Política de Privacidade
Effective date: [DATE] · Controller: [COMPANY LEGAL NAME] · Contact: [PRIVACY EMAIL]
1. Data we collect
Account & contact (name, email, company, login, hashed password, language); billing (purchases, invoices; card handled by Stripe — we never store full card numbers); technical & usage (hashed API keys, your Odoo domain/version, request counts, token usage, timestamps, IP); content you submit to the assistant (your request text and thumbs up/down feedback).
By design we send the AI only your database schema shape and your request text — not the values of your business records.
2. How we use data
To provide, secure, meter, and bill the Service; prevent abuse; improve accuracy (learned examples are reviewed before use); communicate with you; and meet legal obligations.
3. Legal bases (where GDPR applies)
Contract, legitimate interests (security, improvement), consent (where required), and legal obligation.
4. AI/LLM processing
Your request text is sent to LLM providers to generate responses — a third-party API and/or a self-hosted model. We minimize what is sent (schema shape + request, no record values). See the DPA for the current provider list.
5. Sharing & sub-processors
We share data with providers acting on our behalf (Stripe for payments; the LLM provider/host; hosting/infrastructure). We do not sell personal data.
6. Retention, security & your rights
We retain data while your account is active and as required by law. Security includes hashing of secrets, access controls, and encryption in transit. Subject to law, you may request access, correction, deletion, portability, or object — contact [PRIVACY EMAIL].