Privacy Policy

What we collect

• From businesses that sign up: the name and email of each person with access to the Ronyxx console, their password (kept only as a one-way hash) or, if they choose, the ID of their Google account, the company name, and what Ronyxx needs to connect to the company's Odoo (its address, database and an API key, which we keep encrypted).
• About the people a business adds: their name, role, and WhatsApp number or work email.
• When someone connects Ronyxx in ChatGPT or Claude: the work email they sign in with (confirmed by a code we email them, or by Google), which app they connected, and when it was last used. The keys those apps use to reach Ronyxx are kept only as one-way hashes.
• When people use Ronyxx: the questions they send, Ronyxx's answers, and when they were sent.
• When you message our demo number: your WhatsApp number, the questions you send and the demo's answers. The demo answers from a sample company's made-up data, never from a real business, and we use these messages to improve Ronyxx.
• When owners and managers use the console: their sign-ins (the type of browser and a shortened IP address) and the changes they make there.
• From the business's Odoo: the records needed to answer each question, such as sales, invoices, stock and staff. Ronyxx only reads them. It never changes anything in Odoo.
• Visits to our website and the console: the pages viewed, the buttons clicked, the site or campaign that brought you, the kind of device and browser, and the country and city that your network address points to. We count visits without cookies and without storing your IP address: a visitor is a code that changes every day, so we can't follow you from one day to the next. When you're signed in to the console, the screens you open are linked to your account. If your browser sends Global Privacy Control, we don't count your visits. We also record errors in our pages so we can fix them.
• When you sign up: where your visit came from (the site or campaign that brought you), and the country, city and device you signed up from.
• From our website: what you send us by email, and basic server logs (such as IP address and browser) that keep the site secure. We don't use advertising or tracking cookies.

How we use it

• To answer questions, and to run, support, secure and improve Ronyxx.
• To reply when you get in touch with us.
• We don't sell personal information, and we don't use it for advertising.

AI and your data

An AI model from OpenAI reads each question to work out what is being asked. It gets the question and the names it needs to understand it, such as customer or product names, but not the amounts in your records. When an answer is checked before it is sent, the model also reads that finished answer, figures included. Our own code reads Odoo and calculates every figure.

Ronyxx Help, the chat on our website and in the console, sends what you type there to OpenAI to write its answer. We keep the conversation only while it's open (at most 2 hours) and never with your Odoo data. If you ask it to connect you with a person, we send that conversation, your note and your email address to our support team so we can reply, and keep them for at most 90 days. Don't type passwords or keys into it.

Your data is never used to train AI models, by us or by OpenAI. OpenAI keeps the data it receives for up to 30 days to check for abuse, then deletes it.

When someone asks in ChatGPT or Claude, the question reaches us through OpenAI or Anthropic, and Ronyxx's answer goes back the same way. Nothing else from your Odoo is sent. What happens inside ChatGPT or Claude, including what they keep and whether they use it to improve their models, is covered by that person's ChatGPT or Claude account and its settings, not by this policy.

Services we use

A few trusted companies help us run Ronyxx:

• OpenAI, to read questions and to answer in Ronyxx Help;
• OpenAI's ChatGPT and Anthropic's Claude, when a business chooses them, to carry questions and Ronyxx's answers between its people and us;
• Meta's WhatsApp Business Platform, to carry messages (Meta's own privacy policy covers the WhatsApp app);
• Vultr, for our servers, which are in the United States;
• Cloudflare, for security and the network;
• Backblaze, for encrypted backup copies, kept in the European Union;
• Zoho, for our email;
• Lemon Squeezy, our reseller, to take payments for paid plans (it handles the card details; we never see them);
• Google, if you choose it, for signing in with Google.

They use the data only to provide their service to us. Some of them are in other countries, so your data may be handled outside your own.

Who decides

The business that uses Ronyxx decides who can ask and what each person can see, and we handle its data on its behalf. If your business needs a data processing agreement, email us.

How long we keep it

• Questions and answers: 90 days, then they are deleted.
• Questions Ronyxx couldn't answer: up to 12 months, so we can add what's missing.
• Server logs: up to 30 days.
• Visits to our website and the console: 13 months. Errors in our pages: 90 days.
• A record of the emails we send you (when, and which kind, never their content): 90 days.
• The console's record of sign-ins and changes: 12 months.
• A ChatGPT or Claude connection: while it's in use. Ended connections are deleted 90 days later.
• Everything else: while the business uses Ronyxx. When a business leaves, we delete its data within 30 days, and encrypted backup copies are gone within 70 days after that.

Keeping it safe

Ronyxx only reads your Odoo. Connection keys are encrypted, traffic is encrypted, and only the WhatsApp numbers and work emails a business adds get answers from its Odoo, each limited to what its role allows. Anyone can message our demo number, which only ever reads sample data. No system is perfectly secure, but we work hard to protect your data and will tell you if something goes wrong.

Your choices

You can ask us to show you, correct or delete your information. Email [email protected] with your email address or WhatsApp number, and we'll reply within 30 days. If you use Ronyxx at work, your employer can also remove you, which ends your access straight away.

Children

Ronyxx is a tool for businesses and their teams, and isn't meant for children.

Changes

If we change this policy, we'll update the date at the top and tell businesses using Ronyxx about important changes by email.

Contact

Questions about privacy: [email protected]