Privacy Policy

Last updated: April 22, 2026

This Privacy Policy explains how TowPilot Demo Co.(“TowPilot”, “we”) collects, uses, shares, and protects your information when you use our tow-dispatch service.

1. Information we collect

From customers: name, phone number, optional email, pickup and destination addresses (geocoded to latitude/longitude), vehicle year/make/model/color/plate/condition, and whether keys are available. Photos of the vehicle before loading and after delivery are captured by the driver. A signature image is captured at delivery for proof of handoff.

From drivers and staff:name, email, phone, truck identifier, compliance documents (driver's licence, insurance, vehicle registration), precise location while on-shift (updated every ~15 seconds and deleted after 24 hours).

Automatically: IP address, browser type, and standard web analytics. Errors that occur during use are reported to our error-monitoring system with stack traces; we configure it not to capture personally identifiable payload data.

2. How we use it

Dispatch the right truck to the right pickup.
Share the driver's first name, truck label, and current location with the requesting customer via their tracking link — only after the driver accepts the job, and only while the tow is in progress.
Send SMS and email updates (intake confirmation, driver en route, job complete, receipt). You can unsubscribe from non-operational messages at any time.
Process payments, issue receipts, and handle refund disputes.
Meet legal and regulatory obligations, including lien-sale notice periods and insurance reporting.
Improve the service (aggregate, non-identifying analytics).

3. Service providers we use

We route your data through these subprocessors. Each is bound by their own terms to safeguard it:

Clerk — account authentication (admin, driver accounts only).
Neon + Vercel — database and application hosting.
Stripe — payment processing (card details are handled by Stripe; we do not store them).
Twilio — SMS delivery and the customer magic-link portal.
Vapi — AI voice intake, when enabled. Call recordings and transcripts are retained per the retention section below.
Google Maps / Places / Distance Matrix — address geocoding, route rendering, ETA computation.
UploadThing — object storage for vehicle photos, signatures, and driver compliance documents.
Resend — transactional email delivery.
Pusher — real-time dispatch updates to admin users.
Sentry — error monitoring (configured to not include customer PII in captured payloads).

4. Motor-club partners

When a job originates from a motor-club partner (e.g. Honk, Agero, Urgent.ly, AAA), the partner provides the customer's name, phone, pickup, destination, and vehicle details to us to fulfill the dispatch. Status updates and completion confirmations are reported back to the partner.

5. Data retention

Completed jobs: retained indefinitely for operational, insurance, and tax reasons, unless deletion is required by law.
Driver location pings: deleted after 24 hours.
Photos and signatures: retained for the life of the job record.
Call recordings / transcripts (if Vapi is enabled): retained for 90 days, then deleted unless required for a dispute.
Marketing emails: unsubscribe is honored immediately; your email is suppressed from future campaigns.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to lodge a complaint with a data-protection authority. Send requests to support@towpilot.example. We will verify your identity before acting on a request.

7. Children

The service is not directed to anyone under 18. We do not knowingly collect information from minors.

8. Changes

Material changes will be posted here with a new “last updated” date and, for account holders, emailed to you.

9. Contact

Privacy questions: support@towpilot.example · Toronto, Ontario, Canada