Privacy Policy
About This Policy
This Privacy Policy describes how Conyers Auto Tune, Inc. ("we," "our," or "us") collects, uses, and protects information through the CATos DVI mobile application ("the App"). By using the App, you agree to the practices described in this policy.
CATos DVI is a professional Digital Vehicle Inspection tool designed for use by automotive repair shop technicians and service advisors. It is not a consumer application and is not intended for use by minors.
Information We Collect
The App collects information necessary to perform and document vehicle inspections:
- Account credentials — shop identifier, user name, and role, managed through Supabase authentication
- Vehicle information — VIN, year, make, model, engine, and mileage entered or scanned during the inspection intake process
- Customer information — name, phone number, and address entered on the repair order intake screen
- Inspection findings — condition statuses, components, causes, and technician notes recorded during the inspection workflow
- Photographs — images captured during the inspection to document vehicle conditions
- Repair order data — RO numbers and related service documentation scanned or entered during intake
- Device information — basic device and operating system information collected automatically by the Expo platform for crash reporting and performance monitoring
How We Use Your Information
Information collected through the App is used solely for the following purposes:
- To create, complete, and store vehicle inspection records for the shop
- To generate professional inspection reports delivered to customers
- To upload completed inspection records and photos to the shop's designated Google Drive folder
- To maintain inspection history accessible to authorized shop personnel
- To authenticate shop users and maintain secure sessions
- To improve app reliability and performance through crash and error reporting
We do not use your data for advertising. We do not sell your data to third parties. We do not use customer or vehicle data for any purpose outside of the inspection workflow described above.
How We Store Your Information
Your data is stored in the following locations:
- Supabase cloud database — inspection records, shop configuration, and user accounts are stored on Supabase's secure PostgreSQL infrastructure. Supabase stores data on servers located in the United States.
- Google Drive — completed inspections and associated photos are uploaded to the shop's Google Drive account via a secure relay. The shop owner controls access to that Drive folder.
- Device local storage — draft inspections are saved locally on the device using AsyncStorage to allow technicians to resume interrupted inspections. Draft data remains on the device until the inspection is submitted or discarded.
Row-level security is enforced at the database layer. No shop can access another shop's inspection data. All data access requires authenticated credentials.
Photographs and Media
The App requests access to your device camera and photo library solely to capture and attach inspection photos to specific findings. Photos are:
- Captured or selected only when a technician explicitly initiates a photo action during an inspection
- Stored temporarily on the device until inspection submission
- Embedded in the inspection PDF report and uploaded to the shop's Google Drive
- Not accessed, transmitted, or used for any purpose outside the inspection record
Data Sharing
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
- Supabase — our database and authentication provider. Supabase processes data on our behalf under their terms of service and privacy policy.
- Google Drive — inspection records are uploaded to the shop's own Google Drive account. Google processes this data under their terms of service.
- Law enforcement — we may disclose information if required by law, court order, or governmental authority.
Data Retention
Inspection records stored in the Supabase database are retained for the life of the shop's account. Shop owners may request deletion of their data at any time by contacting us at the address below.
Draft inspections stored locally on the device are retained until the inspection is submitted, discarded, or the app is uninstalled.
Your Rights
You have the right to:
- Request access to the data we hold about your shop
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent for data collection by discontinuing use of the App
To exercise any of these rights, contact us at cmoore@oneorbit.app.
Security
We take reasonable measures to protect the information collected through the App, including encrypted data transmission (TLS), authenticated access controls, and row-level database security that prevents cross-tenant data access. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
CATos DVI is a professional tool intended for use by adults in an automotive repair shop environment. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided information through the App, contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the App after any changes constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify active users.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Conyers Auto Tune, Inc.
Conyers, Georgia
United States