Privacy Policy

Who we are

OdooVast is an Odoo Partner based in Erbil, Kurdistan Region, Iraq. In this policy, “we”, “us” and “our” mean OdooVast.

This policy covers www.odoovast.com and the direct contact channels listed on it. It also explains, in general terms, how we treat information inside an Odoo system we implement, host or support for a client.

What this website collects

Nothing, directly. The site is a set of static pages. It has no user accounts, no database, no comment system, no advertising and no tracking scripts. It sets no cookies and saves nothing in your browser.

The fonts are served from this domain rather than from a font provider, so opening a page does not announce your visit to a third party.

Like any website, the server that delivers these pages keeps short technical logs — IP address, the page requested, browser type, the time — for security and for keeping the site online. Our hosting provider records those. We do not use them to build a profile of you and we do not connect them to any person.

The contact form

The form checks the fields in your browser and then opens WhatsApp with your name, company, phone number and message already written out. Nothing is submitted to this website, and nothing is saved here.

The message reaches us only if you press send in WhatsApp. From that moment it is a WhatsApp message, and Meta's own privacy policy applies to it alongside this one.

Facebook and Instagram lead forms

We advertise on Facebook and Instagram, and some of those ads carry a lead form you can fill in without leaving the app. If you submit one, Meta passes us what you entered — usually your name, phone number, email address and company. This section is the disclosure Meta's Lead Ads terms require us to make, and it is binding on us.

What we do with it

We contact you about the thing you asked for — a consultation, a quotation, a demonstration — and nothing else. If we later want to use your details for a different purpose, we ask you first.

We never sell it

Lead data is never sold, rented, or passed to a data broker, a list aggregator or another advertiser, under any circumstances. Meta's terms forbid it and so do we.

We do not mix it

Your lead is kept as what it is — an enquiry to OdooVast. We do not merge it with data from any other advertiser or build a profile out of it.

Who else sees it

Only the people at OdooVast who handle enquiries, and the service providers that carry our email and messaging — under confidentiality, and only for this same purpose.

Meta's side of it

What Meta itself records about you — the ad you saw, your account, your activity — is governed by Meta's own privacy policy, not by ours. We cannot delete anything on Meta's side for you.

Delete a lead you submitted

What you give us when you get in touch

When you message us on WhatsApp, call us or write to us by email, we receive whatever you choose to include — usually your name, your company, a phone number, an email address and a description of what you need.

We use it to answer you, to prepare a proposal, and to keep a record of what was discussed and agreed. We do not sell it, rent it or share it for marketing, and we do not add you to any mailing list you did not ask for.

Information we hold about clients

Once you engage us, we hold the ordinary records of a business relationship: contact details for the people we work with, proposals and contracts, invoices and payment records, project notes, support tickets and training material.

Implementation, data migration and support work can give us access to data inside your Odoo system, including records about your staff and your own customers. For that data you are the controller and we act on your instructions. We open it only where the work requires it, only for as long as the work requires it, and never for any other purpose.

Where we host a system on your behalf, the same applies to its backups.

Third parties your browser reaches

This website itself carries no advertising script, no analytics product, no tracking pixel and no chat widget. We do advertise on Meta's platforms, but that happens there rather than here — the section above covers it.

Hosting

Our hosting provider delivers these pages and keeps the short technical server logs described above.

WhatsApp (Meta)

Carries the messages you send us. Everything in them is handled under Meta's terms as well as ours.

Google Maps

The contact page embeds a map. Loading that page gives Google your IP address, and Google may read or set its own cookies. If you would rather it did not, use the written address and the directions link instead.

LinkedIn and Facebook

We link to our pages there. Following a link takes you onto that platform under its own policy, and we cannot see who clicked.

Cookies

This website sets no cookies of its own, which is why it never asks you to accept any — there is nothing to accept. The only cookies that can appear come from the embedded Google map on the contact page, and blocking them in your browser breaks nothing else on this site.

Why we are entitled to hold it

If the law where you live gives you specific rights over your personal data — the GDPR in the European Union, for example — we honour those rights, and the section below explains how to use them.

• Because you asked us to do something — answer a question, prepare a quotation, run a project.
• Because a contract with you requires it.
• Because Iraqi law requires it, tax and accounting records above all.
• Because we have a legitimate interest in keeping our own records, securing our systems and defending a claim.

How long we keep it

• Enquiries that do not become projects — deleted at the latest 24 months after the last message, and sooner if you ask.
• Client records — for the life of the engagement, then for as long as Iraqi tax and accounting rules oblige us to keep them, and no longer.
• Access to a client's Odoo data — withdrawn when the engagement or the specific task ends.
• Server logs — only for the short period our hosting provider retains them.

How we protect it

Access is granted on a need-to-know basis, accounts are protected by strong authentication, connections are encrypted, and the devices we control are kept patched.

Everyone at OdooVast who touches client data is bound to confidentiality, and that obligation outlasts their work with us.

No system is perfectly secure and we will not pretend otherwise. If a breach affects your information, we will tell you — and the relevant authority where we are required to — and we will say what happened without waiting to be asked.

When we share information

We do not sell personal information, in any form, to anyone. We share it only in these situations:

• With the service providers that make our work possible — hosting, email and the services named above — under confidentiality.
• With Odoo S.A. where a licence or an official partner process requires it, for example to register your subscription.
• Where the law, or a competent court in Iraq, compels us.
• Where it is necessary to establish, exercise or defend a legal claim.

Your rights

You may ask us what we hold about you, ask for a copy of it, ask us to correct it, ask us to delete it, ask us to stop using it for a particular purpose, or ask us to stop contacting you.

Write to info@odoovast.com or send the request on WhatsApp. We answer within 30 days, usually much sooner, and we do not charge for it.

We may first need to confirm who you are, so that nobody can obtain or erase your information by pretending to be you.

How to have your data deleted

Children

Our services are sold to businesses and this website is not directed at children. We do not knowingly collect information about anyone under 16. If you believe we have, tell us and we will delete it.

Where your information is held

We are in Iraq, and some of the services we rely on — hosting, email, WhatsApp — keep data on servers outside Iraq. Sending us a message means accepting that it travels that way. We choose providers that commit to recognised security standards.

Changes to this policy

If we change how we handle personal information, we update this page and change the date at the top. Material changes stay flagged here for a reasonable period. The version on this page is always the one in force.