Privacy Policy

This Privacy Policy explains how ODR Logic ("ODR Logic," "we," "us," or "our") handles personal information through the ODR Logic website, hosted application, related forms, support interactions, and services that link to this policy (collectively, the "Services"). It is written for our current United States launch.

ODR Logic determines how personal information is handled for our website, product inquiries, account administration, security, and our own business operations. When a rink, municipality, parks department, school, nonprofit, consultant, or other customer uses the platform to manage its personnel and rink records, that customer controls the purpose and permitted use of its organization data. In that situation, ODR Logic processes the data to provide the Services, and users should normally direct organization-record questions to their organization administrator first.

Account and organization information

We collect information such as name, work email address, phone number when provided, job title, authentication records, account preferences, organization membership, role, rink access, invitation status, and recent account activity. Organization and rink records may include facility names, addresses, coordinates, time zones, operating settings, billing contacts, and retention preferences.

Operational rink information

The platform stores information entered or generated by authorized users, including assessments, ice-depth readings, surface and refrigeration conditions, weather snapshots, resurfacing records, equipment and maintenance records, tasks, comments, incidents, closures, schedules, programs, prices, projected revenue, reports, recommendations, actions, outcomes, and audit history.

Files and evidence

Authorized users may upload photos, videos, documents, and receipts. We store the file, file name, type, size, caption, uploader, related record, and access metadata. These files may contain people or other personal information. Customers are responsible for uploading only material they are authorized to collect and use.

Connected measurement information

When a compatible device is used, we may process its configured manufacturer, model, display name, serial or asset identifier, unit, calibration or service information, raw measurement payload, normalized reading, validation result, capture time, rink point, and operator. Browser permissions and the device connection itself are controlled on the user's device; accepted readings and their provenance are stored with the assessment.

AI and guidance information

We collect questions, instructions, operational evidence selected for analysis, generated answers, confidence and status information, feedback, model and prompt versions, latency, and usage or cost metadata. Users should not enter passwords, payment-card information, government identification numbers, medical information, or unrelated personal information into AI questions or operational notes.

Website forms and communications

Early-access, commercial, consultation, and Ice Protection forms may collect name, work email, phone, title, organization, rink location and dimensions, organization type, interests, preferred contact method, timing, referral source, and the details submitted in free-text fields. We also retain the status and source of the request.

Technical information

We and our hosting providers receive information such as IP address, browser and device type, user agent, requested pages, timestamps, authentication cookies, security events, errors, and service usage. Public forms use a one-way request fingerprint derived from network and browser information to limit abuse; the raw address is not stored in that fingerprint field.

We collect information:

• directly from users who create accounts, complete forms, upload files, or enter records;
• from organization administrators who invite users and configure rink access;
• from connected measurement devices when a user activates a supported capture flow;
• from weather and mapping providers based on a rink's coordinates and requested dates;
• automatically from browsers, devices, application logs, and security controls; and
• from authorized integrations or imported files selected by the customer.

We use personal information to:

• provide, secure, maintain, troubleshoot, and improve the Services;
• authenticate users and enforce organization, rink, role, and financial-data permissions;
• store operational records, evidence, schedules, device readings, reports, and history;
• retrieve weather information and generate evidence-based guidance;
• process inquiries, evaluate product fit, provide support, and communicate about requested services;
• monitor quotas, prevent fraud and abuse, investigate incidents, and protect users and the Services;
• maintain auditability, comply with law, and enforce agreements; and
• analyze service performance and develop features using aggregated or de-identified information where practical.

We do not use customer operational data to make employment, credit, insurance, housing, or other legally significant decisions about individuals.

AI processing. When an authorized user requests AI-assisted guidance, ODR Logic may send the user's question and relevant authorized rink evidence to an AI service provider to generate a response. We also offer deterministic, rules-based functions where configured. AI output may be incomplete or incorrect and is retained with supporting evidence and technical metadata when the feature requires it.

Weather processing. We send rink coordinates and requested forecast or historical date ranges to weather providers. We may store normalized weather observations, forecasts, source information, retrieval time, and the provider payload needed to preserve the context used for an operational decision.

