Store and share only information needed for the shop's work. This guide covers daily handling; it does not replace the business's privacy obligations or an approved privacy notice.

## Check the customer and recipient [#check-the-customer-and-recipient]

Before saving a vehicle, sending an estimate, or sharing an inspection, confirm the shop, customer, vehicle, and intended recipient. Correct contact details in the [customer record](/customers-and-vehicles) before sending again.

Treat a customer **Smart Link** as private. Share it only with the intended customer or an authorized recipient. Do not post it in public documentation, screenshots, or support forums. Copying a link does not send it or prove receipt.

For estimate email, **To** and **Cc** recipients can see one another. Use **Bcc** when an address must remain hidden. Check recipients before sending; see [Estimates](/workflows/estimates).

## Keep notes and evidence relevant [#keep-notes-and-evidence-relevant]

Include the vehicle condition and service evidence needed to explain the work. Check photos and attachments for unrelated faces, addresses, documents, and other customers' information before sharing.

Keep passwords, authentication codes, API keys, card credentials, and provider security codes out of notes, attachments, and messages. Use the provider's secure payment or connection flow.

## Review access and retention [#review-access-and-retention]

Use individual staff accounts and review [team access](/settings-and-security#team-access) when responsibilities change. A public manual page does not grant access to a shop or customer record.

Archiving a job retains history. Closing, archiving, or disconnecting a provider does not promise complete deletion of customer, financial, or provider records. Required retention can affect what may be removed.

For a correction, access, or deletion request, contact the shop responsible for the service record through its established private channel. Do not publish the record to ask for help or assume a general contact form completes the request.

## Share a support report safely [#share-a-support-report-safely]

Include the visible action, approximate time with timezone, and user-safe error wording. Use a record identifier only through an approved private support channel. Remove contact details, live Smart Links, payment details, and unrelated records from screenshots.

The manual's **Contact TorqueOps** link opens the public contact page; it does not attach job or diagnostic data automatically. See [Troubleshooting](/troubleshooting#when-to-escalate) before submitting.

The **Privacy (draft)** link in the manual is a draft notice. It does not establish approved retention, deletion, hosting, or provider commitments.

## Review what an in-app report shares [#review-what-an-in-app-report-shares]

The [Help & support](/help-and-support) flow submits your reviewed description and, only if selected, the displayed page area and language. It does not attach customer records, screenshots, session recordings, page URLs, or other form contents automatically. Remove private information yourself; pattern checks cannot detect every sensitive detail.