Your Odoo does not move to the cloud: only this leaves it
B2Brouter Connector runs inside your Odoo, on Odoo.sh or on your own server. Your database stays there and is not copied anywhere. Only what you see below goes through FlexigoTech Cloud: what it is, why, how long we keep it and where.
Stays in your OdooYour business data
- Your data is stored in your Odoo. Your Odoo sends it to B2Brouter when you ask or when the connector syncs; we pass it on with your API key, which the FlexigoTech gateway keeps encrypted, and we do not keep its content. FlexigoTech Cloud reads nothing on its own.
- If your connection existed before this version, it stays direct: your API key stays in your Odoo and what you ask for goes to the platform without passing through FlexigoTech.
What goes through FlexigoTech CloudWhat, why and when
| What | Why | When |
|---|---|---|
| Your database details: its ID and address, the Odoo version, the FlexigoTech modules and their versions, whether it is a test copy, the company name and the email of the person who accepts, with the date, the version of the text they accepted and its fingerprint (SHA-256). It also sends a public key and proof that the request comes from your database. The database secret never leaves. | To recognise your database and serve it. | Once, when you connect. |
| The permit request. Your database only says who it is. | To know whether it has service. | Every 6 hours, when you connect, start a trial or link your account, when you click “Check now” and when a module needs it and the one it has is no longer valid. |
| The module's health in your database: counts and error codes. No record content is ever sent. | To spot failures and warn you. | When the module reports it. |
| What each button sends: the module, the plan and billing period you pick; the version of the terms and of the data processing agreement you accept, with the fingerprint of each; or the link code or recovery code you paste. You pay on Stripe's page, outside Odoo. | To start a trial, subscribe and link your account. | When you click it. |
| Your API key for each connection you set up (api.b2brouter.net and api-staging.b2brouter.net). | So the gateway can talk to the platform for you. | Once, when you set up the connection. |
| Every call to the platform. What the module shows you before you accept: “FlexigoTech Cloud keeps the API key of this B2Brouter connection encrypted and passes every call of this connection to the B2Brouter API (the invoices and credit notes you send with their PDF and attachments, contacts, bank accounts, the account settings and logo, the activation of each tax system, tax registers and ledgers, tax ID and Peppol checks, the invoices and orders you receive and the webhook registration), with the data each call brings back. Odoo keeps no copy of the key.” | So that B2Brouter does what you ask: B2Brouter receives it, not FlexigoTech. | When you ask or the connector syncs. |
As with any website, we see your server's IP address. Access logs keep the time, the source IP and port, the method, the HTTP version and the requested address (without parameters), the response code, the bytes received and sent, how long it took, and the version, cipher and server name of the secure connection. They keep no headers. They are deleted after 366 days.
FlexigoTech · flexigotech.com/en/datos/b2brouter_connector.html
What we keep, and for how long
- The gateway keeps your API key encrypted with AES-256-GCM while you have service. The encryption key sits in a separate file, outside both the database and the configuration.
- We keep nothing of what the calls carry. The gateway log only notes the database, the platform, the method, the result and how long it took, and it is deleted after 366 days.
- For security, we note each time your API key is saved, changed or deleted (never its value): the database, the platform, the date and the reason. These notes are not deleted automatically.
- Of your database, the gateway only keeps its latest permit: when it was issued, when it expires, the status of each module and the public key it signs with. It is deleted when it expires, after 48 hours.
- Each day an encrypted backup of the gateway is made, including your API key (already encrypted). Each backup is deleted within 16 days at most.
- Your account keeps only the latest health report for each module.
If you disconnect or your subscription ends
| You click “Disconnect” in Settings › FlexigoTech Cloud | Your database says it is disconnecting and stops sending anything, and the gateway deletes your API key at once (from the backups, within 16 days). This does not cancel your subscription: do that separately. |
| Your subscription or trial ends | The gateway deletes your API key after 30 days (from the backups, at most 16 days later). |
| You stop paying | The service stops, but the gateway keeps your API key: once you pay, everything comes back. |
| In your Odoo | Nothing is deleted. What you already have stays, and you can always view and export it. |
Where
- The gateway: Nuremberg, Germany.
- Your account, the service permit and the access logs: Nuremberg, Germany.
Your account and billing
- We keep your company name, tax or VAT number, country and email, your subscriptions with their invoices, and the databases you connect, with the details above, their Odoo language and the date of the last contact.
- Stripe keeps your card details; we never see them.
- In your account at app.flexigotech.com you can download your data or delete the account. What you delete stays, encrypted, in the backups for up to 92 days. Invoices are kept for 6 years, as the law requires.
Applies to Odoo 17, 18, 19 and 20. Checked on 5 November 2026 against FlexigoTech Cloud's code and configuration. More detail in the subscription terms and the privacy policy.
FlexigoTech · flexigotech.com/en/datos/b2brouter_connector.html