Privacy Policy

The purpose of this policy

The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:

The personal data we will collect
Use of collected data
Who has access to the data collected
The rights of Site users
The Site's cookie policy

This Privacy Policy applies in addition to the Terms and Conditions of our Site.

Consent

By using our Site users agree that they consent to:

The conditions set out in this Privacy Policy.

When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.

You can withdraw your consent by: Contacting the privacy email or using the Contact Us form to request removal. The data will be archived and no longer used for initiating further business contact with the requesting customer. Data tied to prior service(s) performed will remain on file for the legally required minimum time.

Information We Collect

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data Automatically Collected:

When you visit and use our Site, we may automatically collect and store the following information:

IP address
Location
Hardware and software details
Clicked links
Content viewed
Time and Date of visit
Pages accessed
Web page that referred the user to our website

Data Not Automatically Collected:

We may also collect the following data when you perform certain functions on our Site:

First and last name
Email address
Phone number
Address
Payment information
Network Details

This data may be collected using the following methods:

Registering an account on the website
Additional project related data is stored digitally as notes on the specific user account or project.

Form protection:

Some forms on our website may be protected by Google reCAPTCHA. This technology relies on heuristics that are based on technical characteristics of your browser and device and may also use specific Google cookies. See also Google Privacy Policy and Terms of Use in the Third-Party Service Providers section below.

In-App Purchase (IAP) Transaction Data:

When you use manningns.com, some optional "In-App Purchase" services may be active by default. This typically includes auto-completion features to help us quickly input address info, as well as integration with third-party service providers for sending and receiving SMS, paper letters, etc.

When you use these services, with or without payment, some necessary transaction data is transmitted to Odoo Cloud services and have to be communicated to other third-parties for the purpose of executing the service. You can find the detailed privacy policy for each service on the Odoo.com IAP Privacy Policy page.

The IAP services are always optional, even when enabled by default, and the IAP Privacy Policy also explains how you can opt-out of those services.

How we use this Information

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

Account & Contact Data: We use your contact information in order to provide our services, to answer your requests, and for billing and account management reasons. We may also use this information for marketing and communication purposes (our marketing messages always come with a way for you to opt-out at any time). We also use this data in aggregated/anonymized form in order to analyze service trends.

If you have registered to participate in an event published on our website, we may transfer your name, email address, phone number and company name to our local organizer and to the sponsors of the event for both direct marketing purposes and in order to facilitate the preparations and booking for the event.

Browser Data: This automatically recorded data is anonymously analyzed in order to maintain and improve our services. Google reCAPTCHA may also be used for security purposes, in order to prevent abuse of our services. In that case we only process the anonymous score that reCAPTCHA determines based on your browser and device.

We will only correlate this data with your personal data when required by law or for security purposes, if you have violated our Acceptable Use Policy as defined in our Terms and Conditions.

With your consent we may pass your data on to partners, specializing in your specific needs if it is not a service we offer.

The data we collect automatically is used for the following purposes:

Statistical, analytical, security and legal purposes, and to customize the user experience according to their country and preferred language.

The data we collect when the user performs certain functions may be used for the following purposes:

Contacting the customer, traveling to the customer's home, planning service details, recording before and after status reports of the systems that are modified.

Children

We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data their parent or guardian may contact our privacy officer.

Accessing, Updating or Deleting Your Personal Information

Account & Contact Data You have the right to access and update personal data you have previously provided to us. You can do so at any time by connecting to your personal account on Odoo.com. If you wish to permanently delete your account or personal information for a legitimate purpose, please contact our Helpdesk to request so. We will take all reasonable steps to permanently delete your personal information, except when we are required to keep it for legal reasons (typically, for administration, billing and tax reporting reasons).

Safety Retention Period: we retain a copy of your data in our backups for safety reasons, even after they are destroyed from our live systems. See Data Retention for more details.

Security

We realize how important and sensitive your personal data is, and we take a great number of measures to ensure that this information is securely processed, stored and preserved from data loss and unauthorized access. Additionally, Odoo.com provides technical, administrative and organizational security measures described in detail in Odoo's Security Policy.

Third Party Service Providers / Sub-processors

In order to support our operations we rely on several Service Providers. They help us with various services such as payment processing, web audience analysis, cloud hosting, marketing and communication, etc.

