Where your data lives

A buyer or an investor eventually asks the same thing: whose data is this, and what can the product see. The short version is that doo.mcp runs the agents. Your store, your Odoo records, and the files you choose to train stay yours.

One workspace cannot open another

Your account is its own tenant. Conversations, trained documents, usage, and settings belong to that workspace. Someone signed into another workspace cannot open yours. The API refuses the request. From the moment a call is authenticated, it runs inside one tenant.

Website chat proves itself with your widget key. MCP and REST clients use your workspace key. People in the dashboard are signed in. Odoo connection secrets and WhatsApp tokens are encrypted before they are written down, and decrypted only when a tool has to call your system.

The store and the staff agent are not the same login

Catalog, cart, and order tools run with the Odoo connection you set up for the store. The Odoo Agent is different: it acts as the employee who asked, and that person’s access rights and record rules apply. Password fields, API keys, mail servers, access rules, and security groups are blocked even if that user could open the form in Odoo.

For the shopper side of an Odoo store, see the AI chatbot for Odoo guide.

What is stored, and what is not

The platform holds your account, plan, and usage so billing and limits work. It holds the messages and tool results needed to run the chat and show its history. It holds the pages, text, and files you chose to train. When you start meeting notes, it holds the caption text.

• Customer card numbers stay on your store or your payment provider. Platform subscriptions are billed in Stripe.
• Meeting audio and video are not uploaded. Notetaker reads captions already on screen.
• There is no standing copy of your whole Odoo database.
• The chatbot learns only the material you select. It does not receive a login to the rest of the company.

The security page is the longer account of the same controls, including how a request is bound to a tenant and which models are refused first.

For how the website chatbot learns from your pages, see the free website chatbot guide.