Scope
This Privacy Policy explains how OVR Industries LLC ("OVRI," "we," "us," or "our") handles information through www.ovrindustries.com, the OVRI customer portal, and related communications. OVRI provides business-to-business technical consulting, engineering, manufacturing support, operational improvement, technology integration, and related production services. This policy applies to website visitors, customer contacts, authorized portal users, and people who communicate with us about a project or business relationship.
Information we collect
Information you provide
Depending on how you use OVRI services, you may provide:
- Business and contact information, including company name, contact name, work email address, and phone number.
- Quote request and project information, including part or project names, quantities, materials, thicknesses, finishes, required dates, notes, drawings, specifications, and attachments.
- Order and operational information, such as purchase-order and part numbers, revisions, quote references, quantities, project requirements, order dates, shipping information, and payment or fulfillment status.
- Account profile information and the company memberships or customer roles OVRI assigns to authorize portal access.
- Messages, support requests, and other information you choose to send to OVRI.
Files and file records
Public quote request submissions may include drawings or other project attachments. The portal may also display customer-visible file names, categories, revisions, descriptions, and related project records. When private file delivery is enabled for a customer, files may be stored in private Cloudflare R2 object storage and delivered through the authenticated OVRI portal. OVRI may keep separate internal file and operational records that are not displayed to customer users.
Authentication and security information
OVRI uses Supabase Auth to manage portal identities, email/password authentication, sessions, password recovery, invitations, and time-based one-time password (TOTP) multi-factor authentication. If optional Google sign-in is enabled and you choose it, OVRI receives the account information Supabase and Google provide for sign-in, such as an account identifier, name, and email address. Signing in never creates company or administrative access by itself.
Technical information
Our hosting, authentication, email, and security providers may generate routine technical records such as IP address, browser or device information, request and login timestamps, session and security events, error information, and service logs. The portal uses cookies or similar browser storage that are necessary to maintain authenticated sessions and security.
How we use information
OVRI uses information to:
- Review quote requests, communicate about project requirements, prepare quotations, and provide fabrication services.
- Create and administer customer accounts, company workspaces, memberships, orders, files, and support requests.
- Send invitations, password-recovery messages, quote request confirmations, and other transactional communications.
- Authenticate users, require appropriate security checks, prevent unauthorized access, and investigate service issues.
- Maintain business, operational, security, and audit records and improve the reliability of OVRI services.
- Comply with applicable legal obligations and protect OVRI, its customers, and its services.
OVRI does not use an email domain or authentication provider as proof that a person is authorized for a customer company.
Security
OVRI uses administrative and technical safeguards intended to protect information, including authenticated access, company-based authorization, multi-factor authentication for privileged access, and restricted delivery of customer files where available. No internet service, transmission method, or storage system can be guaranteed to be completely secure. Users should protect their credentials and promptly tell OVRI about suspected unauthorized access.
Data retention
OVRI retains information for as long as reasonably needed for the customer relationship, quotation and order activity, operational continuity, security and audit purposes, dispute prevention, and applicable business or legal obligations. The appropriate period depends on the type of record and why it is maintained. Closing or disabling an account may not require deletion of quote requests, orders, audit records, or other business records that OVRI reasonably needs to retain.
Your information requests
You may ask OVRI to review or correct your account information or to consider a request concerning information associated with you. Submit requests through your authenticated customer account or use the contact method provided in your applicable customer agreement. We may need to verify the request and may retain information when reasonably necessary for business records, security, legal obligations, or the rights of others.
Children’s privacy
OVRI's website and portal are intended for business users and are not directed to children. We do not knowingly seek personal information from children through these services. If you believe a child has provided information to OVRI, use the contact method provided in your applicable customer agreement so we can review the situation.
Changes to this policy
OVRI may update this Privacy Policy as its services or practices change. We will post the revised policy on this page and update the date above. Material changes may also be communicated through the website, portal, or another reasonable channel.