ORVEXIA Roll-Off Pro — Privacy Policy

Operator: ORVEXIA Technologies LLC, Sugar Land, Texas · Product: ORVEXIA Roll-Off Pro (https://orvexiatech.com/rolloff) · Product status: In development — not yet generally available

Product status: In development — not yet generally available. This document describes how the product is designed to work and the commitments ORVEXIA makes for it. It will be updated before launch if the final product differs.

1. Who we are and what this policy covers

This Privacy Policy explains how ORVEXIA Technologies LLC ("ORVEXIA", "we", "us") collects, uses, shares and protects personal information when you use ORVEXIA Roll-Off Pro (the "Product"), including its websites, apps and related support. ORVEXIA is the business responsible for (the "controller" of) the personal information described here, except where we process data on behalf of a business customer, as explained under “Business customers”.

2. Information we collect

Depending on how you use the Product, we collect the following categories of personal information:

• Account credentials and profile information (login identifiers, authentication method, preferences)
• Precise location (GPS) while the app is in use for routes or navigation
• Route, stop, mileage, timing and service records created during work
• Vehicle inspection, fuel, disposal-ticket and incident records
• Photos, scans and documents you capture or upload
• Usage and device information (app version, device type, operating system, IP address, pages or features used, crash and diagnostic logs)
• Messages you send to support and the content of forms you submit

Sources. We collect this information directly from you, automatically from your device when you use the Product, and from the services you choose to connect (for example a sign-in provider or a payment processor). We do not buy personal information from data brokers.

Sensitive information. This Product may process precise geolocation. We use it only to provide the features you or your employer turned on, and we never sell it.

3. How we use information

• Provide, operate and maintain the Product and the features you request
• Create and secure your account, authenticate you and prevent fraud and abuse
• Respond to your requests and provide support
• Send service messages (security alerts, receipts, changes to terms). Marketing emails are sent only if you opt in, and every one includes an unsubscribe link
• Understand usage in aggregate to fix errors and improve the Product
• Comply with law, enforce our terms and protect the rights and safety of users and the public

We do not use personal information for targeted advertising, and we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

4. Location, microphone, camera and recordings

• Location is collected only after you grant permission in your device settings, and only while the related feature is in use. You can withdraw permission at any time; some features will stop working.
• Microphone and camera are used only when you start a voice, photo or scan feature.
• If your employer provides the Product, your employer decides which location and work records are collected and who can see them. See the Driver Data & Location Notice.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only:

• With service providers that process it on our behalf under contracts that limit its use (listed below)
• With the business customer (for example your employer or organization) that provides your account
• When required by law, subpoena or court order, or to protect rights, safety and security; we review each request and notify the affected user when the law allows
• In a merger, acquisition or sale of assets, subject to this policy
• With your consent or at your direction

Service providers used by this Product:

An up-to-date list is kept at https://orvexiatech.com/trust. We will update this list before adding a provider that receives personal information.

6. Cookies, local storage and Do Not Track

We use only the cookies and local storage needed to run the Product, remember your preferences and keep it secure, plus privacy-respecting analytics where stated. Details are in the Cookie & Tracking Technologies Policy. We honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing. Browsers send "Do Not Track" signals inconsistently; because we do not track you across third-party sites, we treat them the same as GPC.

7. Business customers

When an organization (for example an employer, fleet operator, agency or property manager) provides accounts to its people, ORVEXIA processes that data on the organization's instructions as its service provider/processor. The organization's own privacy notice applies, and requests about that data should go to the organization first; we will help it respond.

8. How long we keep information

We keep personal information only as long as needed for the purposes above: account data while your account is active; billing records for as long as tax and accounting laws require (generally up to seven years); support messages for up to two years; security logs for up to one year. When you delete your account, we delete or de-identify your personal information within 30 days, except what the law requires us to keep. See the Data Retention & Deletion Policy.

9. How we protect information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encryption in transit (TLS), encryption at rest where stated, access controls based on least privilege, multi-factor authentication for administrative access, and logging. No method of transmission or storage is completely secure; if a breach affects your personal information, we will notify you without unreasonable delay and as required by law (in Texas, no later than 60 days after we determine a breach occurred), and we will notify the Texas Attorney General within 30 days when 250 or more Texas residents are affected.

