Privacy & Data Sovereignty Policy

1. Fundamental Architectural Commitment: Zero PII Ingestion

Maketra operates on a strict Zero Data Ingestion Architecture. Unlike traditional SaaS middleware vendors, Maketra does not host multi-tenant cloud relays that intercept, parse, or store your transactional data.

When you install and execute Maketra modules on your Odoo instance (whether on Odoo.sh, self-hosted Linux servers, AWS, GCP, or Azure), all communications with external channels (Shopify, Amazon, TikTok Shop, AliExpress, DHL, FedEx) occur directly between your instance and the channel's official API endpoints. Maketra servers never receive, route, or inspect your orders, customer names, addresses, phone numbers, or credit card records.

2. Data We Collect on maketra.online

When you interact with our official marketing and licensing website (maketra.online), we collect only the minimal information voluntarily provided by you:

• Enterprise Inquiries: Name, work email address, company name, telephone number, and message content submitted through our consultation forms.
• Technical Logs: Standard HTTP request logs (IP address, user-agent, timestamp) maintained strictly for denial-of-service protection and operational security for a maximum retention period of 30 days.

We do not use invasive third-party cross-site advertising trackers or sell your contact information to data brokers under any circumstances.

3. Cryptographic Transmission & Peer-to-Peer Security

All data synchronizations executed by Maketra modules are protected by industry-standard cryptography:

• Transport Security: All API requests are enforced over TLS 1.3 with forward secrecy.
• Webhook Integrity: Inbound webhooks are verified against official secret keys using cryptographic HMAC-SHA256 signatures before payload evaluation.
• Local Credential Storage: API keys, OAuth access tokens, and webhook secrets are stored exclusively inside your own Odoo database and never transmitted to Maketra.

4. European GDPR & CCPA Compliance

Under Regulation (EU) 2016/679 (General Data Protection Regulation) and the California Consumer Privacy Act (CCPA), you are the sole Data Controller of your customer records. Because Maketra does not process or retain your operational data, your compliance obligations (right to erasure, data portability, audit logging) remain entirely under your sovereign control within your own ERP environment.

5. Data Retention & Erasure

Inquiry information submitted to our advisory desk is retained only as long as necessary to fulfill commercial and technical communications. You may request the immediate deletion of your inquiry records at any time by contacting our privacy officer.

6. Contact Information

For questions, audit requests, or data privacy inquiries, please contact: