Privacy Policy

Last updated: August 2026

Draft notice: This Privacy Policy is a good-faith description of Tornado's data practices, written to reflect the product as designed. It has not yet been reviewed by a licensed attorney and must be reviewed by qualified legal counsel before Tornado is publicly launched or made available for download.

This policy explains what information Tornado LLC ("Tornado", "we", "us") collects through the Tornado mobile app and the Tornado branch/admin panel, why we collect it, and how it is used and protected.

1. Who we are

Tornado LLC is a company registered in Georgia, with its office in the Saburtalo district of Tbilisi, at the intersection of Physical Culture Street and Gotua Street. Tornado operates a two-sided platform: a mobile app for car owners and an admin panel used by our partner service branches and their staff.

2. Account and authentication data

You can create a Tornado account using Google Sign-In, Sign in with Apple, or email and password. Depending on the method you choose, we receive your name, email address, and a unique account identifier from Google or Apple, or you provide your email and a securely hashed password directly to us.

We do not receive or store your Google or Apple account password. Authentication with these providers is handled entirely through their official sign-in flows.

3. Vehicle and VIN data

To use Tornado's Garage feature, you provide information about the vehicles you own, which may include make, model, year, license plate, and Vehicle Identification Number (VIN). VIN codes may be entered manually or captured using your device's camera; images captured for VIN scanning are processed to extract the VIN and are not retained after the code has been read.

When you or a partner branch logs a completed service (such as an oil change, tire rotation, or fluid replacement), that record is associated with the vehicle's VIN and stored as part of its verified service history. Because service history is intended to be a trustworthy record, entries logged by a branch cannot be deleted by the vehicle's owner, though owners may contact us to request correction of factual errors.

VIN lookups performed by other users or by branch staff (for example, when evaluating a used vehicle) return the verified service history associated with that VIN, but do not reveal the current or past owner's personal account information.

4. AI car assistant

Tornado includes an AI assistant that answers vehicle-related questions (for example, "what oil does a BMW X5 need?"). Questions you send to the assistant, along with relevant context such as your vehicle's make and model, are transmitted to OpenAI, our AI infrastructure provider, in order to generate a response. Responses are grounded using a retrieval-augmented system drawing on manufacturer and service reference data.

We do not knowingly send account passwords, payment information, or government identification numbers to the AI assistant. Conversation content may be retained to improve response quality and for abuse prevention, subject to OpenAI's own data handling terms for API customers.

5. Certified vehicle history reports

Tornado allows you to generate a branded PDF report summarizing a vehicle's service chronology, products used, and the branches that performed the work. Generated reports are created on demand and may be temporarily stored so you can re-download them; they are not shared with third parties by Tornado without your action (such as sending or sharing the file yourself).

6. Push notifications

With your permission, Tornado sends push notifications for upcoming-service reminders, appointment confirmations, loyalty program updates, and occasional promotional offers from Tornado or its partner branches. You can disable promotional notifications at any time in the app's settings or your device's notification settings; service and appointment reminders can be limited the same way, though doing so may reduce the usefulness of the app.

7. Booking, loyalty, and expense data

When you book a visit, we store the branch, service type, and time slot you selected, along with booking status, to coordinate your appointment with the branch.

Tornado's Bronze, Silver, and Gold loyalty tiers are calculated from your service and referral activity. We store your points balance, tier, redeemed discounts or cashback, and referral relationships in order to administer the program.

If you use Tornado's personal expense tracking feature, you control what you log (fuel, service, insurance, tires, and related costs). This data is used to generate the monthly and annual reports you request and is not used by Tornado for purposes unrelated to providing that feature to you.

8. How we use your information

We use the data described above to operate the Tornado app and admin panel, verify and display service history, coordinate bookings between owners and branches, administer the loyalty program, generate the reports and reminders you request, respond to support inquiries, and maintain the security and integrity of the platform.

9. Data sharing

We share data with: (a) the branch you book a visit with or that logs a service for your vehicle, limited to what is necessary to perform that service; (b) OpenAI, for processing AI assistant conversations as described above; (c) infrastructure providers who host our servers and databases under contractual confidentiality obligations; and (d) authorities, where required by Georgian law. We do not sell personal data.

10. Data retention

Verified vehicle service history is retained for the life of the vehicle's record on Tornado, reflecting its purpose as a permanent, CARFAX-like history. Account data is retained while your account is active. You may request deletion of your account and associated personal data at any time by contacting us; some records may be retained where required for legal, security, or fraud-prevention purposes, or where they form part of a vehicle's shared service history rather than your personal account.

11. Your choices

You may access, correct, or request deletion of your personal information; withdraw consent for optional processing such as promotional notifications; and request a copy of the data associated with your account. To exercise these choices, contact us using the details below.

12. Security

We use industry-standard technical and organizational measures, including encryption in transit, access controls, and hashed password storage, to protect your data. No system is perfectly secure, and we encourage you to use a strong, unique password and to keep your device's operating system up to date.

13. Children

Tornado is intended for licensed drivers and vehicle owners and is not directed at children under 16. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this policy as Tornado evolves. Material changes will be reflected by updating the date above, and where appropriate, communicated through the app.

15. Contact us

Tornado LLC — Saburtalo District, Physical Culture St. & Gotua St., Tbilisi, Georgia. Phone: +995 595 50 67 67. Email: info@tornadoapp.ge.