Privacy Policy

Effective date: October 8, 2026

Torq is operated by KnottRapone Enterprises, LLC, doing business as TorqCRM ("Torq," "we," "us," or "our"). Torq provides software for vehicle wrap, graphics, sign, PPF and window tint businesses. We are committed to protecting the privacy of the businesses that use Torq and of their customers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you.

Throughout this Privacy Policy, "Service" means our website at torqcrm.com, our web and mobile applications, and related services. The Service includes both generations of our software:

- Torq 2.0, our current all-in-one shop management application; and

- Torq 1.0, our earlier applications, including TorqCore, TorqQuote, TorqTime, TorqBooks and TorqBoost, and the Torq marketing and CRM workspaces we provide on the GoHighLevel platform.

This Privacy Policy applies to all of them. Where something applies to only one, we say so.

This Privacy Policy does not apply to information we collect by means other than the Service (including offline) or from other sources. When you sign up for or use the Service, you agree to this Privacy Policy. We may change this policy from time to time. When we do, we will post the updated policy on this page and update the effective date above. For material changes, we will also notify account owners by email or in the Service.

1. Who this policy covers

Shops. The businesses that subscribe to Torq, and their owners, staff and contractors who use it ("Shops" and "Users").

Shop Customers. The people and companies a Shop does business with, whose information a Shop enters into or collects through Torq: for example, contact details, vehicles, quotes, invoices, proofs, photos and messages ("Shop Customer Information").

Visitors. People who visit our website or contact us.

For Shop Customer Information, the Shop decides what to collect and why, and Torq processes that information on the Shop's behalf, as the Shop's service provider. If you are a customer of a Shop and have questions about your information, please contact that Shop first. We will help the Shop respond.

2. Information we collect

Account information. Name, business name, email address, telephone number, mailing and billing address, login credentials, role, and similar details for each User.

Billing information. When you pay for Torq, or when a Shop Customer pays a Shop through Torq, card and bank details are collected and processed by our payment processors (currently Stripe). Torq does not store full card numbers. We receive limited information such as the payment amount, status, the last four digits of a card, and the card brand.

Shop Customer Information. Information a Shop enters or collects through the Service, which may include:

- names, email addresses, telephone numbers, mailing, billing, shipping and job-site addresses, and company details;

- vehicle details such as year, make, model, color, unit number and VIN;

- quotes, proposals, approvals and electronic signatures, invoices, payments, purchase orders and job records;

- design files, proofs, markup, photographs (including vehicle check-in and completed-work photos), and documents;

- notes, internal comments, and messages sent by email or text message through the Service;

- call records, call recordings, voicemails and voice notes, and their transcripts, where the Shop uses Torq's phone features;

- answers to forms, discovery questions and booking requests;

- for Torq 1.0, transaction data synced from accounting, invoicing or CRM applications the Shop connects, such as QuickBooks Online and GoHighLevel.

Communications. When you send email or text messages through Torq, we process the message content, recipients and delivery status (for example, sent, delivered, bounced or opened), so the Service can show whether a message arrived.

Connected calendars. If a User connects a Google or Microsoft calendar, Torq reads only free/busy information (whether a time is busy, not what the event is), and writes only to a calendar that Torq creates for that User. See section 5.

Device, usage and technical information. IP address, browser and device type, pages and features used, timestamps, and error reports. Where a User turns on notifications, we also store a push-notification subscription for that device.

Information from others. Information a Shop's integrations provide, information you give our support team, and responses to surveys.

3. How we use information

We use information to:

- provide, operate and maintain the Service, including creating accounts and processing quotes, jobs, schedules, invoices and payments;

- send the emails, text messages, notifications and reminders that Users ask the Service to send;

- keep accounts secure, verify identity, and prevent fraud, spam and abuse;

- provide customer support and respond to requests;

- bill Shops for their subscription;

- understand how the Service is used, diagnose problems, and improve and develop the Service;

- communicate with Shops about their account, product updates and offers, which can be opted out of at any time;

- comply with law and enforce our agreements.

We use Shop Customer Information only to provide the Service to the Shop that entered it. We do not use it to market to Shop Customers.

Artificial intelligence features. Some Torq 2.0 features, such as summaries of a customer's history, use third-party AI service providers (currently Anthropic) to process the relevant records and return the result to the Shop. We send only what a feature needs. We do not permit these providers to use Torq data to train their models. Voice notes and call recordings are transcribed by a speech-to-text provider (currently Deepgram) under the same restriction.

4. How we share information

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

We share information only as follows.

Service providers. We use trusted providers to host and operate the Service. They may process information only on our instructions and must protect it. Our current providers include:

- Supabase: database and application hosting (United States)

- Cloudflare: file storage (R2) and bot protection (Turnstile)

- Vercel: web application hosting

- Postmark: email delivery

- Twilio: text messaging, calling, call recording and phone numbers

- Stripe: payment processing

- Deepgram: speech-to-text transcription

- Anthropic: AI features

- Sentry: error monitoring

- Google and Microsoft: calendar connection (see section 5); Google Maps Platform for address lookup and drive times

- GoHighLevel: the Torq 1.0 CRM and marketing workspaces, and our website

- Intuit QuickBooks Online: accounting sync, where a Shop connects it

Integrations a Shop chooses to connect. When a Shop connects another application, such as QuickBooks Online, a calendar or a payment account, we exchange the information needed for that integration as the Shop directs.

