Privacy Policy

Last updated Oct 8, 2026

Draft for the beta. Parts marked “To be confirmed” are not decided yet, and parts marked “For attorney review” still need a lawyer. When the text is final, we will update this page and ask everyone to agree to the final version.

In short

We collect what you give us to run your profile, check your license and help approved employers find you.
Employers can find you only after you turn on the switch that lets them and your license is checked. Only the Torio staff who check licenses see your license photos, selfie, birth date and license number.
We do not sell your information or use it for ads. You can delete your account at any time.

Who runs Torio: To be confirmed: the legal name of the company that runs Torio
Mailing address: To be confirmed: mailing address
Privacy and support questions: help@jointorio.com

What we collect

Your account: your email address and sign-in records. If you sign in with Apple or Google, the name and email address they share with us.
Your profile: your name, headline, photo, cover photo, city and state, skills, work history and anything else you add.
What you do on the network: posts, comments, discussion posts, likes, saves, follows, connections, and the members you block, mute or report.
Work preferences: your minimum pay, availability, weekly hours, preferred days and shifts, the city you work from, and whether employers may find you. We look up your city with Google Maps. We only ask for your city, never your street address.
Hiring: your résumé, the documents and certifications you add, the invitations you get, your answers, and what you share with each company.
License check: your legal name, birth date, license number, a photo of your license and a selfie, and when you agreed to how we use the photos.
From your phone: a code that lets us send you notifications, the notifications we sent you and whether you read them, and whether your phone is an iPhone or an Android phone.
Crash reports: when the app or website breaks, a report about the error and the app version. We remove names, email addresses and other personal details from it first.
Safety records: a check that you are a person and not a bot when you sign in or sign up, and a record each time our staff open your license photos or identity details.
If you use Torio for a company: the company’s details, your team, your jobs and the guards you invite.
Waitlist: your email address, state and license type.

How we use it

To run Torio: your account, profile, network, jobs and notifications.
To check that your license is real and yours.
To show you to approved employers when you allow it.
To keep Torio safe: stop bots and abuse, and handle reports.
To send you emails about your account: codes to confirm your email address or reset your password.
To find and fix problems.
To follow the law.

We do not sell your information. We do not use it for ads, and Torio has no ad or tracking tools.

Who can see what

Other members	Your network profile and what you post, as your visibility setting allows: all signed-in members (the setting you start with), only your connections, or nobody. When they can see your profile, they also see a “verified” mark next to your name on discussion posts while your license check is current. People who are not signed in see nothing.
Employers	Only the owners and recruiters of companies Torio has approved, and only while the switch in Work preferences that lets approved employers find you is on (it starts off) and your license check is current. Torio then lists you for their open jobs near you that pay at least your minimum. They can also search for you on Torio by place, distance from one of their jobs, armed or unarmed work, years of experience, license status, role, full or part time and the days and shifts you prefer, and invite you to one of their open jobs, one at a time, but only if you agreed to that: the switch says so when you turn it on, and if you turned it on before it did, Jobs asks you once. They then see your name, city and state, how many miles you are from their job, your minimum pay, your availability, role, years of experience, headline and summary, whether you want armed or unarmed and full or part time work, preferred days and shifts, how far you will travel, work history, and whether your license is active or expires within 30 days (not the date itself). For jobs near you that pay at least your minimum, they also see whether your weekly hours fit the job and your résumé unless you switch it off. They see your email, phone number and documents only if you share them for a specific invitation. You can stop sharing at any time, but a file a company already downloaded can’t be taken back. When a company invites you, everyone on its Torio team can see that invitation with your name, city and state, even if you later turn the switch off. Your name is removed from it when you delete your account.
Torio staff	Staff who check licenses see your license details and photos. Moderators see what was reported. Our team can also look at account records when needed to help you, fix a problem or keep Torio safe.
Nobody else	Employers and other members never see your license photos, selfie, legal name, birth date or license number.

People who work for companies are Torio members too. They can see your network profile like any other member, even if you have not turned on the employer switch.
If you block a company, it can no longer find you for its jobs or invite you. If you block someone on the network, they can't find you in employer search either.
When you report someone, we do not tell them who reported them.
Each time a company downloads your résumé, we record it and show it to you in the app.
We keep a record of which companies were shown your profile in search for 30 days, to answer questions and stop misuse.

Messages

When you tell a company you are interested in one of its jobs, you and that company can send each other messages about the job.

You and the company’s Owners and Recruiters can read and write them. People with Viewer access at the company cannot see them.
Nobody can reply once the job is closed or no longer open, you are no longer interested in it, you block the company, the company is suspended or you ask to delete your account. You can still read what was said. If you block the company, it is suspended or you ask to delete your account, the company can no longer see the conversation at all.
If you report a company from your messages with it, Torio staff can read that conversation to look into your report, and each time they open it is recorded.

