Privacy Policy — Product Manager

1. Controller

Controller for the app and related InSoft Online services is InSoft Online, Karlstraße 18, 72336 Balingen, Germany. Email: info@insoftonline.de. Phone: +49 151 16908778. Further company details are listed in the Impressum.

2. What the app does

Product Manager is a business tool for managing products, categories, barcodes and related point-of-sale data. It connects to your company’s Odoo / InSoft backend and can print labels or receipts on supported Sunmi devices.

The app is intended for business and professional use by adults, not for children or consumer entertainment.

3. Purposes and legal bases

We process data to authenticate users, connect to the backend you configure, sync and manage product data, print labels and receipts, check licence or activation status, store preferences on the device, provide support, and comply with applicable law.

Where the GDPR applies, legal bases typically include Art. 6 (1) (b) (contract — login, sync, licence checks and features you request), Art. 6 (1) (f) (legitimate interests — security, reliability and supporting business customers), Art. 6 (1) (a) (consent — optional permissions such as camera or storage where required), and Art. 6 (1) (c) (legal obligation where we must retain or disclose data).

You may withdraw consent for optional permissions in device settings. Withdrawal does not affect processing already carried out lawfully. Where the merchant processes business or staff data in the app, the merchant is usually the controller for that data; InSoft acts as processor under a data processing agreement where required (Art. 28 GDPR).

4. Categories of data

Account and authentication: email address, password (stored locally for session convenience and transmitted securely for login), access tokens, and customer or owner identifiers returned by login services.

Connection settings: local network IP address or server URL you configure to reach your Odoo / product API, plus related connection preferences.

Business and product data: product names, barcodes, prices, weights, taxes, categories, images and similar commercial data that you create, edit, search or print. This is typically your company’s business data, processed on your instructions and on systems you control or that host your Odoo environment.

Device and app settings: print style and label settings, and app preferences stored on the device (for example via local storage).

Camera and media (with permission): camera access for barcode / QR scanning, optional images you pick or capture for products, and storage access to read or write files needed for updates, exports or images as permitted by Android. We do not use the camera for continuous background recording.

Technical and support data: app version and basic device information needed for compatibility, plus error information you may see or send when reporting a problem.

We do not sell personal data, use third-party advertising SDKs in the app, track you across other apps for ads, or collect precise GPS location for marketing.

5. Where data is stored

On your device: authentication tokens, credentials you save, IP or server settings, and print preferences.

On your company systems: product and POS data are sent to the server or local Odoo endpoint you configure. That environment is typically operated by you or your IT provider.

InSoft Online services: login, licence and related account checks may communicate with InSoft Online services (for example hosts under insoftonline.de / support systems).

If you or your backend are located outside the European Economic Area (EEA), data may be processed in those locations as needed to provide the service. Where we transfer personal data from the EEA to a third country, we use appropriate safeguards required by the GDPR (such as adequacy decisions or standard contractual clauses), where applicable.

6. Recipients and third parties

Sunmi / printer services on the device may receive print commands and label data solely to print what you request. Standard Android / Google system components may process data as part of OS permissions and networking.

The app may open websites or connect to systems you configure (including your Odoo instance). Those services have their own privacy policies; we are not responsible for their practices.

We do not sell personal data to third parties.

7. Retention

Local tokens, saved login data and preferences remain until you log out, clear app data or uninstall the app. Licence and auth checks are kept as needed for the active subscription or support relationship.

Business product data on your servers is controlled by you or your Odoo administrator. Support correspondence is kept as long as needed to resolve the request, then deleted or archived per our policies.

8. Security

We take reasonable technical and organisational measures to protect data, including appropriate network connections for the configured environment (HTTPS for remote InSoft login endpoints where applicable), restricted access to account and support systems, and on-device storage of session tokens and preferences.

No method of transmission or storage is completely secure. Protect device access with a screen lock and authorised users only, and use strong account passwords.

9. Your rights

If you are in the EEA/UK (or another region with similar rights), you may have the right to access, rectify, erase, restrict or object to certain processing, request data portability where applicable, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority.

In Germany you may contact your local data protection authority (for Baden-Württemberg: the Landesbeauftragte für den Datenschutz Baden-Württemberg), or another competent authority of your habitual residence.

To exercise rights related to InSoft Online account data, email info@insoftonline.de. For product data stored only on your own Odoo or server, contact your company administrator.

10. Children

The app is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

11. Android permissions

Internet: login, licence checks and API sync with your server. Camera: barcode / QR scanning and related capture features. Storage (as applicable by Android version): images, files and updates you initiate. Install packages (if present): installing app updates you approve.

You can revoke optional permissions in Android Settings. Some features will stop working without the related permission.

12. Changes

We may update this privacy policy from time to time. The version date above will change when we do. Continued use of the app after an update means you acknowledge the revised policy. For material changes, we may provide additional notice to contracted customers where appropriate.

13. Contact

Privacy enquiries for Product Manager: info@insoftonline.de (subject line “Privacy – Product Manager”) · InSoft Online, Karlstraße 18, 72336 Balingen, Germany · Phone: +49 151 16908778.