DRAFT, not in effect, not legal advice. Not reviewed by a lawyer. Items marked [REVIEW] need a decision before launch.

Oregon Radio Company LLC ("we") runs OrcInspect. This explains what we collect, why, where it's kept, and your choices. We don't sell personal information and we don't show ads in the app.

What we collect

• Managers: email address, role, sign-in times, optional two-step sign-in settings (stored encrypted), and an audit log of actions such as adding machines or inviting people.
• Operators: the name they type on the inspection screen (remembered on their own phone), their inspection answers, notes, photos, the time, and the machine. Operators don't create accounts. We record the IP address and basic device type with submissions for security and anti-fraud.
• Billing: Stripe collects card details directly. We receive the customer's name, email, plan and payment status, not full card numbers.
• Sticker orders: shipping name and address.
• Free checklist tool: if you enter your email, we keep it to send what you asked for and occasional OrcInspect updates. You can unsubscribe at any time. [REVIEW: CAN-SPAM unsubscribe link and mailing address in every email]
• Website logs: standard request logs (IP, browser, pages) used for security and fixing problems. We use only cookies needed to keep you signed in and protect forms; no advertising or tracking cookies.

Why we use it

To run the service, keep records, send alerts and sign-in codes, bill you, ship stickers, prevent abuse, provide support, and meet legal obligations.

Where it's stored

OrcInspect runs on Amazon Web Services (AWS) in the US West (Oregon) region. Inspection data is stored in Amazon DynamoDB and photos in a private Amazon S3 bucket, both encrypted at rest and only sent over HTTPS. Photos are never public; they're shown only to signed-in members of the customer's account through short-lived links. Backups are kept for up to 12 months.

Who we share it with

Only service providers who help us run OrcInspect: AWS (hosting, email delivery, sign-in), Stripe (payments), Cloudflare (DNS), and the mail carrier for sticker orders. We may disclose information if the law requires it, or as part of a sale or merger of the business, in which case this policy continues to apply.

Customer data

Inspection records belong to the customer (the employer). If you're an operator and want your information changed or removed, contact your employer first; we'll help them handle the request.

Retention and deletion

We keep account data while the account is open. After a customer cancels, data stays available for export for 30 days, is deleted from the live system after 90 days, and ages out of backups within 12 months. Request earlier deletion at support@theorc.dev.

Your choices

You can ask to see, correct, export or delete your personal information by emailing support@theorc.dev. Depending on where you live (for example Oregon or California), you may have additional rights under state privacy laws, and we'll honor them. [REVIEW: whether the Oregon Consumer Privacy Act or others apply at your size]

Security

We use encryption, one-time email codes for sign-in, optional two-step sign-in, per-company data separation, a web firewall and access logging. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.

Children

OrcInspect is a workplace tool and is not meant for anyone under 16.

Changes and contact

We'll post changes here and email account owners about material ones. Questions: support@theorc.dev, Oregon Radio Company LLC, [mailing address] [REVIEW].