Subprocessors
Lumexus GmbH engages the third parties below to help deliver OdooSync. Each is bound by a data processing agreement and may process personal data only on our documented instructions. This page is the authoritative list referenced by our Data Processing Agreement.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
Supabase Supabase, Inc. (infrastructure operated on AWS) | Database, authentication, and serverless functions | Account email and name, company name, hashed API keys, registered domains, sync and API usage logs | Zurich, Switzerland (AWS eu-central-2) |
Stripe Stripe, Inc. / Stripe Payments Europe, Ltd. | Subscription billing, checkout, and invoicing | Billing name, email, billing address, payment method. Card details are collected by Stripe directly — OdooSync never receives or stores them | European Union and United States |
Vercel Vercel, Inc. | Website hosting and content delivery | IP address, user agent, and request logs | Global edge network, primary region Frankfurt (fra1) |
Google Analytics Google Ireland Limited | Website analytics — loaded only after you accept analytics cookies | Pseudonymous usage data and truncated IP address | European Union and United States |
Where your data lives
The OdooSync database and all customer records are hosted in Zurich, Switzerland. Product, inventory, and order data synced between your Odoo instance and your WooCommerce store passes through that infrastructure and is not copied elsewhere.
Transfers outside Switzerland and the EEA
Where a subprocessor processes data outside Switzerland or the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses together with the Swiss addendum recognised by the FDPIC, or by an adequacy decision.
Changes to this list
We will update this page before engaging a new subprocessor. Customers on an active subscription can request advance notice of changes by emailing info@odoo-sync.io — we will give at least 30 days' notice, during which you may object.