Privacy policy
Effective September 20, 2026 · Last updated September 23, 2026
OnRotations is a dealership team management service based in Los Angeles, California. This policy describes how the OnRotations team handles information through our website and browser application. Our service is intended for United States dealerships and their authorized personnel.
The essentials
We do not sell personal information or share it for cross context behavioral advertising. We use information to operate your account, organize your store, support your team, and protect the service. Your dealership can review workplace activity recorded in its store.
1. Information we collect
We receive information from you, your dealership, authorized coworkers, and your use of the service.
- Account and profile information: email address, account identifier, authentication information, name, displayed last name initial, optional phone number, profile photo, store membership, role, and an employee ID if your dealership uses one. Authentication is handled through Supabase.
- Workplace activity: schedules, schedule confirmations, leave dates, appointments, check ins, assigned points, rotation history, availability, time on point, restroom and other break status and duration, grace allowances, deal activity, vehicle stock numbers, and task completion.
- Content and communications: messages, notes, announcements, bonuses, reports, invitations, and information you send when requesting help. Enterprise inquiries include your account email, contact name, dealership, expected store and team size, purchase timeline, and operational priority.
- Service and technical information: store settings, plan and account limits, session information, and request or security logs that may contain IP addresses, browser and device information, requested pages, errors, and timestamps. Hosting and authentication providers process technical information when delivering the service.
Online checkout is not currently connected. We do not currently collect payment card details through this website. We do not currently request precise device location or use GPS tracking.
Do not enter or share customer information of any kind, including customer names, contact details, Social Security numbers, driver’s license documents, customer financial records, passwords in messages, medical details, or other sensitive customer records. Use only the information needed to coordinate your team. A restroom or leave status does not require a medical explanation.
2. How we use information
We use information to authenticate users, assign access, operate rotations and schedules, deliver messages and store updates, produce activity reports, manage accounts, respond to support requests, investigate errors or misuse, and meet legal obligations. Managers may use reports for coaching and reviewing store operations.
Your dealership decides how it uses OnRotations for workplace management. It is responsible for appropriate employee notices, lawful instructions, and the information it asks staff to submit. This policy does not replace your employer’s workplace privacy notice or authorize undisclosed monitoring.
3. Who can see information
- Your store: authorized team members can see shared rotation activity, availability, schedules, team messages, team notes, bulletins, and bonuses. Store managers can review their store’s employee data, activity reports, and task completion. Employee IDs are restricted to the employee concerned and authorized management, rather than the whole sales team.
- Messages and personal notes: direct conversations are addressed to their participants. They are not end to end encrypted. Authorized platform administrators may access service records when administering accounts, providing support, investigating misuse, or complying with law. Daily private notes are stored in the database and available only to their author through the application. Managers and the owner dashboard cannot read another real user’s private notes. They are not end to end encrypted. Earlier browser-only notes and preferences may remain on the original device; anyone with access to that browser or device may be able to access those local records.
- Service providers: Supabase provides authentication and database services; Vercel hosts the website. Email providers process account emails and correspondence. Our current contact mailbox uses Gmail. These providers process information needed for their services. See the Supabase privacy notice, Vercel privacy notice, and Google privacy policy for their own practices. Those notices do not replace this policy.
- Legal and business circumstances: we may disclose necessary information to comply with legal process, protect people and the service, investigate fraud, or obtain professional advice. If the business is transferred, information may be transferred subject to applicable law and appropriate notice.
We do not disclose personal information to third parties for their direct marketing. We do not install advertising trackers or optional analytics tools in the current application. Following an external link takes you to a service with its own privacy practices.
5. Retention and deletion
We retain information while needed to provide the service, maintain relevant store records, resolve disputes, protect accounts, and satisfy legal obligations. Retention depends on the record, its purpose, and any applicable legal requirement.
Explicit platform archives of stores or accounts are scheduled for deletion after 30 days. Removing a person from a store is different from deleting their platform login. Historical posts or activity may remain where associated records are retained; archive deletion is not a promise to erase every reference or backup immediately. Records subject to a legal obligation may also need to be retained.
Copies exported by your dealership are controlled by that dealership. Browser copies must be removed from the relevant device. Contact us about deletion requests and the scope of remaining records.
6. Access, corrections, and privacy requests
You can edit available profile fields and schedule information in your account. Contact your store manager about workplace records or store membership. You may also email us to request access, correction, or deletion, or ask how your information is used. We may verify your identity and coordinate with your dealership where we process records on its behalf. Do not send identity documents or passwords unless a secure verification method has been agreed.
California residents may have rights under applicable law to know about, access, correct, or delete personal information, and to exercise applicable sale, sharing, or sensitive information choices without unlawful discrimination. The availability of these rights depends on the law’s coverage and exceptions. An authorized agent may contact us with evidence of authorization. We respond within the periods required by applicable law and explain any lawful limitations.
We do not use sensitive personal information to infer personal characteristics for advertising. You may ask us to stop promotional emails by replying to them or contacting us. Essential account and security messages may still be necessary.
7. Security and processing locations
We use authentication, access controls, and encrypted connections to help protect information. No system can guarantee complete security. Use a unique password, protect your device, and do not share authentication codes.
Our service is intended for United States use. Providers may process information in the United States and other locations where they operate. We do not promise that all information remains exclusively in California or the United States.
8. Children
OnRotations is a workplace service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has supplied information so we can investigate and take appropriate action.
9. Policy updates
We will post changes here and update the date above. For material changes, we will provide an appropriate notice through the service or account email before the change takes effect, and obtain consent where required. New payment, location, mobile, or analytics features will need disclosures that reflect how they actually work.
10. Contact OnRotations
Privacy contact: Emmanuel Babakhanlou, OnRotations
Los Angeles, California, United States
Include “Privacy request” in the subject and describe what you need. This is our current contact address while our company domain and mailbox are being established.