Skip to content

Privacy Policy

Draft — pending legal review

This Privacy Policy is a draft generated for internal review. It has not yet been reviewed or approved by legal counsel and is not a final, binding legal document. It will be finalized with counsel before being relied upon. Do not treat it as legal advice.

This Privacy Policy describes how the Tecnicora MCP for Odoo connector handles data when you connect Claude to your Odoo.

Summary

  • The connector is read-only: it can read your Odoo data but cannot create, edit, or delete it.
  • Your Odoo data is processed transiently to answer your questions, and then discarded.
  • Tecnicora stores neither your credentials nor your business data at rest.
  • The only thing kept is pseudonymized operational metadata (one-way hashed identifiers, tool name, timings, counts) — never your credentials, your business data, or the content of your questions.

What data is processed

  • Odoo business data (read-only, transient). When you ask Claude a question, the connector reads the relevant data from your Odoo (for example sales orders, purchases, inventory) to produce an answer. This data is processed in real time and discarded when the request completes.
  • Your Odoo credential. Your Odoo API key is encrypted (Fernet) and held inside your own session token by Anthropic's connector system. Tecnicora does not store it at rest.
  • Authentication data. To sign you in, the service processes your email address through our authentication provider for magic-link login.
  • Your questions to Claude (transient). The text of what you ask may include business details you type. It is sent to your Odoo as a read-only query and to Anthropic to generate the answer, then discarded. Tecnicora does not store the content of your questions — except in the public demo database, which contains only synthetic data.

What is NOT stored

  • Tecnicora does not store your Odoo credentials at rest.
  • Tecnicora does not store your Odoo business data at rest.
  • Tecnicora does not log your business data.
  • Tecnicora does not store the content of your questions or requests (on real, non-demo connections).

Operational metadata we store

To keep the service reliable, prevent abuse, and understand usage, Tecnicora stores a small amount of pseudonymized operational metadata (in Amazon DynamoDB):

  • A one-way hash of your sign-in email and its domain — enough to count distinct users and companies, but the address itself cannot be read back.
  • The tool name, response timing, row/byte counts, and whether a call errored.
  • Whether the session used the demo database.

This metadata contains no credentials, no business data, and no readable personal identifiers, is retained for a limited period, and is then deleted automatically. The free text of a "request a capability" message is stored only for demo sessions.

The three-party data path

Your data passes through three parties — your Odoo → Tecnicora's server (Fly.io) → Anthropic's cloud — in real time, and is discarded when the request completes. See Legal & data handling for the full description.

Sub-processors

Tecnicora uses Fly.io (hosting/compute), Amazon Web Services (DynamoDB — pseudonymized operational metadata only), Anthropic (Claude and the connector store that holds your encrypted token), WorkOS (authentication / magic-link login), and Stripe (subscription billing, if and when a paid tier exists). See Data Processing Agreement (summary) for details.

Your choices and control

  • You can revoke your Odoo API key at any time in Odoo (My Preferences → Security → API Keys), which immediately ends the connection.
  • We recommend connecting with a dedicated, read-only Odoo user so the connector can only read what that user is permitted to see.

Data location

The connector's compute runs on Fly.io, and Claude runs on Anthropic's cloud. Your Odoo is hosted wherever you or your Odoo provider host it.

Changes to this policy

We may update this policy from time to time. The current version is always published on this help center.

Contact

For any privacy question or request, contact your Tecnicora consultant or Tecnicora support.