1. Who we are
Technoverse Systems ("Technoverse", "we", "us", "our") is an Odoo ERP partner based in Karachi, Pakistan, also serving clients in Qatar and worldwide. We provide Odoo implementation, customisation, migration, training and support services, and we sell ready-made Odoo modules through technoversesystems.com (the "Website").
Technoverse Systems is the data controller for the personal information described in this policy. When we process data inside a client's Odoo system on the client's instructions, the client is the controller and we act as its processor (see "Client data in Odoo projects").
This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, how we protect it and the rights you have. It applies to the Website, our online store, our e-mail, phone and WhatsApp communication, and our professional services. By using the Website or our services you confirm that you have read this policy.
2. Definitions
- Personal information: any information that identifies you or can reasonably be linked to you, such as your name, e-mail address, phone number or IP address.
- Processing: anything we do with personal information, including collecting, storing, using, sharing and deleting it.
- Service provider: a company that processes personal information on our behalf, such as our hosting or payment provider.
- You: any visitor, customer, client, applicant or other person whose personal information we process.
3. Information you give us
- Account details: name, e-mail address and password when you sign up. Passwords are stored only as a one-way secure hash; nobody at Technoverse can read them.
- E-mail verification: a one-time code sent to your e-mail to confirm you own the address. Codes expire and are not reused.
- Order details: the modules and Odoo versions you buy, price paid, coupon used, billing name, e-mail, company, country, VAT or tax number (if you give one) and order history.
- Installation requests: details of your Odoo version, hosting and access needed to install a module you bought.
- Contact and quote requests: name, e-mail, phone number, company, country and the message you send.
- Reviews: the name, company, rating and text you submit. Reviews are checked before they are published.
- Chat assistant: the questions you type into the chat on the Website and the answers shown to you.
- Communications: e-mails, WhatsApp messages, calls and meeting notes when you contact us or we work together.
- Project information: requirements, documents and data you share with us during an implementation or support engagement.
- Job applications: your CV and contact details if you apply to work with us.
Please do not send us sensitive information (for example health, religious or financial account details) unless we specifically ask for it as part of a project and agree how it will be protected.
4. Information collected automatically
- Server log data: IP address, browser and operating system, referring page, pages and files requested, date and time and response codes. These logs are kept by our hosting provider for security and troubleshooting.
- Device and usage data: screen size and basic interaction needed for the Website to work, such as the items in your cart.
- Security data: failed login attempts and spam signals used to protect accounts and forms.
- Cookies and browser storage: described in the Cookies section below.
We do not currently use third-party analytics or advertising trackers on the Website. If we add an analytics tool in the future, we will update this policy first.
5. Information from other sources
- Payment provider: confirmation that a payment succeeded or failed, a transaction reference and the amount. We never receive your full card number.
- Public sources: business details from your company website or professional profiles when you contact us as a business.
- Referrals: contact details shared by a partner or existing client who introduces you to us.
6. How and why we use your information
We use personal information only for clear purposes:
- Providing the Website and your account: creating your account, signing you in, remembering your cart and showing your orders and downloads. (Contract)
- Selling modules: processing orders and payments, sending invoices and secure download links, applying coupons and keeping licence records. (Contract, legal obligation)
- Installation and support: installing modules for free after purchase, answering support tickets and fixing issues. (Contract)
- Answering enquiries: replying to contact forms, quotes, WhatsApp and chat messages. (Legitimate interest, steps before a contract)
- Delivering services: running Odoo implementation, customisation, migration and training projects. (Contract)
- Reviews: publishing reviews you choose to submit and moderating spam. (Consent)
- Security and fraud prevention: protecting accounts, detecting abuse and keeping the Website safe. (Legitimate interest)
- Improving our work: understanding which modules and pages are useful and improving them. (Legitimate interest)
- Marketing: sending news about new modules or offers only if you agreed, or if you are an existing customer and did not opt out. Every marketing e-mail has an unsubscribe option. (Consent, legitimate interest)
- Legal and accounting: keeping tax records, handling disputes and responding to lawful requests. (Legal obligation)
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
7. Cookies and browser storage
- Session cookie (essential): keeps you signed in and keeps your cart while you browse. Deleted when you close the browser or log out.
- "Remember me" cookie (essential, optional): set only if you tick "Remember me" at login, so you stay signed in on that device. Removed when you log out.
- Browser session storage (functional): remembers small preferences in the current visit, such as whether you have already seen the intro animation.
We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings, but signing in, checkout and the cart need the essential cookies to work. Our Website does not respond to "Do Not Track" signals because we do not track you across other sites.
8. Who we share information with
We do not sell, rent or trade your personal information, and we do not share it for cross-context behavioural advertising. We share it only when needed:
- Hosting: Hostinger hosts our Website, database and server logs.