Connected devices. A device reading is not transmitted until the user initiates or accepts the capture flow supported by the browser and device. ODR Logic may retain the raw and normalized values and related provenance so the organization can review how a final measurement was recorded.

We may disclose personal information to:

• Authorized customer users. Information is available according to organization membership, rink assignment, role, and record-specific controls.
• Service providers. We use providers for hosting and delivery, authentication, database and file storage, email functions, weather data, AI processing, and related infrastructure. Current core providers include Vercel, Supabase, Visual Crossing, and OpenAI when their applicable features are enabled.
• Professional advisors and contractors. We may provide limited information to personnel supporting security, legal, accounting, consulting, or product operations under appropriate obligations.
• Authorities or affected parties. We may disclose information when reasonably necessary to comply with law, lawful process, or public-sector record obligations; protect rights, safety, and security; or investigate misuse.
• Business transaction participants. Information may be reviewed or transferred as part of a merger, financing, reorganization, sale, or similar transaction, subject to appropriate protections.
• Others at your direction or with your consent.

ODR Logic does not currently sell personal information or use personal information for cross-context behavioral advertising. We do not share customer operational data with unrelated parties for their own marketing.

ODR Logic uses cookies required for authentication, session continuity, security, and core application functions. The application also stores display preferences, such as light or dark theme and interface density, in the browser's local storage.

We do not currently use advertising cookies or third-party behavioral advertising trackers. If we introduce nonessential analytics or advertising technology, we will update this policy and provide any notice or choice required by applicable law. Blocking required cookies may prevent sign-in or other application features from working.

We retain information for as long as reasonably necessary to provide the Services, maintain operational history and auditability, respond to inquiries, secure the platform, comply with law, resolve disputes, and enforce agreements. Customer administrators can configure an intended organization retention period, but legal, incident-preservation, contractual, technical, or backup requirements may require different treatment for particular records.

Public inquiry records are retained while the request remains relevant and for a reasonable period afterward. Authentication, security, audit, billing, and backup records may remain after account deactivation where needed for the purposes above. When information is no longer required, we take reasonable steps to delete, de-identify, or restrict it.

We use administrative, technical, and organizational safeguards designed to protect information, including authentication, encrypted transport, tenant and rink access controls, role-based restrictions, private file storage, time-limited file links, database security policies, audit records, and service-provider controls. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur.

Users must protect their credentials, use only their assigned account, keep devices reasonably secure, and promptly report suspected unauthorized access through our contact form.

Users can update certain profile and organization information in the Services. Organization administrators control membership, roles, rink access, and many organization records. You may opt out of promotional email by following the instructions in the message or asking us to stop; service and security messages may still be necessary.

Depending on your U.S. state and our relationship with you, you may have rights to request access, correction, deletion, or a portable copy of personal information; obtain information about categories of collection and disclosure; appeal a denied request; or opt out of certain sales, targeted advertising, or profiling. ODR Logic does not currently conduct the sales or targeted advertising described above.

To submit a request, use our Contact ODR Logic form and begin the message with "Privacy Request." Include your name, work email, organization, the request, and your state of residence. We may need to verify your identity and authority. An authorized agent may submit a request where permitted by law, but we may request proof of authority. We will not discriminate against you for exercising an applicable privacy right.

If ODR Logic holds the information only for your employer or rink organization, we may refer the request to that organization. We may deny or limit a request where an exception applies, including when records must be retained for security, legal, contractual, public-record, or incident-preservation purposes.

The Services are business and workplace tools and are not directed to children under 13. Children may participate in rink programs, but customers should not create child user accounts or enter children's personal information unless they have a lawful, necessary business purpose and all required authorization. If you believe a child has submitted personal information directly to ODR Logic, contact us so we can review it.

ODR Logic is currently offered for United States operations. Information is processed in the United States and may be handled by service providers in other locations as necessary to provide their services. The Services and this policy are currently designed for United States operations.

We may update this policy as the Services, providers, and legal requirements change. The "Last updated" date identifies the current version. If a change materially affects how we use information, we will provide additional notice when appropriate.

For privacy questions or requests, use the Contact ODR Logic form and begin the message with "Privacy Request." For account-specific information controlled by a rink or other customer, contact that organization's administrator first.