About this policy
Last updated: 5 October 2026
Antelao collects only the personal data it needs to run Antelao Odoo Hosting Manager and never sells it.
Who is responsible
The controller of your personal data is Go For Cloud BV, acting under the commercial name Antelao, Kortestraat 1, 3520 Zonhoven, Belgium, enterprise number 0715.445.472. For privacy questions, email privacy@antelao.io.
Antelao Odoo Hosting Manager runs on your own infrastructure. We do not host or access the data you manage with it, including data of your own customers. The license check and the installation report described below carry none of that data: nothing from your databases, file stores or logs, and never the names or network addresses of the people who accepted the license agreement on your servers.
How we use your data
What we collect and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Name, email, company name, VAT number | Create and manage your account | Contract |
| Subscription and order details | Deliver the plan you bought, handle renewals | Contract |
| Order origin, when you order or register a license on our website or in your customer portal, or accept or pay a quotation there: the network address your order came from, the country that address belongs to, and the page or channel you ordered from | Know where an order was placed, and prevent fraud and misuse of licenses | Legitimate interest (protecting our licenses and preventing fraud) |
| License agreement acceptance when you buy: the version you accepted, the date and time, the purchase it was given for, the buyer when signed in, and the network address and browser it was given from | Keep evidence of the license agreement you accepted | Contract, legitimate interest (being able to prove the agreement) |
| License check data, sent by each installation when it is activated and about every hour after that: the license key, a random installation identifier, a hardware identifier derived from the server, the product version, the number of running Odoo instances and console accounts, the host names the instances are served on, the server's clock, the network address the check arrives from and the country that address belongs to, and the version and acceptance time of the license agreement accepted on that installation | Activate and check the license, detect use beyond the license | Contract, legitimate interest (protecting our software against unlicensed use) |
| Installation report, sent about once a day by an installation that has no license, or whose license is no longer valid: a random installation identifier, a hardware identifier derived from the server, the product version, the number of running Odoo instances and console accounts, the host names the instances are served on, the server's clock, the network address the report arrives from and the country that address belongs to, and the version and acceptance time of the license agreement accepted on that installation. It carries no license key and no name or email address | Know how many installations run without a license and how they are used, to plan the product and our offers. The report never limits or switches off anything in the software | Legitimate interest (understanding how our software is used) |
| Support emails and messages | Answer your questions | Contract, legitimate interest |
| Website analytics (Google Analytics) and cookies | Understand how the website is used | Consent |
| Accounting records | Meet Belgian tax and accounting duties | Legal obligation |
We do not receive or store your card or bank details. Paddle collects those when you pay.
We determine the country of a network address ourselves, with a location database on our own license server. We do not use the order origin, the license check data or the installation report for marketing, and we never use an installation report to identify, contact or take action against anyone.
An administrator can stop the installation report by switching off the scheduled license check in the console. An installation that cannot reach our license server simply sends nothing.
Paddle
Paddle.com is our reseller and Merchant of Record. Paddle processes your payment and billing data as an independent controller under its own privacy policy. We receive from Paddle what we need to deliver your subscription, such as your name, email, country, plan and payment status. Paddle does not give us your network address: the order origin described above is recorded by our own website when you start the order.
Who else sees your data
We use a small number of service providers who process data on our behalf, under a data processing agreement:
- Hosting of the website and license server: Microsoft Azure, Sweden Central region (EU)
- Email and office tools: Microsoft 365
- Website analytics: Google Analytics, provided by Google Ireland Limited, only after you accept analytics cookies
We only share data with authorities when the law requires it.
Transfers outside the EU
We try to keep data inside the EU. Google may process analytics data in the United States under the EU-US Data Privacy Framework. For any other transfer outside the European Economic Area, we rely on an adequacy decision or the EU Standard Contractual Clauses.
How long we keep it
- Account data: as long as your account is active, then deleted within 90 days
- Order origin: as long as the license exists, then deleted
- License check data: as long as the license exists, then deleted
- Installation reports: 90 days after an installation last reported, then deleted; we keep only monthly totals per product, which identify no installation
- License agreement acceptances: as long as the license exists, and afterwards for as long as a claim under the agreement can still be brought
- Support messages: up to 2 years after the last contact
- Google Analytics data: 14 months
- Accounting records: as long as Belgian tax and accounting law requires
Security
We protect data with encryption in transit, access control and regular backups. If a data breach puts your rights at risk, we inform you and the authority as the GDPR requires.
Your rights and choices
Your rights
You can ask us for access to your data, correction, deletion, restriction or a copy in a portable format. You can object to processing based on legitimate interest and withdraw consent at any time. Email privacy@antelao.io and we reply within one month.
You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.
Cookies
We use strictly necessary cookies to run the website and product. Other cookies, such as analytics, are only placed after you agree through the cookie banner. You can change your choice at any time, and our cookie policy lists every cookie we use.
Changes
We may update this policy. The date at the top shows the latest version, and we announce important changes by email.