Ir al contenido

Privacy and Data Confidentiality Policy

1. Data Controller This Privacy and Data Confidentiality Policy governs the processing of data by ASK CONSULTORES SAS (hereinafter, "Dr. Odoo"), a company incorporated under the laws of Colombia. It applies to all data collected through our website (dr-odoo.com) and any systems credentials provided by the client for the execution of Odoo technical or functional services.

2. Independent Status & Purpose of Processing The client explicitly acknowledges that ASK CONSULTORES SAS operates as an independent consultant and is not an official Odoo partner or implementer.

  • Website Data: Information collected via our website (names, emails, company details) is used exclusively to process orders, manage support tickets, and communicate regarding services.
  • Service Access Data: Credentials, API keys, SSH keys, or database access provided by the client are used exclusively to perform the requested diagnostic, troubleshooting, or support services (such as Dr. Odoo QuickFix™, Radar360™, OST, or Rescue).

3. Specific Protocols for Odoo Database Access To ensure maximum security and peace of mind for our clients, ASK CONSULTORES SAS strictly complies with the following operational protocols:

  • The Principle of Least Privilege: The client is advised to provide limited-access credentials (e.g., restricted administrator or support roles) whenever possible.
  • No Local Storage of Credentials: System credentials, server passwords, or access links are never permanently stored on public or shared devices. They are managed through secure, encrypted credential managers.
  • Temporary Access: Unless a continuous service (like Radar360™) is active, all credentials provided for temporary intervention packs (such as QuickFix™) must be revoked by the client or will be deleted by ASK CONSULTORES SAS 8 days after the provision of services.
  • Backup Obligation: The client retains full responsibility for maintaining up-to-date backups of their Odoo database and server environments prior to granting access to ASK CONSULTORES SAS.

4. Strict Confidentiality Agreement (NDA-Equivalent) ASK CONSULTORES SAS undertakes to treat all business, financial, operational, and customer data contained within the client's Odoo database as strictly confidential.

  • We will not copy, download, modify, or disclose any internal client data to third parties under any circumstances.
  • All technical insights gained during the service will be used solely to resolve the specific issues requested by the client.

5. Non-Disclosure Exception Information may only be disclosed if required by a strict legal order from a competent judicial authority under Colombian law, in which case the client will be notified immediately, provided that such notification is legally permissible.

6. Data Retention

  • Business communication and billing records will be kept for the duration required by fiscal laws.
  • System credentials and direct access tokens are deleted immediately upon contract termination or service pack expiration (90 days for QuickFix™).

7. Governing Law This Privacy Policy and all matters relating to data confidentiality shall be governed and construed exclusively in accordance with Colombian law (including Law 1581 of 2012 regarding Personal Data Protection - Habeas Data).