Privacy Policy
Effective Date: 11 July 2026 Last Updated: 11 July 2026
This Privacy Policy explains how Oryn Labs ("B Mobilize," "we," "us," or "our") collects, uses, discloses, and protects information when you use the B Mobilize platform, including our website, web application, and any related services (collectively, the "Service").
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
1. Who We Are
B Mobilize is an operations management platform built for equipment rental companies, provided by Oryn Labs, registered in India (Tamil Nadu) at Tamil Nadu, India.
For any privacy-related questions, you can contact us at: Hello@bmobilize.com
2. Information We Collect
2.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Account information | Full name, work email, phone number, company name, job role, password (hashed) |
| Company data | Company legal name, logo, subscription tier, business address |
| Fleet & operations data | Equipment records, operator records, maintenance logs, reservations, quotations, client details entered into the platform |
| Documents you upload | Registration certificates, insurance documents, operator licenses, and other compliance documents (including any personal data contained within them) |
| Communications | Messages sent through our contact form, support requests, and correspondence with our team |
| Payment information | Billing details are processed by our third-party payment processor. We do not directly store full payment card numbers. |
2.2 Information Collected Automatically
| Category | Examples |
|---|---|
| Usage data | Pages visited, features used, time spent, click patterns, session duration |
| Device & technical data | IP address, browser type, operating system, device identifiers |
| Log data | Access times, error logs, API request logs |
| Cookies & similar technologies | See our Cookie Policy for full details |
2.3 Information From AI Features
If you use the B Mobilize Operations Assistant or AI-powered quotation generation, the text you input (such as questions or client/equipment details) is processed by our AI service provider (Google Gemini) to generate responses. See Section 6 (Subprocessors) for details.
3. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Create and manage your account and company workspace
- Process transactions and send related information, including confirmations
- Generate quotations, reports, and AI-assisted responses
- Send administrative communications (service updates, security alerts, expiry alerts for documents you've uploaded)
- Respond to support requests and customer inquiries
- Monitor and analyze usage trends to improve the Service
- Detect, prevent, and address technical issues, fraud, or abuse
- Comply with legal obligations
We do not sell your personal data to third parties. We do not use your fleet, operator, or client data to train AI models beyond what is necessary to generate your requested output in real time.
4. Legal Basis for Processing (Where Applicable)
Where data protection law requires a legal basis for processing (for example, under India's Digital Personal Data Protection Act, 2023 (DPDP Act), or the GDPR for applicable users), we rely on:
- Performance of a contract — to provide the Service you've signed up for
- Legitimate interests — to improve, secure, and market the Service
- Consent — where you've explicitly given it (e.g., certain cookies, marketing emails)
- Legal obligation — where processing is required by applicable law
5. How We Share Information
We do not sell personal data. We may share information in the following circumstances:
- With your organization's other users — data you enter is visible to authorized users within your company account, according to their assigned role
- With service providers (subprocessors) — see Section 6 below
- For legal reasons — if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of B Mobilize, our users, or the public
- Business transfers — if B Mobilize is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements
6. Subprocessors & Third-Party Services
We use the following categories of third-party service providers to operate B Mobilize. We only share the minimum data necessary for each provider to perform its function.
| Provider Category | Purpose | Example Provider |
|---|---|---|
| Cloud infrastructure & database hosting | Application hosting, data storage | Google Cloud Platform (Cloud SQL) |
| File & document storage | Storing uploaded documents (registrations, licenses, insurance) | Google Cloud Storage |
| AI processing | Generating quotation text and Operations Assistant responses | Google Gemini API |
| Transactional email | Sending expiry alerts, account notifications | Resend |
| Payment processing | Billing and subscription management | [Payment processor — to be confirmed] |
A current list of subprocessors is available upon request at Hello@bmobilize.com.
7. Data Storage, Location & Security
- Data is stored on cloud infrastructure. [Data-center region — to be confirmed.]
- All data is encrypted in transit (TLS) and at rest.
- Each company's data is logically isolated at the application and database layer — no company can access another company's data.
- Access to production systems is restricted to authorized personnel on a need-to-know basis.
- We implement industry-standard security measures, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
If you become aware of a security vulnerability, please report it to Hello@bmobilize.com.
8. International Data Transfers
If your data is transferred to or processed in a country other than your own, we take steps to ensure appropriate safeguards are in place consistent with applicable data protection laws, including India's DPDP Act cross-border transfer requirements where applicable.
9. Data Retention
- Account data: Retained for as long as your account is active.
- After account deletion: Retained for up to 90 days to allow for account recovery, after which it is permanently deleted, unless a longer period is required by law (e.g., financial or tax records).
- Backups: May persist in encrypted backups for a limited period after deletion, in line with standard backup rotation cycles.
You may request earlier deletion by contacting Hello@bmobilize.com, subject to any legal retention obligations.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data ("right to be forgotten"), subject to legal exceptions
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at Hello@bmobilize.com. We will respond within the timeframe required by applicable law (for example, India's DPDP Act and, where applicable, the GDPR set out response timeframes for such requests).
11. Children's Privacy
The Service is intended for business use by adults acting on behalf of their employer. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it.
12. Cookies
We use cookies and similar tracking technologies. Full details are available in our Cookie Policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Service prior to the change becoming effective. The "Last Updated" date at the top of this page indicates when this policy was last revised.
14. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Email: Hello@bmobilize.com Company: Oryn Labs Address: Tamil Nadu, India
This document does not constitute legal advice. Before relying on it, have it reviewed by a lawyer qualified in your jurisdiction(s) of operation to ensure compliance with applicable data protection laws (including India's Digital Personal Data Protection Act, 2023, and any other jurisdiction where you have users).