The short version
We collect what's needed to get a truck to your vehicle and pay for it: where the vehicle is, what it is, your mobile number, photos you choose to add, and a payment card handled by Stripe. We share the request with the tow company you choose (and the companies quoting it see the pickup area and vehicle type). We don't sell your data, and we don't run advertising trackers.
1. Who this covers
This policy explains how Towhub collects, uses and shares personal information when you use towhub.co and related apps, whether as a customer, a member of a tow company or business account, or a visitor. It applies to information we control. Tow companies and businesses using Towhub are independent controllers of the information they collect and keep about their own customers.
2. What we collect
You give us
- Contact details — mobile number (required to send updates), name and email (optional), and account credentials if you create an account.
- Request details — pickup location, destination, vehicle description, VIN (optional), what happened, notes, and photos you add.
- Payment — a payment card, collected and stored by Stripe. Towhub receives a token, the card brand and last four digits, and transaction status — never the full number.
- Ratings and comments you leave.
- For tow companies and businesses — company details, licensing and insurance documents, truck and crew information, staff names, photos and bios, pricing, payout bank details (held by Stripe), and brand assets.
We collect automatically
- Location — the pickup location you enter or share from your device (only when you choose "Use my location"); for drivers, GPS position while online and on a job, shared with the customer's tracking page and the company's dispatch.
- Usage and device data — pages viewed, actions taken, IP address, browser and device type, and error reports.
- Cookies and local storage — only what's needed to keep you signed in and remember preferences. See Cookies & Local Storage.
From others
- VIN decoding — when you enter a VIN we look it up with the U.S. NHTSA vPIC service to fill in year, make, model and body type.
- Maps and routing — Google Maps Platform to resolve addresses and compute distances and ETAs.
- Tow companies — status updates, driver location, photos and notes about your job.
3. How we use it
- To match your request with nearby tow companies, show quotes, and run the job (dispatch, tracking, ETA).
- To take payment, place and capture holds, issue receipts, and pay tow companies.
- To send you service messages (texts and emails) about your request and job.
- To keep a record of each job — times, locations, photos, signatures, payments — for receipts, disputes, insurance claims and legal requirements.
- To operate, secure and improve the Service, prevent fraud and abuse, and comply with law.
- With consent, for anything else we ask about.
We do not sell personal information, and we do not use it for third-party advertising.
4. Who we share it with
- The tow company you choose — your name, phone, pickup and destination, vehicle details, notes and photos, so they can do the job. Companies quoting your request see the pickup area, vehicle type and situation before you choose.
- Service providers that run Towhub — Supabase (database, authentication, file storage), Vercel (hosting), Stripe (payments and payouts), Google Maps Platform (addresses, routing, maps), Twilio (text messages), Resend (email). Each processes data under contract, only to provide their service to us.
- The business that ordered your tow — if a shop, dealer or fleet ordered on your behalf, they see the job status and receipt.
- Legal and safety — when required by law, to enforce our terms, or to protect people or property.
- A successor — if Towhub is acquired or merges, your information may transfer with the business under this policy.
5. Text messages
We send transactional texts about your request and job. Your number is used for that purpose and shared with Twilio to deliver messages and with the tow company to coordinate. Details, frequency and opt-out: Text Messaging Terms. Mobile information is never sold or shared with third parties for marketing.
6. How long we keep it
- Job records (request, quotes, status history, locations, photos, payments, receipts) are kept for 7 years to support tax, accounting, insurance and legal obligations. [DECISION: confirm retention period with counsel/accountant.]
- Driver GPS breadcrumbs are pruned after 30 days; the position at each status change is kept with the job record.
- Guest sessions that never submitted a request are deleted within about a day.
- Account information is kept while your account is active and for a reasonable period after closure.
7. Your choices and rights
- Access and correction — account holders can see and edit their profile and view their tows; tow companies and businesses manage their own data in Settings. Email us to request a copy of what we hold.
- Deletion — you can ask us to delete your account and personal information. We'll do so except where we must keep records (completed jobs, payments, disputes, legal holds).
- Texts — reply STOP to any message to opt out of non-essential texts. You'll still get messages that are strictly necessary to complete a job you requested.
- Location — you control device location permission; entering an address instead works too.
- California residents have rights under the CCPA/CPRA to know, delete, correct, and opt out of sale or sharing (we don't sell or share for cross-context advertising). Washington residents: Towhub does not collect consumer health data as defined by the My Health My Data Act. We will honor rights requests from any resident where the law provides them. Contact privacy@towhub.co.
8. Security
Data is encrypted in transit and at rest with our providers. Access to production data is limited to people who need it and is logged. Card data is handled entirely by Stripe (PCI DSS Level 1). If a breach affects you, we'll notify you as required by law.
9. Children
The Service is for adults. We don't knowingly collect information from anyone under 18.
10. Where data lives
Our providers host data in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the U.S.
11. Changes
The version date at the top changes when this policy changes. Material changes are announced on the Service or by email to account holders.
12. Contact
privacy@towhub.co · Towhub, Seattle, Washington. [DECISION: legal entity name and mailing address.]