TowGo
Menu

Privacy Policy

Last updated: 2026-07-05

1. About This Policy

This Privacy Policy explains how TowGo Marketplace LLC ("TowGo," "we," "us," or "our") collects, uses, shares, and protects information about you when you use our websites, mobile apps, and services (together, the "Platform").

We wrote this in plain English. If anything is unclear, email us at [email protected] and we will explain.

2. Information We Collect

2.1 Information you give us

  • Account info — name, email, phone number, password.
  • Profile info — optional photo, preferred name.
  • Vehicle info (Customers) — make, model, year, color, and license plate for your vehicle.
  • Payment info — card or bank details processed by our payment processor. We do not store full card numbers on our servers.
  • Driver documents (Drivers) — driver's license, commercial insurance certificate, vehicle photos, tax forms.
  • Shop documents (Shops) — business license, shop photos, W-9.
  • Communications — messages you send through in-app chat, support tickets, and email.

2.2 Information we collect automatically

  • Location — GPS coordinates when you use the Platform, or when Drivers are active. We collect location only during active service sessions.
  • Device info — device type, OS version, unique device IDs, push tokens.
  • Usage data — screens visited, actions taken, crash reports.
  • Log data — IP address, browser type, and access timestamps.
  • Cookies (website only) — see our Cookie Policy for details. Our mobile app does not use cookies.

2.3 Information from other sources

  • Sign-in providers — if you sign in with Google or Apple, we receive your name and email from them.
  • Payment processor — payment status and last four digits of your card.
  • Verification providers — phone-number verification status.
  • Background-check providers (Drivers) — criminal history and MVR results.

2.4 Sensitive personal information

Under CCPA/CPRA, "sensitive personal information" includes government IDs, precise geolocation, and account credentials. We collect this information only where it is necessary to provide the service — for example, a Driver's license for onboarding, or GPS coordinates during an active job. We do not use sensitive personal information to infer characteristics about you, and we do not sell or share it for cross-context behavioral advertising.

3. How We Use Information

We use your information to:

  • Provide the Platform — match you with Drivers, process payments, send job updates.
  • Verify identity and eligibility, including background checks for Drivers.
  • Send transactional messages — receipts, arrival notifications, dispute updates.
  • Provide customer support and resolve disputes.
  • Detect and prevent fraud and abuse.
  • Improve the Platform using anonymized analytics.
  • Comply with the law, including tax and safety regulations.
  • Send marketing messages — only if you opt in, and you can opt out any time.

4. How We Share Information

We do not sell your personal information. We do not "share" your personal information for cross-context behavioral advertising as those terms are defined in California's CPRA.

We do share information as needed to run the Platform:

  • With the other party to your job. For example, we share a Customer's name, phone number, pickup location, and vehicle info with the Driver assigned to the job. We share the Driver's name, photo, vehicle info, and ratings with the Customer.
  • With service providers who work on our behalf. These include:
    • Stripe — payment processing.
    • Firebase / Google — push notifications, sign-in.
    • Twilio — SMS verification, in-app calling.
    • AWS and Cloudflare — hosting, storage, and content delivery.
    • Sentry — error monitoring (anonymized).
    • PostHog — product analytics (anonymized).
    • Background check vendors — Driver screening.
  • For legal reasons. We may share information if the law requires it, or to protect our rights, safety, or property.
  • Business changes. If we sell all or part of our business, information may transfer to the buyer. We will notify you before your information becomes subject to a different privacy policy.

