Skip to content

Privacy Policy

Draft — pending legal review

This Privacy Policy is a draft generated for internal review. It has not yet been reviewed or approved by legal counsel and is not a final, binding legal document. It will be finalized with counsel before being relied upon. Do not treat it as legal advice.

This Privacy Policy describes how the Tecnicora MCP for Odoo connector handles data when you connect Claude to your Odoo.

Summary

  • The connector is read-only: it can read your Odoo data but cannot create, edit, or delete it.
  • Your Odoo data is processed transiently to answer your questions, and then discarded.
  • Tecnicora stores neither your credentials nor your business data at rest.

What data is processed

  • Odoo business data (read-only, transient). When you ask Claude a question, the connector reads the relevant data from your Odoo (for example sales orders, purchases, inventory) to produce an answer. This data is processed in real time and discarded when the request completes.
  • Your Odoo credential. Your Odoo API key is encrypted (Fernet) and held inside your own session token by Anthropic's connector system. Tecnicora does not store it at rest.
  • Authentication data. To sign you in, the service processes your email address through our authentication provider for magic-link login.

What is NOT stored

  • Tecnicora does not store your Odoo credentials at rest.
  • Tecnicora does not store your Odoo business data at rest.
  • Tecnicora does not log your business data.

The three-party data path

Your data passes through three parties — your Odoo → Tecnicora's server (Fly.io) → Anthropic's cloud — in real time, and is discarded when the request completes. See Legal & data handling for the full description.

Sub-processors

Tecnicora uses Fly.io (hosting/compute), Anthropic (Claude and the connector store that holds your encrypted token), WorkOS (authentication / magic-link login), and Stripe (subscription billing, if and when a paid tier exists). See Data Processing Agreement (summary) for details.

Your choices and control

  • You can revoke your Odoo API key at any time in Odoo (My Preferences → Security → API Keys), which immediately ends the connection.
  • We recommend connecting with a dedicated, read-only Odoo user so the connector can only read what that user is permitted to see.

Data location

The connector's compute runs on Fly.io, and Claude runs on Anthropic's cloud. Your Odoo is hosted wherever you or your Odoo provider host it.

Changes to this policy

We may update this policy from time to time. The current version is always published on this help center.

Contact

For any privacy question or request, contact your Tecnicora consultant or Tecnicora support.