Privacy Policy — Clover → Odoo
Last updated: November 2, 2026 · Version française
Publisher: Marchand M.C INC. (doing business as MC Paiement / Aura Paiements), 3 Place Ville Marie, Suite 400, Montréal, Québec, Canada. Contact: info@mcpaiement.com.
What the app does: Clover → Odoo reads a merchant's sales data from Clover through the Clover REST API and writes the corresponding accounting entries, products, sales orders and payments into the Odoo instance the merchant designates. The app is installed by the merchant from the Clover App Market and configured by the merchant from their Clover dashboard.
Data we read from Clover (read-only): merchant name, currency and time zone; inventory items, categories and tax rates; orders (line items, modifiers, discounts, amounts, employee name); payments and refunds (amount, tip, tender type, card brand, last four digits, authorization code); and, only when the merchant has recorded them in Clover and enabled the detailed mode, customer name, e-mail and phone. We never receive full card numbers (PANs), expiry dates or CVV codes.
Purpose: producing the merchant's accounting entries and sales documents in the merchant's own Odoo. Data is transmitted only to the Odoo instance the merchant configured. We do not use the data for any other purpose, do not sell it, and do not share it with third parties other than the hosting provider listed below.
Data we store: Clover OAuth tokens and the Odoo URL, database, login and API key supplied by the merchant (tokens and API keys are encrypted at rest); a mapping table of Clover item/order IDs to Odoo record IDs (needed so nothing is sent twice); sync options; and a technical log kept 60 days. Sales data is not retained after it has been written to Odoo, except for the IDs above. Webhook events are kept at most 15 days.
Hosting and security: servers located in Toronto, Canada (DigitalOcean). All traffic uses HTTPS. Access to the server is limited to MC Paiement staff with SSH keys.
Retention and deletion: uninstalling the app in Clover revokes our access token and stops all processing. On request to info@mcpaiement.com, all data belonging to a merchant is deleted within 30 days. We delete the data of merchants inactive for more than 12 months.
Your rights: merchants and the individuals whose data is processed may request access, correction or deletion by writing to info@mcpaiement.com. Québec's Act respecting the protection of personal information in the private sector (Law 25) and PIPEDA apply. Privacy officer: Mehdi Charrier, Executive Director.
Changes: we will post any change to this policy on this page and notify installed merchants by e-mail for material changes.