TowUp Privacy Policy

At TowUp, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform that connects fleet owners with recovery professionals.

By using our service, you consent to the data practices described in this policy. If you do not agree with the practices described here, please do not use our platform.

This Privacy Policy applies only to users within the United States. TowUp services are currently only available to users located within the United States.

We collect several types of information from and about users of our platform, including:

Personal Information:

• Account information (name, email address, phone number, company details)
• Payment information (stored securely through our payment processors)
• Business details (business address, licenses, insurance information for service providers)
• Vehicle information (for fleet owners managing their fleets)
• Profile information and preferences
• Identity verification information (driver's license or business license details)

Service Provider Verification Data:

• Criminal background check records (covering past 7 years)
• Motor vehicle records (MVR) and driving history
• Social Security number verification
• Professional reference verification data
• Government-issued identification documents
• Certificates of Insurance (COI) and insurance verification data
• Commercial driver's license information
• DOT/FMCSA compliance documentation
• Vehicle inspection records and maintenance documentation
• Business licensing and permit information

Financial Security and Compliance Data:

• Enhanced identity verification for high-value transactions
• Anti-money laundering (AML) compliance monitoring data
• Fraud detection analytics and pattern recognition data
• Transaction monitoring and suspicious activity data
• Age verification documentation
• Business entity authorization and representative verification

Incident and Compliance Reporting Data:

• Discrimination complaint investigation data
• Safety incident reports and documentation
• Regulatory compliance monitoring records
• Customer service and dispute resolution communications

Non-Personal Information:

• Device information (device type, operating system, browser type)
• Usage data (how you interact with our platform, features used, time spent)
• Location data (when using location-based features of our service)
• Log data (IP address, access times, pages viewed)

We collect information through:

• Direct interactions (when you register an account, submit forms, or communicate with us)
• Automated technologies (cookies, web beacons, tracking technologies)
• Third-party sources (payment processors, background check services, mapping services)
• Mobile device permissions (location services, notifications, camera access when relevant)

For more information about our use of cookies and tracking technologies, please see our Cookie Policy.

We use the information we collect to:

• Provide, maintain, and improve our platform services
• Process and manage transactions between fleet owners and recovery professionals
• Verify identity and qualifications of service providers
• Communicate with you about your account, updates, and promotional offers
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Enhance security and prevent fraud
• Comply with legal obligations
• Personalize your experience with relevant content and features

We may disclose your personal information to:

• Service Participants: When a fleet owner requests service, we share necessary information with recovery professionals to facilitate the service, and vice versa
• Service Providers: Third-party vendors who perform services on our behalf (payment processing, data analysis, email delivery, hosting services)
• Business Partners: Trusted partners who help us operate our business and serve you
• Legal Requirements: When required by law, court order, or governmental regulations
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Specific Service Provider Categories:

• Background Check Providers: Criminal history, driving records, and identity verification services
• Insurance Verification Services: Insurance certificate validation and monitoring services
• Regulatory Compliance Services: DOT/FMCSA compliance monitoring and verification
• Financial Security Services: Anti-money laundering monitoring, fraud detection, and transaction analysis
• Age Verification Services: Identity and age verification for account registration

We do not sell your personal information to third parties for marketing purposes.

Mobile Phone Number Usage: We collect mobile phone numbers solely for authentication, account security, service-related communications, and to facilitate the core functionality of our platform. We will never share your mobile phone number with third parties for marketing, promotional, or advertising purposes.

Our platform utilizes location information to provide core functionality such as matching fleet owners with nearby recovery professionals, tracking vehicle location during recovery operations, and providing navigation assistance.

You can control location permissions through your device settings, but please note that restricting location access may limit your ability to use certain features of our platform.

When using our services, we collect:

• Precise location: When the app is in use to facilitate service requests and fulfillment
• Background location: For service providers actively fulfilling recovery requests
• Location history: To provide records of services performed

We use cookies and similar tracking technologies to track activity on our platform and store certain information. These technologies help us:

• Remember your preferences and settings
• Understand how you interact with our platform
• Improve user experience and performance
• Deliver relevant advertising
• Protect against fraudulent activity

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our platform.

