Privacy Policy
Last updated: 6 November 2026
This policy explains what personal data Odaura collects through odaura.in and cloud.odaura.in (together, "our sites"), why we collect it, who we share it with, and the choices you have.
Who we are. Odaura ("Odaura", "we", "us") is based near Government Cyberpark, Kozhikode (Calicut), Kerala, India. For anything in this policy, write to info@odaura.in.
Grievance Officer. Write to our Grievance Officer at info@odaura.in. We acknowledge complaints within 7 days and aim to resolve them within 30 days.
1. What we collect
Information you give us
- Contact form: name, email, company, phone and your message.
- Product updates sign-up: email, and optionally your name and company.
- Buying a plan on cloud.odaura.in: your name, email and password, phone number, company name and address, tax/VAT number, workspace name, and branding choices (logo and colours).
- Payments: handled by Razorpay. We receive the payment status and reference, never your full card or bank details.
Information collected automatically
- Analytics: pages viewed, links clicked, referring site, device and browser type, approximate location from your IP address, and, on the shop, which plan you started buying and whether you completed the purchase. This is collected by Google Analytics through Google Tag Manager.
- Visitor identification (RB2B): when you visit our sites, RB2B may match your browser to a professional profile. A match can tell us your name, job title, company, LinkedIn profile URL and business email. We use this only to understand which businesses are interested in Odaura and to contact them about our services. Matching is designed mainly for visitors in the United States. See section 5 to opt out.
- Cookies: see section 6.
Data inside your workspace
The business data you and your staff put into your Odaura workspace (customers, invoices, employees, stock and similar records) belongs to you. We process it only to provide the service, under your instructions, as your processor. We do not use it for marketing or analytics.
2. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Answer your enquiry | Contact form | Your consent, given when you submit the form |
| Create and run your workspace, bill you, and send service emails | Account, company and payment data | To perform our contract with you |
| Improve our sites and measure marketing | Analytics data | Your consent, or our legitimate interest where the law allows it |
| Find and contact businesses visiting our sites | RB2B data | Our legitimate interest in business-to-business marketing. You can object at any time (section 5) |
| Meet tax, accounting and legal duties | Billing records | Legal obligation |
We do not sell personal data.
3. Who we share it with
We use these service providers, and only for the purposes above:
- Hetzner Online GmbH (Nuremberg, Germany): hosts our servers and databases.
- Razorpay (India): processes payments.
- Zoho (India): sends our emails.
- Google (Analytics and Tag Manager): measures how our sites are used.
- RB2B (United States): identifies business visitors.
- Abacus.AI (United States): sends some notification emails.
- WhatsApp (Meta): if you message us from the WhatsApp button, that conversation is handled by WhatsApp under its own terms.
- Telegram: delivers internal alerts to our team when you submit the contact form.
We may also disclose data when the law requires it, or to protect our rights or our users' safety.
4. International transfers and retention
Some of these providers process data outside India, including in Germany and the United States. Where the law requires it, we rely on that provider's contractual safeguards.
We keep:
- Enquiries: for up to 24 months.
- Account and billing records: for as long as your subscription is active, plus the period tax law requires (currently 8 years in India).
- Workspace data: for 30 days after your subscription ends, so you can export it, then deleted.
- Analytics data: for up to 14 months.
5. Your rights
Depending on where you live, you can ask to:
- access, correct or delete your personal data
- withdraw your consent
- object to processing, including direct marketing
- move your data elsewhere (data portability)
- name someone to exercise these rights for you
Write to info@odaura.in. We may need to confirm your identity first.
To opt out of RB2B identification, use RB2B's opt-out page at app.retention.com/optout, or email us and we will delete any profile we received about you.
You can also complain to your data protection authority. In India that is the Data Protection Board of India.
6. Cookies
| Cookie | Set by | Purpose | How long it lasts |
|---|---|---|---|
session_id, frontend_lang | cloud.odaura.in | Keep you signed in and remember your language | Session to 1 year |
_ga, _ga_* | Google Analytics | Count visits and tell visitors apart | Up to 2 years |
| RB2B identifiers | RB2B | Visitor identification | See RB2B's privacy policy |
You can block or delete cookies in your browser settings. If you block the cookies on cloud.odaura.in, you will not be able to sign in.
7. Security
- All traffic to our sites is encrypted with HTTPS.
- Each customer workspace runs in its own database.
- Access to our systems is limited to staff who need it.
- No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
8. Children
Our services are for businesses. We do not knowingly collect data from anyone under 18.
9. Changes
When we change this policy we will update the date at the top. If a change is significant, we will also email customers before it takes effect.