Within a Shop. Information in a Shop's account is visible to that Shop's Users according to the roles the Shop assigns. Shop Customers can see the information a Shop shares with them, for example through a proposal, proof, invoice or customer-portal link.

Legal and safety. We may disclose information if required by law, subpoena or legal process, or if we believe in good faith it is necessary to:

(a) comply with the law, or investigate, prevent or act on suspected illegal activity;

(b) enforce our agreements, protect against liability, or defend against claims;

(c) protect the rights, property or safety of Torq, our users or others.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

Aggregated information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify any person or Shop.

5. Google and Microsoft account data

If a User connects a Google account, Torq requests only:

- free/busy access to the User's calendars (calendar.freebusy), so Torq can avoid offering times when the User is busy. Torq sees only whether a time is busy, not event titles, descriptions, attendees or locations; and

- access to calendars that Torq itself creates (calendar.app.created), so Torq can add the User's Torq appointments to a separate "Torq" calendar. Torq cannot read or change any other calendar.

Torq's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

- We use Google user data only to provide and improve the scheduling features described above.

- We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition.

- We do not use it for advertising.

- We do not allow humans to read it, except with the User's consent, for security purposes, or to comply with law.

Users who sign in with Google share only their name, email address and profile picture with Torq, for authentication.

Microsoft calendar connections work the same way: Torq reads free/busy information only, and uses it only to show availability.

A User can disconnect a calendar at any time in Torq, or revoke Torq's access in their Google or Microsoft account settings. When a connection is removed, Torq deletes the stored access tokens and the cached free/busy information.

6. Text messages and calls

Shops use Torq to send text messages to Shop Customers who have agreed to receive them, for example quote and appointment updates, proof and payment links, and job status. Message frequency varies. Message and data rates may apply. Recipients can reply STOP to opt out, or HELP for help, at any time.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. This does not apply to the service providers that deliver messages on our behalf.

Where a Shop records calls using Torq's phone features, callers hear a recording notice where required, and recordings and their transcripts are stored in the Shop's account. Each Shop is responsible for complying with the call-recording and consent laws that apply to it.

7. Cookies and similar technologies

We use cookies and browser storage (such as local storage) to keep you signed in, remember your preferences, keep the Service secure, and understand how the website and Service are used. Our website, which is hosted on GoHighLevel, may use cookies for site analytics and forms. You can control cookies through your browser settings. Blocking some of them may prevent parts of the Service from working.

8. Data retention

We keep account information and Shop Customer Information for as long as the Shop's account is active and as needed to provide the Service. When a Shop closes its account, we delete or de-identify its information within a reasonable period, except where we must keep it longer to comply with law, resolve disputes, prevent fraud, or enforce our agreements. Copies may remain in backups for a limited period until they are overwritten. A Shop can export its data before closing its account.

9. Security

We protect information using measures that include:

- encryption in transit;

- encryption at rest provided by our hosting providers;

- separation of each Shop's data from every other Shop's data;

- role-based access controls;

- limited staff access;

- monitoring.

No method of transmission or storage is completely secure. While we work hard to protect information, we cannot guarantee its absolute security.

If personal information is compromised as a result of a security breach, we will notify affected Shops and individuals as required by applicable law, by email or other appropriate means. Torq is not liable for loss of information caused by events beyond our reasonable control.

10. Your choices and rights

Account information. Users can review and update their account information in the Service at any time, or by contacting us. You may decline to provide certain information, but some features may not work without it.

Marketing email. You can unsubscribe from our marketing emails using the link in any message. We will still send service and account messages.

Access, correction and deletion. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to opt out of certain processing. To make a request, contact us as described below. We will verify your request and respond within the time required by law. We will not discriminate against you for exercising these rights.

Shop Customers. If you are a customer of a Shop, please contact that Shop about your information. Torq processes it on the Shop's behalf, and we will help the Shop respond to your request.

California residents. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information for purposes that would require an opt-out. California residents may exercise the rights above by contacting us.

11. Where information is stored

Torq is based in the United States, and information is stored and processed in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

12. Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18, and no one under 18 may register for or provide personal information to the Service. If we learn that we have collected personal information from someone under 18, we will delete it promptly. If you believe we have information about a child, please contact us.

13. Links to other websites

The Service may link to other websites and services, such as payment pages or a Shop's own website. We are not responsible for their privacy practices. Please review their policies before providing information.

14. Notifications

We may provide notices required by law or otherwise related to the Service by email, within the Service, or by posting on our website.

15. Contact us

Questions or requests about this Privacy Policy or your information:

Torq Support

Email: support@torqcrm.com

Mail: KnottRapone Enterprises, LLC, doing business as TorqCRM, 2436 Lynndale Rd Suite 2, Fernandina Beach, FL 32034