Privacy Policy

Overview

Odoo–Shopify Order Check ("the Extension") is committed to protecting your privacy. This privacy policy explains what information the Extension reads, how it is used, and how it is protected.

The Extension is strictly read-only. It never creates, edits, or deletes anything in Odoo or Shopify — it only reads, so it is safe to run on production.

Developer: IntegrationNode

Information We Read

The Extension reads order data only when you open an order. All network requests are made from the Extension's service worker — never from the page you are viewing.

Data Read from Odoo

Using your active Odoo browser session (cookie-first), the Extension reads the following from YOUR Odoo instance to build the comparison:

• Sale order details: totals, taxes, quantities, and line items
• Invoiced and refunded amounts used to compute the net invoiced verdict
• Billing and shipping address fields for the order
• Connector configuration that links the order to your Shopify store (read from your Odoo instance)

Data Read from Shopify

Through Shopify's Admin API, the Extension reads the matching order from YOUR Shopify store to compare it against Odoo:

• Current order totals, taxes, and quantities
• Line items, refunds, returns, and order edits used as context
• Order and customer address fields for the order

About the Shopify token: The Shopify Admin token is obtained from your Odoo connector configuration and kept in memory in the service worker only. It is never persisted to disk and is never exposed to the page or DOM.

Data Stored Locally

The Extension stores a small amount of operational data locally using Chrome's storage (chrome.storage.local):

• Detected Odoo session info (base URL and database)
• A learned shop-to-instance mapping (which Shopify store maps to which Odoo instance)
• The trial install date (used to track the free trial period)
• License activation state for your subscription

No order data is persisted: Order details read from Odoo and Shopify are used only to produce the comparison in your browser. They are not stored beyond transient caching to keep the panel responsive.

How We Use Your Information

The Extension uses the information it reads solely for the following purposes:

• Compare the Order: Match the same order between Odoo and Shopify field by field — totals, taxes, quantities, line items, and addresses
• Produce a Verdict: Show a global match/mismatch verdict based on the net invoiced amount (invoices minus refunds), with refunds, returns, and edits shown as context
• Caching: Temporarily cache responses in the service worker to keep the comparison panel responsive while you stay on the same order
• Licensing: Validate your license key and track your free trial so you can use the Extension after the trial period

Data Storage and Security

Read-Only: The Extension only reads from Odoo and Shopify. It never creates, edits, or deletes any record in either system.

Service-Worker-Only Network: All network requests to Odoo, Shopify, and Polar are made exclusively from the Extension's service worker. The injected panel (content script) never makes cross-origin requests and never receives your credentials.

Token Kept in Memory: The Shopify Admin token is held in memory only for the duration of a comparison. It is never written to storage and never exposed to the page or DOM.

Local Storage Only: Operational data (session info, shop mapping, trial date, license state) is stored locally on your device using Chrome's storage APIs. No order data is transmitted to any third-party server.

Data Transmission: The Extension communicates directly with YOUR Odoo instance and (via the connector) YOUR Shopify store over HTTPS. Your Odoo session/credentials and order data are never sent to the extension developer or any third party.

Third-Party Services

Polar (Payment Processing)

The Extension uses Polar (https://polar.sh/) for subscription management and payment processing. When you purchase a plan through Polar's hosted Checkout, Polar collects:

• Your email address for account management and receipts
• Payment information (processed securely by Stripe, not stored by the Extension)
• Subscription status and license information

License activation uses Polar's public license endpoints (validate / activate / deactivate). Your license key is your own secret — you enter it in the Extension's UI, and it is handled only by the service worker. No organization secret is bundled in the Extension.

Polar Privacy Policy: https://polar.sh/legal/privacy

Important: Payment data is handled entirely by Polar and Stripe. The Extension never receives or stores your credit card information.

Third-Party Data Sharing

We do NOT share your data with any third parties for advertising, analytics, or data brokering purposes.

The Extension only communicates with:

• Your Odoo Instance: The Extension reads order, invoicing, and connector data from the Odoo instance you are signed in to
• Your Shopify Store: The Extension reads the matching order from your own Shopify store via the Admin API, using the token obtained from your Odoo connector
• Polar: Only for subscription management and license validation (email, subscription status, payment processing)

The Extension does NOT:

• Sell your data to data brokers
• Share data for advertising purposes
• Send your Odoo or Shopify order data to the extension developer's servers

Permissions Explained

The Extension requests the following Chrome permissions:

Permissions Requested

• storage: Required to store the detected Odoo session info, the learned shop-to-instance mapping, the trial install date, and your license activation state locally
• host_permissions (*.myshopify.com): Required to read the current order from the Shopify Admin API for the comparison (read-only)
• host_permissions (*.odoo.com / Odoo.sh): Required to read order and connector data from your Odoo Online or Odoo.sh instance (e.g., yourcompany.odoo.com)
• host_permissions (api.polar.sh): Required for license validation, subscription management, and the hosted checkout / customer portal
• optional_host_permissions (https://*/*): Optional — requested at runtime only if your Odoo runs on a custom domain (outside *.odoo.com)

Why These Permissions?

Every permission maps directly to a feature you can see:

• Host permissions are ONLY used to read order data from your Shopify store and your Odoo instance, and to talk to Polar for licensing
• They are NEVER used to access unrelated websites; the Shopify Admin access token comes from the connector configured in your Odoo and is kept in memory only, never stored
• You can revoke any permission at any time in Chrome settings, or remove the Extension entirely

Note: The Extension only reads the order data needed to build the comparison. It never writes to Odoo or Shopify, and it sends nothing to the developer or any unrelated third party.

Your Data Rights

You have the following rights regarding your data:

• Access: All order data lives in your own Odoo instance and Shopify store, which you control; the Extension only reads it
• Deletion: You can clear all locally stored Extension data by removing the Extension from Chrome
• Portability: Your data remains in Odoo and Shopify and is accessible via their own export features
• Control: You can revoke the Extension's access at any time by removing it or revoking its permissions in Chrome

Data Retention

The Extension retains data as follows:

• Local Data: Session info, shop mapping, trial date, and license state are stored until you remove the Extension
• Cached Responses: Transient comparison data is kept only briefly to keep the panel responsive and is not persisted
• Order Data: Order details are never stored beyond the transient cache used to render the current comparison

When you uninstall the Extension, all locally stored data is automatically removed by Chrome.

Children's Privacy

The Extension is a business tool and is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy and, if required, through the Extension's update notifications.

Continued use of the Extension after changes constitutes acceptance of the updated privacy policy.

Contact Information

If you have questions or concerns about this privacy policy or the Extension's data practices, please contact:

Developer: IntegrationNode
Email: odoointegrations.team@gmail.com

Legal Disclaimer

Odoo–Shopify Order Check is an independent extension and is not affiliated with, endorsed by, or sponsored by Odoo S.A. or Shopify Inc.

Odoo is a trademark of Odoo S.A.; Shopify is a trademark of Shopify Inc.