10. Your rights and choices

Wherever you live, you can ask us to:

• Confirm whether we process your personal information and give you a copy in a portable format
• Correct inaccurate information
• Delete your personal information
• Opt out of any sale, sharing for targeted advertising or profiling (we do not do these, but you may still submit the request)
• Withdraw consent you gave (for example to marketing emails or location access)
• Limit the use of sensitive personal information

How to submit a request: use the privacy request form at https://orvexiatech.com/privacy-request, email privacy@orvexiatech.com, or use the account settings in the Product where available. We will confirm receipt within 10 business days and answer within 45 days (we may extend once by another 45 days and will tell you why). We verify requests by matching information we already hold; you may use an authorized agent with your signed permission. We will not discriminate against you for exercising your rights.

Appeals: if we decline your request, you can appeal by replying to our decision or writing to privacy@orvexiatech.com with the subject "Privacy appeal". We will answer within 45 days. If you are not satisfied, you may contact your state Attorney General (in Texas: https://www.texasattorneygeneral.gov/consumer-protection).

11. State-specific notices

Texas. Under the Texas Data Privacy and Security Act, Texas residents have the rights described under “Your rights and choices”. We do not sell personal data, including sensitive personal data, and we do not process personal data for targeted advertising.

California. In the last 12 months we collected the categories listed under “Information we collect” (identifiers; commercial information where you made purchases; internet or other electronic network activity; geolocation where stated; audio or visual information where you use voice, photo or video features; and inferences only about your use of the Product) from the sources and for the purposes described above. We have not sold or shared personal information, and we do not have actual knowledge of selling or sharing the data of consumers under 16. California residents have the right to know, delete, correct, opt out of sale/sharing and limit the use of sensitive personal information. Under California's "Shine the Light" law, we do not disclose personal information to third parties for their own direct marketing.

Other states. Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia and other states with comprehensive privacy laws have the rights described under “Your rights and choices”, which we honor for everyone.

12. Users in the European Economic Area, United Kingdom and Switzerland

If the GDPR or UK GDPR applies, our legal bases are: performance of a contract (to provide the Product), legitimate interests (security, fraud prevention, improving the Product), consent (optional cookies, marketing, location and microphone access), and legal obligation. You also have the rights to object, to restrict processing and to lodge a complaint with your local data protection authority. Personal information is processed in the United States; where required, we rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework of our providers.

13. Children

The Product is not directed to children under 13, and you must be at least 13 to use it. We do not knowingly collect personal information from children under 13. If you believe a child gave us personal information, contact privacy@orvexiatech.com and we will delete it.

14. Service providers and your choices on sale of data

We use carefully selected service providers (for example hosting, database, email and payment providers) that process personal information only on our instructions and under written contracts. The current list, by product, is published in the ORVEXIA Service Providers List at https://orvexiatech.com/subprocessors.html. We do not sell personal information, we do not sell sensitive or biometric personal information, and we do not share personal information for cross-context behavioral advertising. If that ever changes, we will update this policy first, obtain any consent the law requires and give you a way to opt out.

15. App store age verification (Texas)

If you download the Product from an app store, the app store may verify your age category and, for users under 18, obtain a parent's or guardian's consent, as required by the Texas App Store Accountability Act (Texas Business and Commerce Code, Chapter 121). When an app store shares an age category or consent status with us, we use it only to verify your age category and any required parental consent, to comply with the law and to apply age-appropriate settings. We do not use it for advertising, we do not sell it and we do not share it except as the law requires.

16. Changes to this policy

We will post any change on this page with a new "Last updated" date. If a change is material, we will notify you in the Product or by email before it takes effect, and where the law requires it we will ask for your consent.

17. Contact

ORVEXIA Technologies LLC

Mailing address: 12100 S Highway 6, Apt 4205, Sugar Land, TX 77498, United States

Email: privacy@orvexiatech.com

Website: https://orvexiatech.com