Security and data handling
Our connectors are not yet released. This page describes their current pre-release design and will be confirmed — including hosting location, retention periods and contract terms — before launch.
Integrations handle orders, customers and financial records, so we explain exactly how data moves rather than relying on badges. Where something is not yet decided, we say so.
Odoo + WooCommerce connector
How data moves
The connector has two parts: a hosted service that we operate, and a companion plugin installed in your WooCommerce shop. Order, product, customer and stock information passes through the hosted service on its way between WooCommerce and Odoo, so that it can be checked, retried safely and recorded in the activity history.
Credentials and permissions
- The connector reaches Odoo through Odoo's standard API with a dedicated user and API key. That user can be a limited, non-administrator user, so the connector only has the access you give it.
- Odoo credentials are stored encrypted by the hosted service.
- Your shop and the hosted service sign every message to each other with a secret issued at pairing. Messages are time-limited and single-use, and the secret is never displayed or logged.
- Only WordPress administrators can connect or disconnect a shop. Disconnecting removes the pairing details from WordPress; you can also revoke a connection from your connector account.
- Pairing codes work once and expire after ten minutes.
Financial safety
- Invoices, payments and credit notes are off by default and require an approved finance configuration.
- The connector never moves money through a payment gateway.
- After an interrupted operation, it checks what actually happened before retrying, so it does not create duplicate invoices or payments.
Still to be confirmed before launch
- Where the hosted service runs and in which country data is processed.
- How long synchronised data and activity history are kept, and how you can request deletion.
- Our role under UK GDPR (we expect to act as a processor for your business data) and the data processing agreement we will offer.
- How and when our support staff can view records, and how that access is logged.
Pipedrive + QuickBooks connector
This connector is planned and its architecture has not been decided. We will publish the same level of detail before it is offered to anyone.
This website
- The site is served over HTTPS only, through Cloudflare, with security headers that restrict what the browser may load.
- It uses no analytics, advertising or tracking scripts, and sets no cookies of its own. See our cookie notice.
- Messages sent through our forms are stored on a server we operate, readable only by our team. See our privacy notice.
Reporting a security concern
If you believe you have found a vulnerability in Artegra software or this website, please tell us through the contact form, choosing Security or data protection as the topic. Please give us a reasonable opportunity to fix the issue before disclosing it, and do not access or alter other people's data while testing. Our machine-readable contact details are published at/.well-known/security.txt.