Privacy Policy

Torqbox is operated by Torqtech, Inc. (“Torqbox”, “we”, “us”). The Torqbox mobile app and the website at tbox.tools (collectively, the “Service”) help professional mechanics get grounded answers to diagnostic questions. This policy describes what data we collect, why we collect it, who we share it with, and the choices you have.

We collect only what we need to operate the Service:

• Account data: the phone number you use to sign in (we use phone-OTP authentication only) and a randomly assigned account ID. If you choose to verify a shop affiliation, we additionally collect the email address you provide for that verification.
• Chat content: the questions you ask, the answers we generate, attached photos or PDFs, and any vehicle identifiers (VINs) you supply.
• Voice recordings: when you tap the mic, your audio is sent to our transcription service and converted to text. The audio is not retained after transcription completes.
• Documents you upload: service manuals or other repair PDFs, broken into searchable chunks for retrieval.
• Usage analytics: first-party events such as which screens you opened and which features you used. We do not use third-party analytics or advertising SDKs and we do not track you across other apps or websites.
• Device information: standard request metadata (IP address, app version, OS version) for security and debugging.

• To answer your diagnostic questions and show your history.
• To improve the quality of answers (without using your individual chat content to train external models).
• To detect abuse, prevent fraud, and meet legal obligations.
• To send service-related notices (e.g., security alerts).

We use a small set of vetted subprocessors to deliver the Service. We do not sell your personal information to anyone.

• Supabase (United States) — authentication, database, file storage.
• OpenAI (United States) — speech-to-text transcription via the Whisper API. OpenAI does not use API submissions to train its models.
• Voyage AI (United States) — embedding generation for document search.
• Vercel (United States) — hosting for our web and API endpoints.

Account data and chat history are retained for as long as your account is active. Voice recordings are deleted within minutes of transcription. When you delete your account (see Section 7), we permanently remove your account, chat history, uploaded documents, and analytics events within 30 days, except where retention is required by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email support@torqbox.com and we will respond within 30 days.

You can delete your account from inside the app at Settings → Delete account. Deletion is permanent and cascades across all your data (messages, threads, uploaded documents, analytics events). If you are unable to access the app, email support@torqbox.com and include the phone number associated with your account; we will process the deletion within 30 days after verifying ownership of that number.

The Service is intended for professional mechanics and is not directed to children under 13. We do not knowingly collect personal information from children.

Data is encrypted in transit (TLS) and at rest (AES-256) by our subprocessors. Access to production systems is limited to authorized personnel and audited.

Our subprocessors are located in the United States. By using the Service from outside the U.S. you consent to the transfer and processing of your data in the U.S.

We may update this policy from time to time. Material changes will be announced in-app or by email. The “Last updated” date at the top of this page reflects the most recent revision.

Questions about this policy or our data practices? support@torqbox.com