Data Privacy Policy

1. Who we are

Cledoo publishes the Cledoo MCP and Cledoo MCP Pro Odoo modules and operates cledoo.com. For any privacy question or request, write to support@cledoo.com.

2. The Cledoo MCP module — inside your Odoo

The module collects no data by default. It runs entirely inside your Odoo instance: AI requests flow directly between your MCP client (e.g. Claude) and your Odoo server, under your own Odoo access rights. Nothing transits through Cledoo.

The module offers one optional, opt-in anonymous usage statistic, disabled by default. Nothing is ever transmitted unless an administrator explicitly enables “Anonymous usage statistics (opt-in)” in Settings > MCP Server. When enabled, the module sends one weekly ping to PostHog (hosted in the EU) containing exactly:

• a salted SHA-256 hash of your database uuid — one-way, not reversible, not joinable with anything else your Odoo sends anywhere;
• the module version and the Odoo series (e.g. 18.0);
• aggregate integers: number of OAuth clients, active tokens, connected principals, and total tool calls.

What the module never sends

No business data, no record contents, no model names, no hostnames or URLs, no user names, no company information, no tool arguments. The exact payload is documented in the module README, and an automated test fails if a field is added without updating that documentation. You can turn the toggle off again at any time; transmission stops immediately.

Cledoo MCP Pro contributes only additional aggregate counters to the same weekly ping, under the same opt-in.

3. This website (cledoo.com)

Audience measurement and support: we use PostHog (EU hosting) to understand how the site is used and to power the on-site support chat. Vercel Analytics additionally counts page loads in cookieless, aggregate form.

Guide signup: if you request our free guide, we store the email address you provide and use it only to send you the guide and related product updates. Emails are sent through Resend; you can unsubscribe at any time.

Purchases: payments are processed by Stripe — we never see or store your card details. We receive your email address and purchase reference in order to deliver your download and provide support.

4. Processors and sharing

We never sell data. We share data only with the processors named above — PostHog (analytics, EU), Stripe (payments), Supabase (site database, EU), Resend (transactional email), Vercel (hosting and analytics) — each strictly for the purpose described.

5. Your rights

Under the GDPR you can request access, rectification, erasure, restriction or portability of your personal data, and object to processing. Write to support@cledoo.com — we answer within 30 days. Module telemetry contains no personal data, so there is nothing to link back to you; disabling the toggle is the erasure mechanism for future pings.