Privacy Policy

Operated by Orto Industries, LLC

1. Introduction

This Privacy Policy explains how Orto Industries, LLC (“Orto,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Orto mobile application and the website at https://www.orto.mobi (collectively, the “Service”). By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

This Policy covers our practices for information about you as a user of the Service. It does not govern the Vehicle Data we license from third parties and display in reports, which relates to vehicles (identified by VIN or plate) rather than to you; that data is addressed in our Terms of Service and Data Accuracy & Report Disclaimer. Vehicle Data contained within reports generally concerns vehicles rather than identifiable individuals and is licensed from independent third-party providers; this Privacy Policy governs only the personal information Orto collects about users of the Service.

2. Information We Collect

2.1 Information you provide.

• Account information: name, email address, and password or third-party sign-in identifier (for example, Sign in with Apple or Google), and, if you sign in with Google, your profile photo.
• Purchase information: records of the subscriptions or purchases you make. All payments are processed entirely by the Apple App Store or Google Play; Orto does not collect or store your payment card number or full financial account details.
• Query information: VINs, license plates, and vehicles you search or save, retained so you can access your previous reports, recent searches, and saved vehicles.
• Communications: information you provide when you contact support or submit a data-correction request.

2.2 Information collected automatically.

• Device and usage data: device type, operating system, app version, IP address (and the approximate, city-level location our analytics may infer from it), identifiers, and interactions with the Service.
• Cookies and similar technologies (website): described in Section 2.5 below.
• Camera and license-plate images: if you use the license-plate scanning feature, the app accesses your device camera to capture an image of a license plate. To read the characters on the plate, the image is sent to a third-party cloud provider (currently Google’s Gemini service) for optical character recognition (“OCR”); this processing takes place on infrastructure located in the United States. If you save the vehicle, the image is stored with your vehicle record on our cloud infrastructure so you can view it later, until you delete it. The OCR is used only to read the plate characters, not to create vehicle data.
• Location (optional): if you opt in, the app records the location where you took a photo or added a vehicle so you can view your saved vehicles on a map later. This feature is off by default, is used only to provide the map feature, and can be turned off at any time in your device or app settings.

2.3 Information from third parties.

• App stores and sign-in providers: basic account and purchase confirmation data.
• Analytics and error-reporting providers: usage analytics (Google Analytics) and crash and error reporting (Bugsnag).

2.4 Sensitive personal information. The only category of sensitive personal information (as defined by the CCPA/CPRA) that Orto may collect is precise geolocation, and only if you opt in to the location feature described above, and solely to provide that feature. Orto does not use or disclose your precise geolocation, or your account login credentials, to infer characteristics about you or for any purpose that would require offering you an additional right to limit its use beyond your ability to turn the feature off. Orto does not otherwise seek to collect sensitive personal information.

2.5 Cookies, similar technologies, and Do Not Track. On our website, we and our analytics provider use cookies and similar technologies to keep you signed in, remember preferences, and understand how the site is used. Most browsers let you refuse or delete cookies through their settings; some site features may not work without them. We do not use cookies for cross-context behavioral advertising. Because there is no common industry standard for “Do Not Track” browser signals, the Service does not respond to Do Not Track signals; however, we honor the Global Privacy Control as described in Section 5.1.

3. How We Use Information

We use information to: (a) provide, operate, and maintain the Service and generate reports you request; (b) create and manage your account and process purchases, subscriptions, and renewals; (c) provide customer support and respond to correction requests; (d) secure the Service and detect, prevent, and address fraud, abuse, scraping, and misuse; (e) analyze and improve the Service; (f) communicate with you about your account, transactions, and, where permitted, marketing (which you can opt out of); and (g) comply with legal obligations and enforce our Terms.

We may use de-identified or aggregated information, which does not identify you, for any lawful purpose.

Artificial intelligence. Orto does not use your personal information to train generative artificial intelligence models. Images you submit for license-plate OCR are sent to Google solely to convert the image into text; Orto has configured its use of the Google Gemini service so that submitted images are not used by Google to train or improve its models.