5. How Long We Keep Information

We keep information only as long as we need it. Retention depends on the category of data:

| Category | Retention | | --- | --- | | Account profile (name, email, phone) | Until you delete your account, then 30 days grace | | Payment records (invoices, receipts, payouts) | 7 years (IRS §6001, Michigan tax rules) | | Job records (pickup, drop-off, ratings) | 3 years for dispute resolution and safety review | | Chat and support messages | 2 years | | GPS trails (during active jobs) | 90 days for safety review, then anonymized | | Background check results (Drivers) | Length of engagement + 3 years | | Tax forms (1099, W-9) | 7 years | | Marketing preferences (opt-outs) | Indefinite (needed to honor your choice) |

When you delete your account, we remove your personal profile, chat history, GPS trails, ratings, and photos on the schedule above. Some records — like payment history and tax forms — are kept longer because the law requires it. Records we must keep are stripped of direct identifiers where possible.

For the full deletion flow, see Section 7 and the Account Deletion process linked from Settings > Account.

6. Your Choices

  • Update your info — edit your profile in the app.
  • Turn off marketing — Settings > Notifications, or click "unsubscribe" in any marketing email.
  • Turn off location — you can disable location permission in your device settings, but many features will not work without it.
  • Delete your account — Settings > Account > Delete Account. See Section 7.

7. Your Rights

7.1 Everyone

You have the right to:

  • Know what personal information we hold about you.
  • Access a copy of your information in a portable format.
  • Correct information that is wrong.
  • Delete your information (with limits — see Section 5 for what we must keep).
  • Opt out of marketing.

To use any of these rights, email [email protected] or use the tools in Settings.

7.2 California residents

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, you have extra rights:

  • Right to know the categories of information we collect, why we collect them, and who we share them with.
  • Right to delete personal information (with the usual legal exceptions).
  • Right to correct inaccurate information.
  • Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising, but you may still submit an opt-out request. See our Do Not Sell or Share My Personal Information page.
  • Right to limit use of sensitive personal information — we only use sensitive personal information for the purposes described in Section 2.4.
  • Right to non-discrimination for exercising your rights.

We honor Global Privacy Control (GPC) browser signals as an opt-out request from any California resident.

Categories of personal information collected in the last 12 months (CPRA §1798.100):

| Category | Collected? | | --- | --- | | A. Identifiers (name, email, IP) | Yes | | B. Personal records (address, phone) | Yes | | C. Protected classifications (age) | Only where required (Driver 18+) | | D. Commercial information (transactions) | Yes | | E. Biometric information | No | | F. Internet or network activity | Yes | | G. Geolocation data | Yes | | H. Sensory data (audio) | Only when you call in-app support | | I. Professional information (Driver license) | Yes for Drivers | | J. Education information | No | | K. Inferences | Limited (ratings, service preferences) | | L. Sensitive personal information | Government ID, precise geolocation (Driver), credentials |

To exercise your California rights, email [email protected] with "California Request" in the subject line. We will verify your identity before we respond. You may also authorize an agent to act for you.

7.3 Other US states with privacy laws

If you live in Virginia, Colorado, Connecticut, Utah, Texas, or another state that has passed a comprehensive privacy law, you have similar rights. Email [email protected] with the name of your state in the subject line.

8. Children

The Platform is not for children under 13. We do not knowingly collect information from children under 13. If you believe a child has used the Platform, email [email protected] and we will delete their information.

9. Security

We use industry-standard measures to protect your information, including:

  • TLS encryption for data in transit.
  • Encrypted storage for sensitive credentials.
  • Access controls and audit logging.
  • Payment data handled by our PCI-DSS-compliant processor.

No system is 100% secure. Use a strong password and turn on two-factor authentication where offered. Report suspected security issues to [email protected].

10. Third-Party Links

The Platform may link to sites we do not control. This Privacy Policy does not apply to those sites. Please review their policies.

11. Changes to This Policy

We may update this Privacy Policy. When we do, we will post the new version at /legal/privacy-policy and update the "Last updated" date. For material changes, we will notify you by email or in the app at least 30 days before they take effect.

Prior versions are archived at /legal/privacy-policy/<version>.

12. Contact Us

For privacy questions or to exercise your rights:

TowGo Marketplace LLC Detroit, Michigan Email: [email protected] Support: [email protected]