- Payments: our payment provider processes payments on its own secure hosted page and shares the payment result with us.
- E-mail delivery: our e-mail providers send verification codes, order e-mails and replies to your messages.
- Website assets: fonts are loaded from Google Fonts and a scrolling script from jsDelivr. These services receive your IP address when your browser requests the files.
- Communication tools: WhatsApp (Meta) handles messages you send through the WhatsApp button, under Meta's own privacy policy.
- Professional advisers: accountants, auditors and lawyers, under confidentiality.
- Partners: an Odoo partner or sub-contractor working on your project, only with your knowledge and under confidentiality.
- Authorities: when required by law, court order or to protect our rights, our users or the public.
- Business transfers: if Technoverse is merged, acquired or sells assets, your information may move to the new owner, who must respect this policy.
Service providers may only use your information to provide their service to us and must keep it secure.
9. Client data in Odoo projects
When we implement or support Odoo for your business, we may need access to your Odoo database, server or files, which can contain personal information about your employees, customers or patients. In that case:
- We process that data only on your instructions and only to deliver the agreed work.
- Access is limited to the team members working on your project and is removed when it is no longer needed.
- We do not copy your data outside your systems unless the work requires it (for example a migration or a test copy), and we delete such copies when the work is finished.
- We keep your data confidential and tell you without undue delay if we become aware of a security incident affecting it.
- On request we will sign a data processing agreement with you.
10. International transfers
We work with clients in many countries, and our service providers may store or process data outside your country, including in Pakistan, the European Union, the United States and Qatar. When we transfer personal information internationally we use providers with appropriate safeguards, such as contractual protections, and we only transfer what is needed.
11. How long we keep information
- Account information: while your account is active. If you ask us to delete it, we delete or anonymise it within 30 days, except records we must keep by law.
- Orders, invoices and licence records: for as long as needed for download access, support and tax law, normally up to 10 years.
- Contact, quote and chat messages: up to 3 years after our last conversation.
- Project data: for the duration of the engagement and any support period, then deleted or returned to you.
- Reviews: until you ask us to remove them or we stop showing reviews.
- Server logs: for the limited period set by our hosting provider.
- Job applications: up to 1 year, unless you agree to a longer period.
12. How we protect your information
- HTTPS encryption on every page of the Website.
- Passwords stored only as secure one-way hashes.
- Admin areas restricted to authorised staff with separate credentials.
- Module downloads delivered through private, protected links instead of public files.
- Forms protected against spam and cross-site request forgery.
- Access to client systems limited to the people who need it.
- Regular backups of the Website and database through our hosting provider.
No website or system is 100% secure. If a data breach is likely to put your rights at risk, we will tell you and, where required, the relevant authority without undue delay.
13. Your rights
Depending on where you live, you have some or all of these rights:
- Access: ask for a copy of the personal information we hold about you.
- Correction: ask us to fix information that is wrong or incomplete. You can also update your account details yourself.
- Deletion: ask us to delete your information, subject to records we must keep by law.
- Restriction and objection: ask us to limit or stop certain processing, including any direct marketing.
- Portability: receive your information in a common, machine-readable format.
- Withdraw consent: where we rely on consent, you can withdraw it at any time without affecting earlier processing.
- Complaint: complain to your local data protection authority.
To use these rights, e-mail sales@technoversesystems.com from the address linked to your account, or tell us how we can verify your identity. We will reply within 30 days. We will not charge you or treat you differently for using your rights.
14. Region-specific information
- European Union, EEA and United Kingdom: we process your data under the GDPR and UK GDPR on the legal bases listed in "How and why we use your information". You may complain to your local supervisory authority.
- California and other US states: we do not sell or share personal information for targeted advertising. You can ask to know, correct or delete your information as described above.
- Pakistan: we handle personal information in line with the Prevention of Electronic Crimes Act 2016 and other applicable Pakistani law.
- Qatar: for clients in Qatar we handle personal data in line with Law No. 13 of 2016 on the Protection of Personal Data Privacy.
15. Children's privacy
The Website and our services are meant for businesses and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
16. Third-party websites and services
The Website links to other websites and services, such as Odoo, WhatsApp, social media pages and client websites. We are not responsible for their content or privacy practices. Please read their privacy policies before giving them your information.
17. Changes to this policy
We may update this Privacy Policy when our services, the law or our providers change. The latest version is always on this page with its "Last updated" date. If we make important changes, we will tell account holders by e-mail or show a notice on the Website before the change takes effect.
18. Contact us
If you have questions about this policy or how we handle your information, contact us:
- E-mail: sales@technoversesystems.com
- Phone and WhatsApp: +92 302 1980998 (Pakistan), +974 7012 7132 (Qatar)
- Post: Technoverse Systems, Karachi, Pakistan