Privacy Policy
Last updated: September 18, 2026
Torrent Marine ("we", "us") builds software for marine mechanics and marinas. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. This policy is maintained by Torrent Marine as the app owner and describes our current practices; it is not an independent certification.
1. Who is responsible for your data
For the mechanic or marina account holder, Torrent Marine is the data controller. For the customers you (the mechanic) manage inside the app — their names, contact info, job history, photos of their vessel — Torrent Marine acts as a data processor on your behalf. You are responsible for the lawful basis on which you collect and store your customers' data.
2. Information we collect
- Account information: name, email address, hashed password (managed by our authentication provider), and any profile details you enter in Settings.
- Trial and billing information: trial start and expiration dates, subscription status, plan, and payment metadata. We do not request card or billing information to start the 14-day trial. If you later choose to subscribe, card details are collected and stored by Stripe, not by us; we receive identifiers, status flags, and limited transaction metadata.
- Business data you enter: customers, contacts, jobs, notes, parts, markups, tax and fee settings, home-base address, labor categories, and invoices.
- Job photos: pre-job photos you upload are stored in a private cloud storage bucket, accessible only to your account.
- Location and mapping data: addresses for jobs, marinas, and your home base, used to display maps, request directions, and optimize routes.
- Integration tokens: if you connect Google Calendar, we store an encrypted access/refresh token so we can sync jobs. Tokens are encrypted at rest with AES-256-GCM and are accessible only to server-side code with the service key.
- Payment and payout data: Stripe customer and subscription identifiers, connected-account ID and status, invoice totals, paid/unpaid status, payment method and timestamps, and platform commission records. Bank and identity details you give Stripe during Connect onboarding go to Stripe, not to us.
- Parts and shipment data: part numbers, prices, supplier links, tracking numbers, detected carriers, and delivery status shown from carrier or tracking providers.
- AI feature inputs: the symptoms, equipment details, and job text you submit to the AI Repair Assistant or labor estimator.
- Security records: hashed six-digit password-change verification codes with expiry and attempt counts, and audit-log entries recording password rotations.
- Offline copies on your device: a local snapshot of your recent jobs, contacts, settings, and labor kits, plus any changes queued while offline.
- Technical data: IP address, browser, device type, error reports, and basic usage events, used to keep the Service secure and working.
3. How we use your information
- Operate and maintain the Service (accounts, jobs, invoicing, routing).
- Administer the no-card trial, restrict paid features after it expires, process subscriptions you choose to start through Stripe, collect our 1% platform commission on invoices paid through the Service, and settle payouts to your connected account.
- Send transactional emails (verification, password reset, six-digit security codes, invoice delivery, trial-expiration reminders).
- Verify your identity for sensitive changes and keep security audit records.
- Store a local copy of your data on your device so the app works offline, and sync queued changes when you reconnect.
- Provide integrated features you enable (calendar sync, maps, weather, parts search, shipment tracking, AI repair assistance and labor estimation).
- Detect abuse, debug errors, and improve reliability and performance.
- Comply with legal obligations.
We do not sell your personal information, and we do not use your customers' data to train AI models.
4. Service providers we use
The Service relies on the following processors, each governed by their own privacy terms:
- Supabase — database, authentication, and file storage hosting.
- Cloudflare — application hosting and edge network.
- Stripe and Stripe Connect — subscription billing, customer payments, payouts to your bank, and identity/compliance checks.
- Google — Maps, Places, and (optional) Calendar sync.
- Open-Meteo — weather data for job locations.
- Firecrawl — web search results for parts lookup.
- Google Gemini (via AI gateway) — repair assistance and labor-hour estimation when factory guides don't cover a task.
- Carrier and parcel-tracking providers — shipment status for tracking numbers you add; some tracking views are embedded pages served by those providers.
- Brevo — sending transactional emails (verification, password codes, invoices, trial reminders) from notify.torrentmarine.com.
5. Sharing of information
We do not sell personal information. We share data only with the processors listed above to operate the Service, when you direct us to (for example, sending an invoice to your customer), or when required by law or valid legal process. If Torrent Marine is involved in a merger, acquisition, or asset sale, personal information may be transferred subject to this Policy.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account or cancel your subscription, we will delete or anonymize your personal data within 90 days, except where we are required to retain records (for example, tax and payment records) for a longer period. You can request deletion at any time by emailing support@torrentmarine.com.
7. Security
We enforce row-level security on the database so accounts can only read their own data, encrypt integration tokens at rest, use HTTPS in transit, and follow least-privilege access for our service keys. No system is perfectly secure; you use the Service at your own risk and are responsible for keeping your credentials safe.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. To exercise these rights, email support@torrentmarine.com from the address on your account. We will respond within the time required by applicable law.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. International transfers
Torrent Marine is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US and other countries where our processors operate.
11. Cookies and local storage
We use a small number of cookies and browser storage entries strictly to keep you signed in, remember your "Stay signed in" preference, and support the app. We do not use third-party advertising cookies.
12. Administrative telemetry and support diagnostics
We collect operational telemetry tied to your account so we can run and support the platform: presence timestamps (last active), login events, counts of AI diagnosis and labor-guide lookups, service-kit usage, active shipment tracking counts, Stripe Connect status, invoice revenue totals with paid/unpaid counts, and application error events (error message, page path, and time). This information is visible only to authorized Torrent Marine administrators through an internal, read-only oversight panel.
If you report a bug, an administrator may temporarily enable "developer support mode", which additionally records front-end console error output from your browser session. It captures technical diagnostics only — never passwords or payment card numbers — and is disabled once the issue is resolved. Administrators may also send you direct in-app messages, extend a trial, waive your subscription fee, or trigger a cache refresh of your app. Telemetry records are retained for up to 24 months and can be deleted on request.
13. Payments, Stripe Connect, and invoice pages
If you accept customer payments, Stripe Connect collects identity, business, and bank details from you directly and holds them under Stripe's own privacy policy; we receive only your connected account ID and status flags (for example whether charges are enabled). We collect a 1% platform commission on invoices paid through the Service, and we store invoice totals, paid/unpaid status, payment method, payment timestamps, and Stripe payment identifiers. Public invoice payment links (torrentmarine.com/pay/…) show the invoice breakdown and any photos you attach to anyone holding the link, so share them only with the intended recipient.
14. Data stored on your device (offline mode)
When you install or use the app offline, a copy of your recent jobs, customer contact details, settings, and saved labor kits is stored in your browser's local database on that device so the app keeps working without a connection. Changes made offline are queued locally and uploaded automatically when connectivity returns. This local copy is not transmitted to anyone other than our servers during sync. Signing out, clearing site data, or uninstalling the app removes it. Because this data lives on your device, keeping the device locked and secure is your responsibility.
15. Security verification codes and audit records
When you change your password, we generate a six-digit verification code, store only a hashed version of it with a ten-minute expiry and an attempt counter, and email the code to your registered address. A successful password change ends your sessions on other devices and writes a permanent record to our internal audit ledger containing the timestamp, your email address, and the action performed. Audit records are retained for security and compliance purposes and are visible only to authorized administrators.
16. AI features
When you use the AI Repair Assistant, AI labor estimation, or AI-assisted parts matching, the symptoms, equipment details, and job text you submit are sent to our AI provider to generate a response. We ask you not to include customer personal information in these prompts. Provider outputs are estimates only, and neither we nor our AI provider use your content to train models.
17. Changes to this policy
We may update this Policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before they take effect.
18. Contact
Privacy questions or requests: support@torrentmarine.com.