Whenever we share data with these Service Providers, we make sure that they use it in compliance with Data Protection legislation, and that the processing they carry out for us is limited to our specific purpose and covered by a specific data processing contract.

Below is a list of the Service Providers we are currently engage with, why we use them, and what kind of data we share with them.

In-App Purchase (IAP): The list of third-party service providers for each IAP service is available on Odoo's IAP Privacy Policy page.

A. Sub-processors

These third-party service providers are processing data for which Odoo is Controller or Processor, on behalf of Odoo.

Important: due to the great variability in resources and services provided by these sub-processors, Odoo Customers cannot select the sub-processor that will be used to process their data. They can however choose their main hosting region (see the Data Location section).

Sub-processors	Purpose	Shared Data
OVH S.A.S. Privacy & Security	Infrastructure and hosting of Odoo.com (production + backups), Odoo SaaS (production + backups), Odoo.SH (backups), DDOS Protection.	Currently hosted by OVHCloud: Production data from Odoo.com and its affiliate services, including Odoo Online (SaaS) Customer Databases, and the Odoo Database Upgrade services, including Customer databases currently being upgraded; Backup data for all Odoo cloud services. Data Center Certifications: ISO 27001, SOC 1 TYPE II, SOC 2 TYPE II, PCI-DSS, CISPE, SecNumCloud, CSA STAR.
Google Cloud EMEA Ltd Privacy & Security	Infrastructure and hosting of Odoo.com (production + backups), Odoo SaaS (production + backups), Odoo.SH (production + backups), DDOS Protection.	Currently hosted by Google: Production data from Odoo.com and its affiliate services, including Odoo Online (SaaS) and Odoo.SH (PaaS) Customer Databases and the Odoo Database Upgrade services, including Customer databases currently being upgraded; Backup data for all Odoo cloud services. Data Center Certifications: ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC3, PCI-DSS, HIPAA, CISPE, CSA STAR .
Amazon Web Services, Inc. Privacy & Security	Infrastructure and hosting (legacy)	Currently hosted by AWS: The Odoo Database Upgrade services for Customer Databases that are uploaded on the legacy web-based upgrade platform, or that were previously started on that legacy platform with custom scripts, or that are started from the end-of-life version OpenERP v6.1. Newer upgrades started with the command-line script or the new web-based form are not processed on AWS. Data Center Certifications: ISO 9001, ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC3, PCI-DSS, HIPAA, CISPE, CSA STAR
FullStory Security & Privacy GDPR Info Cookie Policy	Temporary free trial recordings for users who consent to the UX improvement program.	Shared with FullStory: video-like recording of your screen during the first 2h of your free trial session + FullStory cookie.

B. Third-party Processors and Controllers

These third-party service providers are processing data for which Odoo is a Controller, as Processors, on behalf of Odoo, or they are receiving such data as Controllers, for the specific purpose of performing the services they have been contracted to provide.

Service Provider	Purpose	Shared Data
PayPal PCI • Privacy & Security	Payment processing on manningns.com.	Shared with PayPal: Order details (amount, description, reference), Customer name and email. Only stored by PayPal: credit card info.
Stripe PCI • Privacy & Security	Payment processing on manningns.com.	Shared with Stripe: Order details (amount, description, reference), Customer name and email. Only stored by Stripe: credit card info.
OneSignal Privacy & Security	In-browser push notifications for manningns.com visitors.	Shared with OneSignal: Non-personal browser data, geolocation info, language (no identifiable information). Only stored by OneSignal: browser/mobile device IDs.
Google Tag Manager Privacy & Terms • Types of cookies	Website audience analysis. Opt-out	Shared with Google: Ads Campaign Data, Browser data, visited pages.
Google reCAPTCHA Privacy & Security	Form protection.	Used by Google reCAPTCHA: Browser and device characteristics, Google cookies.
Acuity Scheduling Privacy & Security	Scheduling of demo/meeting through manningns.com.	Shared with Acuity: Any personal info entered by the user in the scheduling form: name and contact info, reason for request, etc.
Clearbit Privacy & Security	Retrieval of business info for prospection reasons.	Retrieved from Clearbit for visitors coming from EU companies: name, sector, est. size, est. revenue, website, social media and general contact info. Retrieved from Clearbit for visitors coming from non-EU companies: same as for EU companies, plus contact info for company executives, if known.
CloudFlare Security & Privacy • Cookie Policy	Distributed caching of static resources and images of manningns.com.	Used by CloudFlare: Browser and device characteristics, CloudFlare cookies.