Members can also send each other messages:

If you are connected, you can write to each other directly. Anyone else sends one message as a request, which waits under Requests until you accept or decline it. If you decline, it is removed, and that member cannot send you another message or connection request for 30 days.
Only the two of you can read the conversation. If either of you blocks the other, it is hidden from both of you until the block is lifted. You cannot write while your profile is hidden or your account is paused, and nobody can start a conversation with a hidden profile.
If either of you reports the other from the conversation and includes it, Torio staff can read that conversation while they look into the report, and each time they open it is recorded.

For both kinds of messages:

Torio staff cannot see a conversation nobody reported, and cannot write in one.
A new message, or a message request from a member, shows in Notifications and, if you turned on phone notifications, on your phone. With “Show names and details” on in your notification settings, the phone shows who it is from and the start of the message (up to 120 characters); a request from a member shows only their name. With it off, the phone shows only “You have a new message.” If you mute a member, their messages still arrive but do not notify you.

Companies that help us run Torio

We share only what each one needs to do its job for Torio:

Supabase stores our data and files and runs sign-in.
Vercel runs this website.
Expo hosts the web version of the guard app, delivers app updates and sends notifications to your phone through Apple and Google.
Apple and Google run “Sign in with Apple” and Google sign-in, if you use them.
Google Maps finds your city when you set your location.
Cloudflare Turnstile checks that you are a person and not a bot.
Resend sends our emails, such as codes to confirm your email address or reset your password.
Sentry receives crash reports, with personal details removed.

We may also share information when the law requires it, or when we need to protect someone’s safety.

How long we keep it

License photo, selfie, legal name and birth date	Deleted 90 days after your license is approved, or 30 days after any other answer. If you cancel a check, they are deleted right away (within 8 days if that fails). While a check waits for an answer, or if you never send it, we keep them until it is answered, you cancel it or you delete your account.
License number and check results	After a decision, until you delete your account. If you cancel a check, the number is deleted with your other details.
Posts and comments you delete	30 days, or longer while a report about them is open. A deleted comment that has replies leaves a short “deleted” note in its place.
Discussion posts	A post you take down is deleted once no report about it is open. A post a moderator removes is kept as a safety record.
Messages with companies	Until you delete your account. Then each of your conversations is deleted, for you and for the company. A conversation is also deleted if its invitation or the company’s account is deleted. If someone at a company deletes their account, the messages they sent stay in the conversation, no longer linked to them.
Messages between members	Until you or the other member deletes their account. Then the whole conversation is deleted for both of you, with any record of staff opening it after a report.
Notifications	90 days after you read them. Unread ones stay until you delete your account.
Safety and security records	Records of who opened license photos or downloaded a résumé, reports, strikes and your agreements to these policies: To be confirmed: how long these are kept.
Waitlist	Until you ask us to remove it, or delete a Torio account with the same email address.
Backups	To be confirmed: how long backups are kept
Everything else	Until you delete your account.

When you delete your account

You can delete your account on the website or in the app. Deletion starts 7 days after you ask. Until then you can cancel, and other members and employers can’t see your profile.
After 7 days we erase your account, usually within an hour, and your files soon after. If you are the only owner of a company, deletion waits until someone else owns it.
If you cancel, your profile shows again, and companies can see documents you shared with them again. The employer switch, notification settings and contact details you shared stay off until you turn them back on.
A few records stay, without your name: a company that invited you keeps a record that it invited a “Former member”; a report you made about a company keeps the company, job and reason but not your words; discussions that others replied to stay without your name.

Your choices

Choose who can see your network profile, or hide it, when you edit your profile.
Turn the switch that lets approved employers find you on or off in Work preferences.
Switch your résumé off so employers can’t open it.
Share or stop sharing your contact details and documents for each invitation.
Block or mute members, and turn notifications on or off.
Delete your account at any time.
To leave the waitlist, email help@jointorio.com.

Your rights

You can ask to see, correct, download or delete your information. Email help@jointorio.com. We may need to confirm it is you. How long we take to reply, and how to appeal if we say no: To be confirmed: privacy request timing and appeals.

Keeping your information safe

Information is encrypted while it travels between your device and Torio.
Only staff who need it can open license details, and they must use two-step sign-in (a code from an authenticator app) to do it. We record each time they do.
The app does not keep copies of your license photos on your phone.
No system is perfect. If a breach affects your information, we will tell you as the law requires.

Age and location

Torio is only for people 18 and older. We do not knowingly collect information from anyone younger. If you think someone under 18 has an account, email help@jointorio.com.

Torio is for people in the United States. Where your information is stored: To be confirmed: the region where Torio’s data is stored.

Changes to this policy

When we change this policy in a way that matters, we change the date at the top and ask you to confirm it on the website or in the app before you continue.

Questions about your privacy? Email help@jointorio.com.

See also the Terms of Service and the Community Guidelines.