Privacy Policy

This policy explains what Yash Patel d/b/a RO Defender (“RO Defender”, “we”) collects when you use the RO Defender web application and website, what we do with it, and who else handles it.

It covers two quite different kinds of information, and the distinction runs through the whole document: information about you, our customer, and information about other people that happens to be inside the estimate files you upload. Section 3 deals with the second.

Account information. Your email address, and your name and profile picture if you sign in with Google. Optionally a shop or business name. If you sign up with a password, we never see it — it is handled and stored by our authentication provider.

Files you upload. The estimate PDFs or XML files you submit, and the documents generated from them.

Run history. A record of each document you generate — which tool, when, the original filenames, and a summary of the result such as line counts and totals — so you can find a finished run again.

Billing information. Your subscription status, plan, renewal date, and billing contact details. We never receive or store your card number. See section 6.

Marketing enquiries. If you ask for a walkthrough, the name, email address, and phone number you give us.

Usage and technical data. Standard server and analytics data: pages requested, timestamps, IP address, browser and device type.

This is the part of the service most worth understanding. A collision repair estimate is not an anonymous document. Depending on the file, it can contain the vehicle owner's name, address, and phone number; the VIN; a claim number and policy number; the names of the adjuster and the estimator; and free-text notes about the vehicle and the loss.

When you upload one, you are giving us personal information about people who are not our customers and have no relationship with us.

You decide what that data is used for; we only process it. We use it solely to produce the document you asked for, and for the purposes in section 4. We do not contact the people named in your files, build profiles of them, market to them, or use their information for anything other than running the service for you.

Your responsibility. You confirm you have the authority to provide these files to us for processing, consistent with your own obligations to your customers and to any insurer or third party.

If you want to reduce what you send us, the estimate files can be redacted before upload — the tools only need the line items, rates, and totals to do their work.

We use what we collect to:

• authenticate you and keep your account secure;
• parse your estimates and generate the documents you requested;
• show you your run history and let you re-open a previous result;
• take payment, manage your subscription, and determine which tools your plan grants;
• send service messages — receipts, password resets, and notices about the service;
• diagnose failures and improve reliability, including looking at a specific file when you report a problem with it;
• understand aggregate usage of the site, and detect abuse or fraud;
• meet legal and accounting obligations.

We do not sell personal information, we do not share it with advertisers or data brokers, and we do not use your uploaded files to train machine learning models.

We use the following providers to run the service. Each handles data only to provide its function to us, and all currently store data in the United States.

We may also disclose information if required by law, to enforce our Terms of Service, or in connection with a merger or sale of the business — in which case we will tell you before your information becomes subject to a different policy.

Payments are processed by Stripe. When you subscribe, you enter your card details on a page hosted by Stripe. Your card number never passes through our servers and we never store it.

What we keep is a reference to your Stripe customer record and the state of your subscription — plan, status, renewal or end date — which is what determines your access to the tools. Stripe's handling of your payment information is governed by its own privacy policy.

Uploaded estimates and generated documents are currently kept indefinitely while your account exists, so that your run history stays usable. We do not delete them automatically on a schedule.

You can ask us to delete them. Email yash@rodefender.com from your account address, naming the runs or asking for all of them, and we will delete the files and their history within 30 days.

If you close your account, we will delete your uploaded files and generated documents within 30 days, and remove or anonymise your account record. We retain billing and transaction records for as long as tax and accounting law requires, and we may keep backups for a limited period after deletion from the live systems.

Download links for generated documents are short-lived and expire ten minutes after they are issued. The storage buckets themselves are private and not publicly readable.

Traffic is encrypted in transit. Files are held in private storage that is not publicly listable or readable; access to a specific document is granted through a signed link that expires. Every request for a submission is scoped to the account that owns it, and database-level policies restrict each account to its own rows.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by law.

You can view and update your account details in the app, cancel your subscription at any time from Account & billing, and ask us to delete your files as described in section 7.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to be free from discrimination for exercising those rights. California residents have rights under the CCPA/CPRA, including the right to know and to delete; we do not sell or share personal information as those terms are defined there.

To exercise any of these, email yash@rodefender.com from your account address. We will verify the request and respond within the time the applicable law allows.

If your request concerns information inside an estimate uploaded by one of our customers, we will generally refer you to that customer, since it is their file and they determine what it is used for. We will help them respond.

We use cookies that are necessary for the service to work — principally to keep you signed in. These cannot be turned off without breaking authentication.

We use Vercel Analytics to understand aggregate traffic. It is privacy-oriented, does not use cookies to track you across sites, and does not build an advertising profile of you. We do not use advertising or cross-site tracking cookies.

RO Defender is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy. When we make a material change we will update the date at the top and, where the change affects how we handle information you have already given us, notify you by email or in the app.

Questions, requests, or complaints about privacy:

yash@rodefender.com