Data Retention

Account & Contact Data:

We will only retain such data as long as necessary for the purpose for which it was collected, as laid out in this policy, including any legal retention period, or as long as necessary to carry out a legitimate and reasonable promotion of our products and services.

Server Logs & Security Logs:

We retain logs for a maximum of 12 months, unless we need to keep them in relation with a legitimate concern related to the security or performance of our services, or as required by law.

Manningns.com Customer Database on Odoo's Platform:

We will only retain this data as long as necessary for providing the services you subscribed to or purchased. For databases hosted on the Odoo Cloud, if Manning Network Services LLC cancels their service with Odoo the database is kept deactivated for 3 weeks (the grace period during which Manning Network Services LLC can change its mind), and then destroyed. For databases uploaded to the Odoo Database Upgrade website, the database is kept for up to 4 months after the last successful upgrade and may be deleted earlier upon request by Manning Network Services LLC.

Third Party Disclosure

Except as explicitly mentioned above, we do not sell, trade, or otherwise transfer your personal data to third parties. SMS/text messaging opt-in is excluded from any data transfer covered above. We may share or disclose aggregated or de-identified information, for research purposes, or to discuss trends or statistics with third-parties.

Cookies

Cookies are small bits of text sent by our servers to your computer or device when you access our services. They are stored in your browser and later sent back to our servers so that we can provide contextual content. Without cookies, using the web would be a much more frustrating experience. We use them to support your activities on our website, for example your session (so you don't have to login again) or your shopping cart.

Cookies are also used to help us understand your preferences based on previous or current activity on our website (the pages you have visited), your language and country, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

We also use third-party services such as Google Analytics, who set and use their own cookies to identify visitors and provide their own contextual services. For more information regarding those third-party providers and their Cookie Policy, please see the relevant references in the Third-Party Service Providers section.

Here is an overview of the cookies that may be stored on your device when you visit our website:

Category of Cookie	Purpose	Cookies
Session & Security	Authenticate users, protect user data and allow the website to deliver the services users expect, such as maintaining the content of their cart, or allowing file uploads. The website will not work properly if you reject or discard those cookies.	session_id (Odoo) td_id (Odoo) fileToken (Odoo) __cfduid (CloudFlare)
Preferences	Remember information about the preferred look or behavior of the website, such as your preferred language, region and timezone. Your experience may be degraded if you discard those cookies, but the website will still work.	frontend_lang (Odoo) cids (Odoo) odoo_no_push (Odoo) tz (Odoo)
Interaction History	Used to collect information about your interactions with the website, the pages you've seen, and any specific marketing campaign that brought you to the website. We may not be able to provide the best service to you if you reject those cookies, but the website will work.	im_livechat_history (Odoo) im_livechat_previous_operator_pid (Odoo) utm_campaign (Odoo) utm_source (Odoo) utm_medium (Odoo) fs_uid (FullStory)
Advertising & Marketing	Used to make advertising more engaging to users and more valuable to publishers and advertisers, such as providing more relevant ads when you visit other websites that display ads or to improve reporting on ad campaign performance. Note that some third-party services may install additional cookies on your browser in order identify you. You may opt out of a third-party's use of cookies by visiting the Network Advertising Initiative opt-out page. The website will still work if you reject or discard those cookies.	__gads (Google) __gac (Google) _fbp (Facebook)
Analytics	Understand how visitors engage with our website, via Google Analytics. Learn more about Analytics cookies and privacy information. The website will still work if you reject or discard those cookies.	_ga (Google) _gat (Google) _gid (Google) _gac_* (Google)

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. Each browser is a little different, so look at your browser's Help menu to learn the correct way to modify your cookies, or look at the links below.

We do not currently support Do Not Track signals, as there is no industry standard for compliance.

Policy Updates

We may update this Privacy Policy from time to time, in order to clarify it, to reflect any changes to our website, or to comply with legal obligations. The "Last Updated" mention at the top of the policy indicates the last revision, which is also the effective date of those changes. We give you access to archived versions of this policy, so you can review the changes.

Contacting Us

If you have are any question regarding this Privacy Policy, or any enquiry about your personal data, please reach out to the Helpdesk, contact us via email at privacy@manningns.com, or call 571-766-6260