Privacy Policy

Effective date: August 9, 2026

This policy explains what information ModuleSmith ("we," "us") collects, why, and what we do with it. It covers the modulesmith.com website, our sales and support channels, and the licensing service built into our modules.

The short version: we collect very little, and your operational data never leaves your server. Our modules run inside your Odoo environment. Printer inventory, SNMP data, toner levels, service history, network information, and business records stay on your systems. ModuleSmith does not collect, receive, or host your fleet or business data.

1. What we collect

a. Website (modulesmith.com)

• Standard web server logs: IP address, user agent, pages requested, and timestamps, used for security and operations.
• Our site is served through Cloudflare, which processes visitor traffic as our infrastructure provider.
• We do not run third-party advertising or analytics trackers on the site.

b. Sales and support

When you contact us or place an order, we collect what you provide: name, company, email address, order details, and the content of your correspondence. Payment details for Direct Purchases are handled by our payment provider and are not stored by us.

c. Module licensing telemetry

Our modules contact exactly one external host: our license server. Each licensing request transmits only these fields:

Field	Value
License key	The key we issued to you
Database identifier	Your Odoo database UUID
Module version	The installed module version
Nonce	A random per-request security value

No business data, printer data, network inventory, documents, usage statistics, or personal data of your users is transmitted. Offline (air-gap) activation exchanges the same fields by email instead of a network call.

Licensing communication is opt-in. The module sends nothing to our license server until you explicitly activate your license. Activation is a deliberate action by your administrator, and the activation screen states what will be transmitted. After activation, a weekly license check-in transmits the same four fields; you may disable the check-in at any time, and doing so never disables the module. [VERIFIED 2026-08-08 by code review (module v19.0.7.1.2): the only two network call sites are the manual Activate action and the weekly check-in, which does nothing when no key is stored; there are no init hooks or reachability probes. The check-in is a standard Odoo scheduled action the administrator can disable. The activation wizard displays a consent/privacy notice before transmitting.]

2. How we use information

• To deliver, activate, and support the products you purchased (performance of a contract).
• To respond to inquiries and provide Maintenance & Support.
• To secure and operate our website and license service, and to prevent fraud and license abuse (legitimate interest).
• To send transactional email about your purchase, license, or plan (for example a renewal reminder). We do not send marketing email without your consent, and every non-transactional email includes an opt-out.
• To comply with legal obligations (tax and accounting records).

We do not sell personal information, and we do not share it with third parties for their own marketing.

3. Who we share it with

Only service providers acting on our instructions, as needed to run the business:

• Infrastructure and hosting providers (including Cloudflare for the website).
• Our payment provider, for Direct Purchase payments.
• Email providers, to correspond with you.
• Professional advisers or authorities where required by law.

4. Retention

• License records (key, database identifier, activation history): for the life of the license plus a reasonable archival period, so we can verify entitlements and honor the perpetual license.
• Support correspondence: while relevant to supporting you.
• Order, tax, and accounting records: as required by law.
• Web server logs: rotated on a short schedule.

5. Security

License server responses are cryptographically signed. Access to customer records is limited to people who need it to provide the service. No method of transmission or storage is perfectly secure, but we design for minimal data collection so there is little to lose in the first place.

6. International visitors

ModuleSmith operates from the United States, and information is processed in the United States. If you are in the EEA, UK, or a jurisdiction with data protection laws, the data we process is limited to the categories above, and we rely on performance of contract and legitimate interest as described in Section 2. You may have rights to access, correct, delete, or receive a copy of your personal data, and to object to certain processing. To exercise them, email [email protected]; we respond to verified requests within the time required by applicable law.

7. Children

Our website and products are business tools and are not directed to children.

8. Changes

We will post any changes to this policy on this page with a new effective date. Material changes affecting licensing telemetry will also be noted in module release notes.

9. Contact

Privacy questions or requests: [email protected].