Privacy policy
Last update: 19 October 2026.
Who we are
Abstr.ax is a service of Abstractive BV, Asserenbosweg 4, 9310 Aalst, Belgium, company number BE 0652.625.304. Questions about privacy: privacy@abstr.ax.
Your company and Abstractive
Your company uses Abstr.ax to give its people access to its own Odoo through an AI assistant. For the data in that Odoo and for the data about you as a user, your company is the controller. Abstractive processes this data for your company, under the agreement between your company and Abstractive. For a support request and for the security of the service, Abstractive is the controller.
The data that Abstr.ax keeps
- Your account: your email address, your name, your language, the login provider (Microsoft or Google), the Google Workspace domain, your company, your role and the time of your last login.
- Your logins: the tokens of your connections and the refresh token of Microsoft or Google, encrypted. Abstr.ax never receives your password.
- The audit log: 1 line per call, with the time, your email address, the agent, the tool, the arguments of the call (at most 10 KB), the Odoo model, the record ids, the number of records, the duration and the result class. The arguments are what your assistant sent, for example a search term or the values of a change. The line does not hold the data that Odoo gives back.
- Temporary answers: a large answer or an export file, for 1 hour. Only you can read it.
- Recipes: the email address of the person who proposed or approved a recipe.
- Technical logs: errors and requests of the servers, without arguments, tokens or keys.
The tools give the data of the Odoo of your company to your assistant, for example contacts, invoices and orders, within the rights of the agent. Abstr.ax keeps no lasting copy of it.
Why Abstr.ax uses the data
- To log you in and to check at each call which agents you may use.
- To send your calls to the Odoo of your company and to give the answer to your assistant.
- To give your company an audit log of what each person did through Abstr.ax.
- To help you when you ask for support, and to keep the service secure.
Abstractive does not sell the data, does not use it for advertising and does not use it to train AI models. The legal basis is the agreement with your company, and the legitimate interest of your company and Abstractive in a secure service with an audit log.
Who receives the data
- Hetzner Online GmbH (Germany) hosts the servers and the database in Helsinki, Finland, and the encrypted backups, in the European Union.
- Microsoft and Google do your login. They receive the login request and confirm who you are. Their own privacy policies apply. Microsoft also hosts the email of abstr.ax, for example your support requests.
- Cloudflare manages the DNS of abstr.ax and hosts the website https://abstr.ax, without cookies or analytics. The website loads its fonts from Adobe Fonts. Your calls to Abstr.ax and your email to abstr.ax do not go through Cloudflare.
- Your AI assistant, for example ChatGPT, Claude or Microsoft Copilot, receives the answers of the tools. You or your company chose that assistant: the agreement with its provider applies to that data, and Abstractive has no control over it.
- The Odoo of your company receives your calls, where your company hosts it.
- People of Abstractive who operate the service see the data only when operations or support make it necessary.
Abstr.ax keeps the data in the European Union. Microsoft, Google and the provider of your assistant can process data outside the European Union, with the safeguards of their own agreements.
How long Abstr.ax keeps the data
| Data | Period |
|---|---|
| Account | While your company uses Abstr.ax; an admin can disable your account at any time |
| Logins | 30 days after the last use, and 90 days at most |
| Audit log | The current month and the 12 months before it |
| Temporary answers and export files | 1 hour |
| Steps of a login in the browser | 15 minutes |
| Backups | 30 days |
| Technical logs | Until the log files rotate, at most 50 MB per service |
When the agreement with your company ends, Abstractive deletes the data of your company.
Security
Abstr.ax encrypts the Odoo API keys and the login tokens in the database, uses HTTPS for every connection and checks the rights at each call. Read Security and privacy for the details.
Your rights
You can ask to see, correct or delete your data, to limit its use, to object to it, or to get a copy. Because your company is the controller of most data, ask your company first. You can also write to privacy@abstr.ax: Abstractive helps you or sends your request to your company. You can file a complaint with the Belgian Data Protection Authority (https://www.dataprotectionauthority.be).
Cookies
The documentation sets no cookies. The login pages set 1 cookie that is necessary for the login and that expires after 15 minutes. The admin interface sets 1 session cookie. Abstr.ax uses no tracking and no analytics.
Changes
Abstractive updates this policy when the service changes. The date at the top shows the last update.