Odoo Sync Privacy Policy

This policy covers the Odoo Sync app only, listed on the Shopify App Store as MZ: Odoo Sync. The rules common to every app we publish are on the Privacy Policy page.

What the app does

It keeps your Shopify store in sync with your own Odoo 19 server. It writes prices and stock from Odoo to Shopify, and creates Shopify orders in Odoo as sales orders, optionally confirming and invoicing them. The resulting Odoo order number is written back to the Shopify order as a metafield.

What we collect and store

Data	Why
Your store domain, your contact email and the Shopify scopes you grant	Installing the app and recognising your store
Odoo connection details: server address, database name, API key, Odoo user name and version	Connecting to Odoo. The API key is stored encrypted and is never shown on any screen or written to any log.
Product mapping: SKU, the product name in Odoo, Shopify product and variant IDs, the last price and stock written	Knowing which Odoo product is written to which Shopify variant
Order link: Shopify order ID and number, and the Odoo customer, sales order and invoice numbers	Never creating the same order twice, and resuming an unfinished transfer where it stopped
Sync records: when a sync ran, how many records it updated, which failed and why	Showing the history and errors in the app’s admin

The app does not store a customer’s name, email address, phone number or address in its own database, and none of these are written to its sync records.

Where customer data from an order goes

When you turn order transfer on, the customer’s name, email address, phone number, billing and delivery address and the order lines are sent to your Odoo server to create the customer and the sales order there. That server is yours; keeping, correcting and deleting what is written to it is your responsibility. When an order arrives from Shopify it waits in the job queue until its transfer runs (usually a few seconds) and is removed from the queue when the transfer finishes.

Install notification

The moment the app is installed, your store name, your store domain and the store’s Shopify admin email are sent to Meze Apps’ own install counter, so that we know how many stores run which version. No order, product or customer data is part of that call.

What we never collect

Payment details and card data never reach our servers. They stay in Shopify, and the app does not request a scope that would expose them.

Who it is shared with

Data goes only to your own Odoo server, the one you connect. It is not sent to any other service provider, and it is never sold, rented or shared for advertising. The answer to a customer data request is sent by email from our own mail server.

How long it is kept

Records are not kept indefinitely. Every day the app deletes the ones past these limits on its own:

Record	Deleted
Sync event (which record, the result, a short error message)	after 30 days
Sync run summary (counts, start and finish)	after 90 days
Order link (Shopify and Odoo IDs)	after 365 days

Beyond that, deletion happens in these ways:

• When you uninstall. Every record belonging to your store is deleted: the Odoo connection, settings, product mappings, order links and sync records. It happens on the shop redaction request Shopify sends within 48 hours, or, if that request never arrives, no later than 30 days after uninstalling.
• When a customer asks to be erased. On Shopify’s customer redaction request, the order links and sync records for that customer’s orders are deleted. The app does not touch the customer and order records already created in your Odoo; those have to be deleted in Odoo by you.
• When you ask us. As the store owner you can request deletion at any time.

Customer data requests

All three of Shopify’s privacy requests are honoured: customer data request, customer redaction and shop redaction. For a customer data request, the link records we hold for that customer’s orders are emailed to your store’s address.

For any privacy question or deletion request, write from the store owner’s address to [email protected]. We reply within one business day and complete deletion requests within 30 days.