Effective August 5, 2026

Privacy policy

OdooHealthExtCS is an internal browser productivity extension for authorized Odoo Customer Success users. It is not an installable Odoo module and is not an official Odoo product.

Data processed

On every matching https://www.odoo.com/odoo* workspace page, the extension performs a read-only same-origin session check so the control panel can report whether the Odoo connection is ready. When the settings popup is opened from an active Odoo workspace tab, it may also display the current Odoo user's name or login so the user can confirm which account is connected. This label is sanitized, kept only in the active tab's memory, and never written to browser storage. User IDs, cookies, session identifiers, and the raw session response do not leave the page bridge.

On matching Odoo subscription pages whose visible status badge is In Progress, enabled features read only the fields needed for account health and the exact linked customer's industry. User-requested updates are sent back to Odoo through the browser's current authenticated same-origin session. A narrow page bridge rejects unrecognized models, methods, fields, searches, and write shapes before contacting Odoo.

Processing occurs in the browser and between the browser and www.odoo.com. No Odoo page data is sent to the developer, analytics providers, advertising networks, or other external services.

Data stored

Browser storage contains only enablement, feature, success-confirmation, and appearance preferences plus a sanitized general connection code and timestamp. The extension does not persist Odoo records, customer data, names, logins, email addresses, cookies, passwords, CSRF values, user identifiers, session identifiers, credentials, request histories, or raw server stack traces. The connected-user label exists only in volatile memory while the matching Odoo tab remains open.

Permissions

The storage permission saves settings and compatibility status. Both the isolated interface script and page-context bridge are limited to https://www.odoo.com/odoo*. No history, tabs, cookies, identity, downloads, clipboard, camera, microphone, geolocation, or broad host permission is requested.

Sharing and advertising

The extension does not sell, rent, monetize, advertise with, profile, or share user or customer data. It contains no analytics, tracking SDK, or remotely hosted executable code.

User control and retention

Users may disable features, clear extension storage, or uninstall the extension. Clearing storage removes preferences and compatibility status. Requested Odoo record changes remain subject to Odoo and organizational retention policies.

Security and changes

The project minimizes permissions, validates model contracts before writes, enforces an exact RPC allow-list, sanitizes results and errors, and scans releases for prohibited sensitive material. Material policy changes will be reflected on this page and in the public repository.

Contact

Use the support process for privacy questions. Never include customer or session data.