4. How We Disclose Information

We do not sell your personal information for monetary or other valuable consideration, and we do not sell or rent email lists. We may disclose information as follows:

• Service providers / processors: vendors that host our infrastructure, provide analytics, and support the Service, under contracts limiting their use of the information. Our key providers include Vercel (website hosting) and Supabase (backend and storage, on infrastructure located in the United States), Google (license-plate OCR via its Gemini service, and Google sign-in), Google Analytics (usage analytics), and Bugsnag (crash and error reporting). Payments are handled by the Apple App Store and Google Play.
• App stores and sign-in providers: as necessary to process purchases and authenticate you.
• Your team: if you use a team or organization account, information saved within that organization is visible to the other members of that organization.
• Shared reports: when you create a share link for a report, anyone who has that link can view the shared report until you revoke it.
• Legal and safety: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of Orto, our users, or others.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, subject to this Privacy Policy or a successor policy.
• With your direction or consent.

No “sharing” for cross-context behavioral advertising. Orto does not share your personal information for cross-context behavioral advertising, and Orto does not use third-party advertising trackers.

5. Your Privacy Rights

5.1 California residents (CCPA/CPRA). If you are a California resident, you have the right to: (a) know the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of recipients; (b) delete personal information we hold about you, subject to exceptions; (c) correct inaccurate personal information; (d) opt out of any “sale” or “sharing” of personal information; (e) limit the use and disclosure of sensitive personal information; and (f) be free from discrimination for exercising your rights. To exercise these rights, contact us at mail@orto.mobi or https://www.orto.mobi/privacy. We will verify your request and respond within the timeframes required by law. You may use an authorized agent. We honor recognized opt-out preference signals (such as the Global Privacy Control) where required.

5.2 Other U.S. states. If you are a resident of another U.S. state with a comprehensive consumer privacy law (for example, Virginia, Colorado, Connecticut, Texas, Oregon, or others), you may have similar rights, which can include the right to access, delete, correct, and obtain a portable copy of your personal information, to opt out of targeted advertising or the sale of personal information, and to appeal a denied request. To exercise any of these rights, contact us at mail@orto.mobi. We will respond as required by the law applicable to you.

5.3 International users. The Service is intended for users in the United States, and your information is primarily processed and stored in the United States. Some of our service providers (such as the app stores and Google) operate globally, and where they do, your information may be processed in other countries, which may have data-protection laws different from those where you live. The Service is not directed to individuals in the European Economic Area or the United Kingdom, and we do not target or monitor individuals in those regions. If you choose to access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law.

5.4 Account deletion. You may delete your account at any time from within the app or by contacting us at mail@orto.mobi. When you delete your account, we delete or de-identify the personal information associated with it, except information we are required or permitted to retain for legal, security, tax, or legitimate business purposes (for example, transaction records). Residual copies may remain in backups for a limited period before they are overwritten.

6. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it. Our general retention periods are:

• Account information: for as long as your account is active and for up to 12 months after you delete it, unless a longer period is legally required.
• Query and saved-vehicle data (including plate images): while your account is active, or until you delete the item or your account.
• Support communications: up to 24 months after the matter is resolved.
• Analytics data: up to 14 months, or the period configured in Google Analytics.
• Server and security logs: up to 90 days, unless retained longer to investigate an incident.

Actual periods may vary where a longer or shorter period is required by law or reasonably needed for security or dispute resolution.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit using TLS and encryption of data at rest on our cloud infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

8. Children’s Privacy

The Service is intended only for users 18 years of age or older and is not directed to children. Separately, and consistent with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, or from anyone under 18, we will delete it. If you believe a minor has provided us information, contact mail@orto.mobi.

9. Marketing Choices

We may send you marketing communications about Orto’s products and features. You may opt out of marketing emails at any time using the unsubscribe link or by contacting mail@orto.mobi; we do not sell or rent your email address to third parties. We may still send you non-promotional messages about your account or transactions.

10. Third-Party Links and Services

The Service may link to third-party sites and services that we do not control and that have their own privacy practices. We are not responsible for those practices, and we encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated “Last Updated” date and, where required, additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact Us

Questions or requests regarding this Privacy Policy may be directed to:

Orto Industries, LLC
Attn: Privacy
2108 N St, Ste N, Sacramento, CA 95816
Tel: (760) 606-2934
Email: mail@orto.mobi
Website: https://www.orto.mobi