Odoo + WooCommerce documentation
Security and data
How the Odoo + WooCommerce connector handles your data and credentials in its current pre-release design.
Last updated
Pre-release documentation. This describes the current pre-release design. We will confirm hosting location, retention and contractual terms before launch.
How data moves
The connector has two parts: a hosted service that we operate, and a companion plugin in your WooCommerce shop. Order, product, customer and stock information passes through the hosted service on its way between WooCommerce and Odoo.
Credentials
- The connector reaches Odoo through Odoo’s standard API, using a dedicated user and API key. That user can be a limited, non-administrator user.
- Odoo credentials are stored encrypted.
- Your shop and the service sign every message to each other with a secret issued at pairing. Each message is time-limited and can be used only once. The secret is never shown or logged.
- Disconnecting your shop removes the pairing details from WordPress. To stop the service using a connection completely, revoke it in your connector account as well.
Permissions
Only WordPress administrators can pair or disconnect a shop. Shop managers can see the status.
For our wider approach, see Security and data handling.
Ask the product team — and please never include passwords, API keys or customer records.