Mobile Sales — Privacy Policy
Last updated: 2026-11-07
Mobile Sales is a B2B field-sales application provided by Iaxus EOOD to business customers integrated with their own Odoo instance. This policy describes what data the application and the Mobile Sales backend process, for what purposes, and how it is protected.
1. Data controller
Each business customer (a company using Mobile Sales) is the data controller for its own employees, customers, and orders. Iaxus EOOD acts as the technology provider (backend and mobile application) processing data on behalf of each customer, under the applicable agreement.
2. What data is processed
- Employee profile data: name, work email, hashed password, role/permissions, license status.
- Device data: unique device identifier, device name, last seen timestamp, status (active/revoked).
- Session data: refresh/access tokens (stored hashed), expiry and revocation timestamps.
- Business data from Odoo: cached catalog, sites/customers, prices and stock levels — only as needed for offline operation and order creation.
- Order and operation data: content of created orders, sync status, results and errors.
- Technical logs: requests to Odoo (short request/response previews), execution time, error codes — for diagnostics and support.
The application does not collect location, contacts, camera/microphone, or other data beyond what is listed above, unless a specific business customer has enabled an additional module, in which case they will be notified separately.
3. Purposes of processing
- Authentication and authorization of employees and devices.
- Offline catalog access and order creation with subsequent synchronization to Odoo.
- Error diagnostics and technical support.
- Security — abuse detection, revocation of lost/compromised devices.
4. Storage and security
Data is stored in the Mobile Sales backend database hosted for the relevant business customer, and in the mobile device's local secure cache (offline outbox). Passwords and sensitive credentials are stored hashed/encrypted. Access to the admin panel requires authentication and is restricted to authorized administrators.
5. Sharing with third parties
Data is exchanged solely with the business customer's own Odoo instance, for the purpose of synchronizing orders, catalog, and customers. Mobile Sales does not sell or share personal data with third parties for marketing purposes.
6. Retention period
Technical logs and operations are kept according to the retention period configured by the administrator, after which they are automatically deleted. Profile data is kept while the employee/license is active or until the company administrator explicitly requests deletion.
7. User rights
Employees may request access, correction, or deletion of their data from their company's administrator. If a device is lost or stolen, the administrator can immediately revoke it from the admin panel.
8. Contact
For questions about this policy or data processing, contact [email protected].