Legal

Privacy Policy

Last updated: March 24, 2026

1. Who We Are

TowTag Inc. operates the TowTag platform — a vehicle towing management service for tow operators, parking enforcement partners, and the general public. This policy explains what data we collect, how we use it, and your rights. Questions? Email privacy@towtag.io.

2. Data We Collect

We collect data in three ways:

Account Data

Name, email address, company name, phone number, and license number provided during signup or in Settings.

Usage & Platform Data

Vehicle reports you submit (plate, location, photos, violation type), dispatch activity, marketplace interactions, and feature usage patterns.

Technical Data

IP address, browser type, device identifiers, and session data collected automatically to secure and operate the service.

3. How We Use Your Data

  • To provide and maintain the TowTag platform and your account.
  • To process vehicle reports, enable dispatch, and facilitate marketplace access.
  • To send transactional emails (confirmations, billing receipts, security alerts).
  • To send push notifications for tow activity (if you opt in).
  • To detect abuse, fraud, and security threats.
  • To improve the platform based on usage patterns (aggregated, not individual).

We do not sell your personal data. We do not use your data to train AI models.

4. Vehicle Reports & Public Data

Reports submitted through the public report form may contain vehicle information (plate, make, model, color) and location data. This information is used to populate the TowTag marketplace. The public marketplace shows redacted plate data only. Full details are available exclusively to subscribed operators. Report submitters’ contact information is never shown publicly.

5. Photos & Evidence

Photos uploaded as part of a vehicle report are stored in our secure cloud storage. They are associated with the report and accessible only to the submitter and authorized operators. Photos are retained for 12 months after a report is closed, then permanently deleted unless required by law.

6. Data Sharing

We share your data only with:

  • Supabase — our database and auth provider, hosted in the United States.
  • Vercel — our hosting platform, used to serve the web application.
  • Law enforcement — if legally required by valid court order or subpoena.

No data is shared with advertisers, data brokers, or marketing platforms.

7. Cookies & Tracking

TowTag uses session cookies to keep you logged in and functional cookies to remember your preferences (e.g. sidebar state). We do not use third-party advertising trackers or cross-site analytics. You can clear cookies at any time via your browser settings.

8. Push Notifications

If you grant notification permission, we store a push subscription token associated with your account to send tow alerts. You can revoke this at any time through your browser or device notification settings. Revoking permission does not affect any other account features.

9. Data Retention

  • Active account data is retained as long as your account is open.
  • Closed account data is deleted within 90 days of account deletion.
  • Vehicle report photos are deleted 12 months after report closure.
  • Billing records are retained for 7 years for tax compliance.

10. Your Rights

You have the right to:

  • Access — request a copy of all data we hold about you.
  • Correction — update inaccurate or incomplete data via Settings or by contacting us.
  • Deletion — request that we delete your account and associated data.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to specific uses of your data.

To exercise any of these rights, email privacy@towtag.io. We respond within 30 days.

11. Security

TowTag uses industry-standard security practices: encrypted connections (TLS), row-level security on all database tables, hashed passwords via Supabase Auth, and access controls scoped by user role. We conduct regular security reviews and patch known vulnerabilities promptly. No system is perfectly secure — if you discover a vulnerability, please report it to security@towtag.io.

12. Children

TowTag is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy as the Platform evolves. Material changes will be communicated via email or in-app notice. Your continued use of TowTag after changes take effect constitutes acceptance of the updated policy.

14. Contact

For privacy questions or data requests:

Company: TowTag Inc.
Address: Dallas, TX, United States