchased addons
• Process payments through Paddle (our Merchant of Record)
• Send security alerts, onboarding tips, or update notifications (only if you opt in)
• Protect the service from abuse via rate limiting
• Generate aggregated, anonymous usage statistics

4. Legal Basis for Processing

We process your data under the following legal bases (GDPR Art. 6):

• Contract performance — instance data and payment data are necessary to deliver the licenses you purchase.
• Consent — email communications are sent only when you explicitly opt in.
• Legitimate interest — rate limiting and abuse prevention protect the availability of the service for all users.

5. Data Sharing

We share data only with:

• Paddle (Paddle.com Market Limited) — processes payments as our Merchant of Record. See Paddle's Privacy Policy.
• Cloudflare — hosts our infrastructure. Request data passes through Cloudflare's network. See Cloudflare's Privacy Policy.

We do not sell your data to third parties.

6. Data Retention

• Instance and license data — retained for as long as your license is active.
• Unpaid payment records — automatically deleted after 60 days.
• Rate-limit counters — expire after 60 seconds and are not linked to your identity.

7. Your Rights

Under the GDPR, you have the right to access, correct, delete, or export your personal data. You can also withdraw consent for email communications at any time. To exercise any of these rights, email us at team@oduist.com with your instance registration number or instance hash so we can locate your records.

8. Cookies

This site does not use cookies or any client-side tracking technologies.

9. Children's Privacy

Our service is not directed at individuals under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the latest revision. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For questions regarding this Privacy Policy, contact us at:
Oduist OÜ
team@oduist.com
+372 641 0562