Privacy Policy

1. Who we are

KSRO Labs is operated by Rajat (sole trader). We develop and publish Odoo modules, including MCP Server for Odoo, distributed via the Odoo App Store. Our contact email is [email protected].

This privacy policy applies to the MCP Server for Odoo Odoo module and the associated license validation service at ksrolabslicense.netlify.app.

2. What data we collect and why

2.1 License registration data

When you install the module, it sends a one-time registration request to our license server. This request contains:

• Odoo database UUID — a unique identifier generated by Odoo, used to uniquely identify your license
• Odoo base URL — the public URL of your Odoo instance, used to associate your license with your deployment
• Company name — the company name configured in your Odoo, used for license display purposes
• Odoo version — used for compatibility tracking

This is the only data that ever reaches KSRO Labs servers. No business records, no invoices, no contacts, no user data, no MCP request/response payloads are collected.

2.2 Data we do not collect

• We do not collect, see, or store any Odoo business data (records, invoices, contacts, orders, etc.)
• We do not log MCP requests or responses
• We do not store OAuth tokens (they are stored exclusively in your Odoo database)
• We do not use cookies or tracking pixels on the MCP endpoint
• We do not collect usage analytics from the MCP tools

2.3 Website analytics

This website uses Vercel Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personal data. It records only anonymised page view counts.

3. How Odoo data flows

When a user types a prompt into Claude and Claude calls an MCP tool, the data flow is:

1. Claude sends an HTTPS request directly to https://your-odoo.example.com/mcp
2. Your Odoo processes the request using its own database
3. Your Odoo returns the result directly to Claude (Anthropic's infrastructure)

KSRO Labs is not in this data path. No data is routed through, logged by, or stored on any KSRO Labs server at any point during normal MCP operation.

When you use Claude, your Odoo data is sent to Anthropic as part of your prompts and tool responses. This is governed by Anthropic's Privacy Policy and their Terms of Service. KSRO Labs has no control over and is not responsible for how Anthropic processes data.

4. Legal basis for processing (GDPR)

For customers in the European Union, the legal basis for processing license registration data is contract performance (Article 6(1)(b) GDPR) — the data is necessary to fulfil the software licence agreement and activate your subscription.

5. Data storage and security

License registration data is stored in a Supabase database. Supabase is SOC 2 Type II certified and stores data in the EU/US region. The data is protected by access controls and is accessible only to KSRO Labs.

Data is retained for the duration of your active subscription. Upon cancellation and written request, data will be deleted within 30 days.

6. Data sharing

We do not sell, share, rent, or transfer your data to third parties, except:

• Supabase — database storage (sub-processor)
• Netlify — hosts the license server endpoint (sub-processor)
• Legal requirement — if required by applicable law or court order

7. Your rights (GDPR)

If you are in the EU or EEA, you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (right to erasure)
• Object to or restrict processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email [email protected] with your Odoo URL and request type.

8. Contact

Privacy questions: [email protected]
Data deletion requests: email with your Odoo URL and we will process within 30 days.

9. Changes to this policy

We may update this policy when the module adds new data collection or changes significantly. Material changes will be announced via the Odoo App Store module changelog. The “Last updated” date at the top reflects the most recent revision.