Privacy policy
Last updated: April 29, 2026 · Version 1.0 (beta)
This page explains what TurboProc collects, why, where it lives, and the rights you have over it. This policy applies to turboproc.com and to TurboProc Scope, the iPhone app available through TestFlight and (later) the App Store. TurboProc is the data controller. If you have any question this page doesn't answer, email [email protected].
Summary, in two sentences
We collect the minimum information needed to send you a TestFlight invite, run the app on your shifts, and follow up by email about the beta. We don't sell your data, we don't advertise to your data, and your shop-floor footage is yours.
1. What we collect
1.1 Information you give us when you request the beta
- Name, work email, company name, role title.
- Plant size band (e.g. "100–250 employees"), industry NAICS code, city and state of the plant.
- Optional free-text description of your hardest line.
We use this to qualify the request, send you a TestFlight invite, and tailor follow-up emails to the audience and industry you're in. The legal basis is your consent (you typed it into our form) and our legitimate interest in running a beta program.
1.2 Information the iPhone app generates while you use it
- Account profile (the same fields above, mirrored from your beta request).
- Shift footage you record using the in-app capture tool.
- Per-step analysis derived from that footage by our processing pipeline.
- App diagnostic data — crashes, slow operations, version information — used to fix bugs.
1.3 Information we collect automatically when you visit turboproc.com
- Standard server log fields: IP address, browser user-agent, referring URL, timestamp, requested URL.
- The Cloudflare Worker that receives form submissions records the IP and user-agent of the submitting device on the canonical event row, used for abuse prevention.
We do not use third-party advertising trackers or fingerprinters on turboproc.com. We may use a privacy-respecting analytics tool to count page views.
2. How we use it
- To send you a TestFlight invite and the small number of follow-up emails described in our beta terms.
- To process the shift footage you submit and return the diagnostic memo to your account.
- To improve TurboProc Scope (debug crashes, train internal models on aggregated, non-identifying patterns).
- To stay in compliance with applicable law (e.g. responding to a valid legal request).
3. What we do not do
- We do not sell your information to anyone.
- We do not share your shift footage with other accounts, customers, or partners.
- We do not use your shift footage to train models that benefit other accounts. Your footage trains your account, plus aggregated, non-identifying improvements with explicit consent.
- We do not run advertising trackers, retargeting pixels, or behavioral profilers on turboproc.com.
- We do not use AI personas to claim to be human. See /about-our-ai.
4. Where it lives
- Account profile and event log. Postgres database hosted on Neon (US region).
- Form intake. Cloudflare Workers (global edge) writes to the database directly.
- Email. Google Workspace (Gmail) for sender side; Postmark for transactional sends; per-email bounce/click metadata kept 30 days.
- Shift footage and analysis output. Object storage in your private TurboProc workspace, encrypted at rest and in transit.
- HubSpot relay (during beta only). While we validate our primary database, beta form submissions are also forwarded to a HubSpot account we control. This stops once the validation phase ends.
5. Who we share it with
Only the service providers we list above (Neon, Cloudflare, Google Workspace, Postmark, HubSpot during the validation window). Each is bound by a written data-processing agreement that prohibits using your data for their own purposes. We do not have advertising partners and we do not have a "data partner" tier.
6. How long we keep it
- Account profile and event log: for the lifetime of your account, plus 12 months after deletion for fraud and dispute resolution. Then permanently deleted.
- Shift footage: retained while your account is active and you have not deleted it. You can delete a shift at any time from inside the app.
- Email logs (bounce, click): 30 days, then aggregated.
- Backups: rolling 30-day retention; deletion requests propagate within 30 days.
7. Your rights
Depending on where you live, you may have any or all of the following rights. We honor these requests for everyone, regardless of jurisdiction.
- Right to access — get a copy of the personal data we hold about you.
- Right to correction — correct anything that's wrong.
- Right to deletion — ask us to delete your data ("right to be forgotten").
- Right to portability — get a machine-readable copy of your data.
- Right to object — object to specific processing (e.g. ask not to be emailed).
- Right to opt out of sale — moot, since we do not sell data.
To exercise any of these, email [email protected] from the email address on your account. We respond within 30 days.
8. Children
TurboProc Scope is a B2B product. We do not knowingly collect data from anyone under 18. If you believe a minor has used the service, email [email protected] and we will delete the data.
9. International transfers
Our infrastructure is primarily US-based. If you access the service from outside the US, your data may be transferred to and processed in the US. By using the service, you consent to that transfer.
10. Security
We use TLS for everything in transit and AES-256 at rest. Database access is restricted to a small number of named team members. We log administrative access to your data. No internet service can be perfectly secure; if we discover a breach affecting your information, we will notify you within 72 hours of confirming it.
11. Changes to this policy
When we change this policy in a way that affects you, we will email everyone with an active account at least 14 days before the change takes effect. Changes that only clarify existing language don't trigger a notice.
12. Contact
Privacy questions: [email protected]
General questions: [email protected]