For more detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

We implement appropriate technical and organizational measures to protect the security of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We maintain:

• Encryption of sensitive data using industry-standard encryption protocols
• Secure network infrastructure with firewalls and intrusion detection
• Regular security assessments and penetration testing
• Access controls for employee access to data (role-based access)
• Comprehensive data breach detection and response procedures
• Employee security awareness training
• Physical security measures at our facilities

Technical Security Specifications:

• End-to-end encryption for sensitive data transmission
• Secure Socket Layer (SSL) encryption for all communications
• PCI DSS compliance for payment card data processing
• Multi-factor authentication capabilities and related data
• Automated threat detection and response systems
• Encryption key management and regular rotation
• Database encryption for all stored sensitive information

In the event of a data breach that compromises your personal information, we will:

• Notify affected users without unreasonable delay, typically within 72 hours of becoming aware of the breach
• Provide information about the nature of the breach, the information affected, and steps we are taking to address it
• Provide recommendations for steps you can take to protect yourself
• Notify relevant authorities as required by applicable laws

Notifications will be made via email, in-app notifications, or other direct communication methods when possible.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods for different types of data include:

• Account information: Retained while your account is active and for up to 2 years following account closure
• Transaction data: Retained for 7 years for tax and accounting purposes
• Communications: Retained for 2 years
• Location data: Retained for 1 year from time of collection
• Usage data: Retained for 2 years for analytical purposes

Verification and Compliance Data Retention:

• Background check records: Retained for 7 years after account closure for compliance purposes
• Insurance documentation: Retained for 3 years after policy expiration or account closure
• Regulatory compliance records: Retained as required by applicable transportation and business regulations
• Discrimination complaint data: Retained for 7 years for legal compliance
• Fraud detection data: Retained for 5 years for security and compliance purposes
• Age verification documents: Retained for 3 years after account closure

We will securely delete or anonymize your information when it is no longer needed for these purposes.

As a user in the United States, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information in certain circumstances
• Restriction: Request restriction of processing of your information
• Data Portability: Request transfer of your information to you or a third party
• Objection: Object to processing of your information

California Residents: Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information. You have the right to:

• Know what personal information we collect about you and how it is used and shared
• Delete personal information collected from you (with certain exceptions)
• Opt-out of the sale of your personal information (note that we do not sell your information)
• Non-discrimination for exercising your CCPA rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within 45 days.

To verify your identity when you make a request, we may ask you to provide additional information. We will only use this information to verify your identity and process your request.

Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately.

We implement age verification measures during account creation, including terms acceptance that requires users to confirm they are at least 18 years of age. Additionally, certain features of our service, such as providing recovery services, require verification of professional licenses which inherently restricts usage to adults.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as soon as possible.

Discrimination Complaint Data Processing:

When discrimination complaints are filed through our platform, we collect and process:

• Details of the alleged discriminatory incident
• Information about parties involved in the complaint
• Supporting documentation and evidence
• Investigation records and findings
• Communication records related to the complaint resolution

Data Use for Compliance:

• Investigating and resolving discrimination complaints
• Ensuring compliance with civil rights and anti-discrimination laws
• Reporting to regulatory authorities when required
• Implementing corrective measures and policy improvements
• Training and education purposes (with data anonymized)

Confidentiality and Protection:

We maintain strict confidentiality of discrimination complaint data and limit access to authorized personnel involved in investigation and resolution. Data is processed in accordance with applicable civil rights laws and our commitment to equal access.

We may update our Privacy Policy from time to time. The date the privacy policy was last revised is identified at the bottom of the page, along with the version number.

We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Sending you an email notification to the email address associated with your account
• Providing an in-app notification when you next log in
• Updating the "Last Updated" date at the bottom of this page

Changes will become effective 30 days after the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the platform after the effective date constitutes your acceptance of the revised terms.

For significant changes to sections regarding data collection, use, or sharing, we will seek to obtain your explicit consent before implementing the changes.

Your information may be transferred to — and maintained on — computers located outside of your state or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

As our platform operates throughout the United States, by using our services, you acknowledge that your personal information may be processed in any state where we maintain operations or servers. Your submission of information through our platform represents your agreement to these interstate transfers.

We are committed to ensuring that our Privacy Policy is accessible to individuals with disabilities. This Privacy Policy is designed to be compatible with common screen readers and other assistive technologies.

If you encounter any difficulty accessing our Privacy Policy or have suggestions for improving its accessibility, please contact us at support@gettowup.com.

If you have any questions about this Privacy Policy, please contact us at:

Email: support@gettowup.com

Collection and Use of Mobile Phone Numbers: When you provide your mobile phone number to TowUp:

• Your mobile phone number will only be used for account verification, security purposes, and service-related communications
• We may send you transactional messages related to the services you've requested
• We may send you service updates and important notifications about your account

Third-Party Sharing Limitations: We will not share, sell, rent, or transfer your mobile phone number to third parties for their marketing purposes. Your mobile phone number will only be shared with service providers who help us deliver our services (such as SMS delivery providers) and are bound by confidentiality obligations.

Opt-Out: You can opt out of receiving SMS messages from us at any time by:

• Replying "STOP" to any of our SMS messages
• Adjusting your communication preferences in your account settings
• Contacting us at support@gettowup.com

Consent: By providing your mobile phone number and using our services, you consent to receive communications from us at the phone number you provided. Standard message and data rates may apply.