Orvel CRM ("Orvel," "we," "us") provides a customer relationship management platform for auto transport brokers in the United States. This policy explains what information we collect, how we use it, and the choices you have. For questions, contact support@orvelcrm.com.
Account information. Name, email address, phone number, company details, and role, provided when you sign up or are invited to a company workspace.
Customer business data. Records you enter into the Service in the course of running your brokerage: leads, quotes, orders, customer and carrier contact details, vehicle and shipment information, pricing, and related notes and documents. This data may include personal information about your customers; you are the controller of that data and we process it on your behalf to provide the Service.
Usage and technical data. Log data such as IP addresses, browser type, and timestamps generated when you use the Service, used for security and troubleshooting.
We do not sell your personal information or your customers' personal information, and we do not use Customer Data for advertising.
Customer Data is stored in a Postgres database hosted by Supabase, with access controls that isolate each company's data from other tenants. The Service also stores a working copy of your company's records in your browser's local storage on devices where you use the app, scoped to your company, to keep the app fast and responsive; this local copy is synchronized with the cloud database.
We share information only as needed to run the Service:
We retain Account information and Customer Data for as long as your account is active. After termination, we will make a reasonable export of your Customer Data available upon written request within thirty (30) days, after which we may delete it from active systems. Residual copies may persist in backups for a limited period before being purged.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), authenticated access, and per-tenant data isolation enforced at the database level. No system is completely secure; you are responsible for keeping your login credentials confidential and for managing which users you invite to your workspace.
If your customers contact us directly about data your company entered into the Service, we will refer them to you as the controller of that data, unless the law requires us to act.
The Service uses browser local storage and similar technologies for authentication sessions and for the company-scoped working copy of your records described above. We do not use third-party advertising or tracking cookies.
The Service is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.
We may update this policy from time to time. Material changes will be communicated through the Service or by email, and the "Last updated" date above reflects the current version.
Privacy questions or requests: support@orvelcrm.com.