Privacy Policy

About This Policy

This Privacy Policy describes how One Orbit ("we," "our," or "us") collects, uses, and protects information through the Orbit DVI mobile application ("the App"). By using the App, you agree to the practices described in this policy.

Orbit DVI is a professional Digital Vehicle Inspection tool designed for use by automotive repair shop technicians and service advisors. It is not a consumer application and is not intended for use by minors.

Information We Collect

The App collects information necessary to perform and document vehicle inspections:

• Account credentials — shop identifier, user name, and role, managed through Supabase authentication
• Vehicle information — VIN, year, make, model, engine, mileage, license plate (tag), and tire pressures entered or scanned during the inspection intake process
• Customer information — name, phone number, email address, and mailing address (street, city, state, ZIP) entered on the repair order intake screen
• Inspection findings — condition statuses, components, causes, and technician notes recorded during the inspection workflow
• Inspector identity and timing — the inspector selected at the start of an inspection and the time taken per section and overall, used for the shop's own internal efficiency and quality reporting
• Recommended-service decisions — whether recommended services were accepted or declined, recorded for the shop's records
• Photographs and video — finding photos, four exterior corner photos (the vehicle walkaround), and short engine-mount diagnostic video clips captured during the inspection to document vehicle conditions
• Repair order data — RO numbers and related service documentation scanned or entered during intake
• Device information — basic device and operating system information collected automatically by the Expo platform for crash reporting and performance monitoring

How We Use Your Information

Information collected through the App is used solely for the following purposes:

• To create, complete, and store vehicle inspection records for the shop
• To generate professional inspection reports delivered to customers
• To store completed inspection records, photos, and video in secure cloud storage that only the shop's authorized personnel can access
• To maintain inspection history accessible to authorized shop personnel
• To authenticate shop users and maintain secure sessions
• To improve app reliability and performance through crash and error reporting

We do not use your data for advertising. We do not sell your data to third parties. We do not use customer or vehicle data for any purpose outside of the inspection workflow described above.

How We Store Your Information

Your data is stored in the following locations:

• Supabase cloud database — inspection records, shop configuration, and user accounts are stored on Supabase's secure PostgreSQL infrastructure. Supabase stores data on servers located in the United States.
• Cloudflare R2 storage — completed inspection PDFs, photos, and walkaround video are uploaded to private Cloudflare R2 storage through the Orbit Relay Worker. Each shop's media is segregated by shop identifier and accessible only through authenticated, signed requests issued by the App.
• Device local storage — draft inspections are saved locally on the device using AsyncStorage to allow technicians to resume interrupted inspections. Draft data remains on the device until the inspection is submitted or discarded.

Photographs and Media

The App requests access to your device camera and photo library solely to capture inspection finding photos, four exterior corner photos (the vehicle walkaround), and short engine-mount diagnostic video. Photos and video are:

• Captured or selected only when a technician explicitly initiates a photo or video action during an inspection
• Stored temporarily on the device until inspection submission
• Embedded in the inspection PDF report and uploaded to private Cloudflare R2 storage
• Not accessed, transmitted, or used for any purpose outside the inspection record

Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Supabase — our database and authentication provider. Supabase processes data on our behalf under their terms of service and privacy policy.
• Cloudflare — our edge networking, Worker compute, and R2 object-storage provider. Cloudflare processes data on our behalf under their terms of service and privacy policy.
• Law enforcement — we may disclose information if required by law, court order, or governmental authority.

Data Retention

Inspection records stored in the Supabase database are retained for the life of the shop's account. Shop owners may request deletion of their data at any time by contacting us at the address below.

Inspection PDFs and photographs — including the four exterior corner photos that document the vehicle walkaround — are stored in Cloudflare R2 and retained without lifecycle expiry while the shop's account is active. Engine-mount diagnostic video stored in Cloudflare R2 is subject to a lifecycle policy that transitions it to infrequent-access storage and deletes it after a 15-day retention window.

Draft inspections stored locally on the device are retained until the inspection is submitted, discarded, or the app is uninstalled.

Your Rights

You have the right to:

• Request access to the data we hold about your shop
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data collection by discontinuing use of the App

To exercise any of these rights, contact us at cmoore@oneorbit.app.

Security

We take reasonable measures to protect the information collected through the App, including encrypted data transmission (TLS), authenticated access controls, row-level database security that prevents cross-tenant data access, and signed-request access controls at the storage layer that prevent one shop's authenticated session from reaching another shop's media. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Orbit DVI is a professional tool intended for use by adults in an automotive repair shop environment. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided information through the App, contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the App after any changes constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify active users.