Privacy Policy
How Renvori manages personal information.
This Privacy Policy explains how Renvori Inc. ("Renvori") manages personal information in connection with GarageOS, Renvori Payroll, related websites, onboarding, support, billing, and communications.
1. Accountability and Privacy Officer
Renvori designates a Privacy Officer as the person accountable for its privacy program. Contact the Privacy Officer at privacy@renvori.ca, (204) 295-1812, or 261 Rangeview Way, Winnipeg, MB R3Y 2K6, Canada. Privacy questions, access or correction requests, and complaints may be directed there. Renvori may verify identity and authority before disclosing or changing personal information.
2. Renvori's role and the Customer's role
For account, billing, website, security, and direct support information, Renvori determines the purposes described in this Policy. For personal information a garage or employer enters about its own customers, employees, suppliers, and other individuals, the business Customer generally determines why the information is collected and used, while Renvori processes it to provide the Services on the Customer's instructions and as otherwise permitted or required by law.
3. Information we may handle
- Account and identity information, such as name, email, role, organization, authentication, and MFA-related status.
- Business and garage information, such as legal/business name, address, operating jurisdiction, contacts, settings, and subscription status.
- Customer and vehicle records, appointments, job orders, invoices, payments, parts, tires, documents, vehicle identifiers, and service history entered by a Customer.
- Accounting and tax-related business records, including invoices, supplier bills, journal information, tax classifications, and supporting evidence.
- Diagnostic and scan information when enabled, including VINs, diagnostic trouble codes, and related vehicle data.
- Support and communications records, including emails, SMS delivery metadata, invitations, security notices, and support interactions.
- Technical and security information such as IP address, device/browser information, timestamps, session/authentication events, and audit records where generated.
- Billing identifiers and subscription metadata. Payment-card details are handled by Stripe rather than stored by GarageOS.
- Payroll information when Renvori Payroll is enabled, subject to the additional Payroll & Sensitive Data Notice.
4. Purposes
Renvori may use personal information to provide and operate the Services; authenticate users and enforce role-based access; create and support customer workspaces; process subscription billing; deliver transactional notices; protect security and prevent misuse; troubleshoot and support users; maintain audit and integrity controls; comply with legal obligations; establish, exercise, or defend legal claims; and improve reliability and usability using service telemetry, support information, and de-identified or aggregated information where appropriate. Renvori does not use Customer Data to train generalized artificial-intelligence models without separate notice and authorization.
Renvori does not sell personal information.
5. Consent and lawful collection
Renvori seeks meaningful consent where consent is the appropriate basis for collection, use, or disclosure. Some processing is necessary to provide a requested service, administer a business relationship, protect security, or comply with law. A Customer is responsible for required notices and consents for personal information it collects before submitting that information to Renvori.
6. Limiting collection, use, disclosure, and retention
Renvori aims to collect and process only information reasonably needed for identified purposes. Users should not place highly sensitive personal information into fields not designed for it. Renvori may restrict or remove data that creates an unnecessary security or legal risk.
7. Service providers and cross-border processing
Renvori uses service providers for hosting, database/authentication, payment processing, email, SMS, and selected external data services. Depending on the provider and configuration, personal information may be processed or accessible outside Canada and may then be subject to lawful access by authorities in that jurisdiction. Renvori uses contractual, technical, and organizational measures appropriate to the circumstances and remains accountable for personal information under its control as required by law.
See Service Providers & Subprocessors. Questions about Renvori's use of service providers outside Canada may be directed to the Privacy Officer at privacy@renvori.ca.
8. Safeguards
Renvori uses administrative, technical, and physical safeguards appropriate to the sensitivity of the information, which may include MFA, role-based authorization, tenant-scoped access controls, secure service credentials, encryption provided by infrastructure services, logging/audit controls, restricted support access, and incident-response procedures. No system can guarantee absolute security.
9. Retention and deletion
Personal information is retained only as long as reasonably required for identified purposes, legitimate business and security needs, contractual obligations, applicable backup or recovery cycles, dispute resolution, or legal and regulatory requirements. Different record types may require different retention periods. Information may persist temporarily in backups after deletion from active systems.
10. Accuracy
Renvori and Customers should keep personal information as accurate, complete, and up to date as necessary for its intended use. Customers control many business records and should correct them through the product where available.
11. Access and correction
Subject to applicable exceptions, an individual may ask about the existence, use, and disclosure of personal information under Renvori's control, request access, and challenge its accuracy or completeness. Renvori may require sufficient information to locate records and verify identity. Some requests concerning Customer-controlled data will be referred to or coordinated with the relevant Customer.
12. Security incidents and breaches
Renvori maintains processes to assess suspected privacy and security incidents. Where applicable law requires reporting or notification because a breach meets the relevant legal threshold, Renvori will make required reports and notifications as soon as feasible. Renvori will maintain breach records as required by applicable law.
13. Electronic communications
Renvori may send operational messages needed to administer an account or provide requested services. Commercial electronic messages are governed by applicable consent, identification, and unsubscribe requirements. See Electronic Communications.
14. Cookies and similar technologies
The Services may use cookies, local storage, and session storage for authentication, security, preferences, and application continuity. See Cookies & Local Storage.
15. Complaints
Privacy concerns should be sent to privacy@renvori.ca. Renvori will investigate appropriate complaints and take corrective action where warranted. Individuals may also have the right to contact an applicable privacy regulator.
16. Changes
Renvori may update this Policy to reflect changes in law, providers, security practices, or Services. Material changes will be communicated reasonably, and renewed consent will be sought where required.