Privacy Policy

This Privacy Policy explains how ReliabilityOS LLC, a South Carolina limited liability company, ("ReliabilityOS," "we") collects, uses, and shares personal data in connection with the ReliabilityOS platform (the "Service"). It covers our own account holders and their organizations. For personal data our customers submit into the Service about their own personnel or operations ("Customer Data"), we act as a service provider/processor on the customer's behalf — see our Data Processing Addendum for those terms, and direct any request about that data to the organization that operates your account.

2.1 Account information

Name, email address, role, organization, and authentication data, provided when you or your organization creates an account.

2.2 Customer Data

Operational records your organization enters into the Service — asset records, work orders, PM checklists, inventory, photos, notes, and similar content — which may incidentally include personal data about your own personnel (e.g. who completed a task).

2.3 Billing information

Billing and subscription details are handled by our payment processor, Stripe; we do not store full payment card numbers ourselves.

2.4 Usage and device data

Log data, device/browser information, IP address, and in-app activity, collected automatically to operate, secure, and improve the Service.

2.5 Push notification data

If you opt in to push notifications, we store the browser-issued subscription endpoint needed to deliver them. You can revoke this at any time from your account settings.

• To provide, maintain, and secure the Service, including authentication and role-based access control.
• To process subscription billing and send account, security, and service-related communications.
• To power in-app AI features (e.g. diagnostic suggestions, report generation) — see Section 4.
• To send notifications you've opted into (e.g. push alerts for assigned work).
• To monitor, debug, and improve the Service's performance and reliability.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal data. We share it only with the service providers ("subprocessors") needed to operate the Service, each bound by a data-processing agreement, and each processing data only on our instructions:

• Supabase — database, authentication, and file storage infrastructure underlying the entire Service.
• Stripe — subscription billing and payment processing.
• Resend — transactional email delivery (account, billing, and alert notifications).
• Anthropic — powers optional in-app AI features (e.g. diagnostic assistance, report copiloting). Only the specific data needed to answer a given AI-assisted request is sent; it is not used by Anthropic to train their models under our commercial terms with them.
• Vercel — hosting/CDN infrastructure that serves the application itself.

We may also disclose information if required by law, to protect the rights and safety of ReliabilityOS or others, or in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We retain account information for as long as your account is active, and Customer Data per your organization's subscription and the export/deletion terms in our Terms of Service. We retain data longer where required for legal, security, or legitimate business record-keeping purposes (e.g. billing history, audit trail records already built into the product for compliance purposes).

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact zach@reliabilityos.io. If your account is managed by an organization (your employer), we may direct your request to that organization as the party that controls the account.

We use role-based access control, per-organization data isolation, and encrypted storage for uploaded files and photographs as part of the Service's architecture, and follow industry-standard practices to protect personal data. No system is completely secure; if we become aware of a breach affecting your personal data, we will notify you as described in our Data Processing Addendum and applicable law.

We may process and store data in the United States and Canada. Where we transfer personal data internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required by applicable law.

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice as appropriate.

Questions about this Privacy Policy: zach@reliabilityos.io.