Privacy Policy

Odoie is operated by Israr Gul, sole proprietor trading as Odoie in Karachi, Pakistan. For this website, enquiries and Odoie’s own business records, Odoie determines why and how personal information is used.

When Odoie processes personal information only on a customer’s instructions inside that customer’s Odoo, hosting or other business system, the customer normally controls that data. Project-specific responsibilities should be set out in the relevant agreement.

Depending on how you interact with Odoie, information may include:

• name, job title, organisation and contact details;
• project requirements, messages, meeting notes and support history;
• quotation, contract, invoice, tax and transaction-reference information;
• authorised user, access and audit information needed to deliver a service;
• website device, browser, IP, security and diagnostic information;
• feedback, complaint details and the evidence you choose to provide.

Odoie does not intentionally collect sensitive personal information unless it is necessary for a documented engagement and a secure method has been agreed.

Information comes directly from you, your organisation, authorised project contacts, website interactions, service systems you authorise Odoie to access, payment providers, professional platforms, or public business sources where appropriate. Odoie will not use scraped private profiles or unlawfully obtained datasets.

Odoie uses information to:

• answer enquiries, qualify needs and prepare quotations;
• form, administer and deliver customer engagements;
• provide support, investigate defects and maintain service records;
• issue invoices, reconcile payments and meet tax or accounting duties;
• protect accounts, systems, customers and Odoie against misuse or fraud;
• improve services using aggregated or appropriately de-identified learning;
• send requested updates or limited business communications that can be declined;
• establish, exercise or defend legal rights and comply with lawful requests.

Odoie does not sell personal information. Customer confidential data is not used to train a public AI model, and it is not entered into a public AI service without authorisation.

Payments may be handled by Safepay, PayFast, a bank or another provider identified at checkout. The provider receives the credentials needed to process the transaction under its own privacy and security terms. Odoie normally receives the payer or customer details, amount, currency, invoice reference, status and provider transaction reference needed for fulfilment, reconciliation, support and disputes.

Odoie does not store complete card numbers, CVV codes, online-banking passwords or one-time passwords. Never send that information to Odoie by email, chat or a complaint form.

Information may be shared only as reasonably needed with:

• payment providers and banks for processing, refunds and disputes;
• hosting, email, backup, security and collaboration providers;
• approved contractors or specialists working under confidentiality duties;
• accountants, auditors, insurers and legal advisers;
• authorities or other parties where disclosure is lawfully required;
• a successor to the relevant business, subject to appropriate safeguards.

Service providers may use information only for the agreed service or as independently required by law. Odoie does not authorise a provider to use customer confidential information for unrelated advertising.

Odoie works remotely and may use reputable service providers whose systems or support teams are located outside Pakistan. Where information is processed internationally, Odoie uses reasonable contractual, access-control and security measures appropriate to the information and the service.

Odoie keeps information only for a documented business or legal need. Typical periods are:

• unconverted enquiries: up to 24 months after the last meaningful contact;
• contracts, invoices and tax records: for the applicable legal period, normally up to seven years;
• support and delivery records: normally up to three years after the engagement;
• complaint and dispute records: normally up to three years after closure;
• routine security logs: generally up to 90 days unless needed for an incident.

A longer period may apply for an active account, unresolved dispute, backup cycle, legal hold or customer instruction. When information is no longer needed, it is deleted, securely disposed of or de-identified.

Odoie uses measures appropriate to a founder-led engineering practice, including limited access, strong authentication, secure transfer where appropriate, environment separation, backups, logging and prompt revocation of access. No internet transmission or storage system is completely risk-free.

If you suspect unauthorised access or accidentally disclose a secret, immediately rotate the credential and contact [email protected] with a non-sensitive description of the issue.

This website may use essential storage required for security, accessibility or a requested function. Odoie will identify non-essential analytics or advertising technologies and provide choices where required before activating them. Odoie does not currently use the website to sell behavioural advertising profiles.

You can control cookies through your browser. Blocking an essential item may affect a requested feature.

Subject to applicable law and necessary identity checks, you may ask Odoie to:

• explain whether it holds personal information about you;
• provide access to or correct inaccurate information;
• delete information no longer needed for a legal or contractual purpose;
• stop direct marketing or withdraw consent for an optional use;
• review a concern about how your information was handled.

A request may be limited where Odoie must protect another person’s rights, preserve evidence, comply with law or keep necessary contract, tax, security or dispute records. Odoie will explain a material refusal.

Privacy questions and requests should be sent to [email protected] with “Privacy” in the subject. Odoie may ask for enough information to verify identity and locate the relevant record, but will not ask for passwords, CVV or OTPs.

Privacy concerns follow the customer complaint process. This policy may be updated when services or applicable requirements change. Material changes will be identified by a new effective date.