Privacy Policy

Effective Date: May 14, 2026

Towlos, Inc. (“Towlos” or “we,” “us” or “our”) respects your privacy. This Privacy Policy (“Policy”) describes how we collect, use, protect and disclose your Personal Data in connection with your use of our website, towlos.com, our mobile applications for iOS and Android (the “App”), together with the features, functionalities, and other services available through our website and App (collectively, the “Website and App”), and pursuant to our business operations and services (“Services”), as well as when you interact with us on other platforms, including social media sites such as Facebook and Instagram (“Third Party Sites”). Our Website and App, Services, and Third Party Sites are collectively referred to herein as our “Platform.”

You can access, participate in, and interact with our Platform in many ways, including from a computer or mobile device. This Policy applies regardless of how you access, participate in, or interact with our Platform. Depending on how you interact with our Platform, we may need to provide you with additional information about our data practices; we may do this through notices on our Platform or via direct communications with you.

Please read this Policy carefully. If you do not want us to collect, use or disclose your Personal Data in the ways described in this Policy, please do not access, participate in, interact with or use our Platform. By using our Platform, you acknowledge that you understand that we may use your Personal Data as described in this Policy. If you have any questions, please contact us at [email protected].

PERSONAL DATA AND OTHER INFORMATION WE COLLECT

Our primary goals in collecting Personal Data are to facilitate bookings, conduct our business operations, and improve our Platform.

When we refer to “Personal Data” in this Policy, we mean information that identifies, relates to, describes or is reasonably capable of being associated with a specific person — either directly or in combination with other available information. Personal Data does not include publicly available government records or information that has been deidentified or aggregated in a way that cannot be used to identify a specific individual.

Categories of Personal Data We Collect

Depending on how you access, use, or otherwise interact with our Platform, we, or third parties acting on our behalf, may collect the following categories of Personal Data:

  • Identifiers and contact information, such as your real name, alias, email address, telephone number, postal address, social security number, driver’s license number, unique personal identifier, date of birth, online identifier, IP address and other similar information. For identity and eligibility verification, we also collect and store images of your driver’s license and proof of insurance; these documents are stored on Amazon S3 with restricted access and used solely for verification purposes;
  • Internet and other similar network activity, such as your browsing history, search history, and interactions with our Platform and online advertisements;
  • Financial information, such as bank account numbers and other payment-related information;
  • Payment information, such as credit card information and similar information;
  • Transactional information, such as information about bookings and purchases you have made or participated in through our Platform;
  • Communication information, such as information contained in voicemails, chats, emails, and other similar communications;
  • Location information, such as where you live and where you are located. When you use the Towlos App, we request access to your device’s location only while you are actively using the App (“When in Use” permission on iOS; foreground-only on Android). We use this data to populate “Near Me” search results and to suggest delivery addresses. We do not access your device’s location in the background;
  • Device permission data, including photos and images you capture or upload using your device’s camera or photo library. When using the Towlos App, you may be prompted to grant camera and photo library access for the following purposes: (a) uploading or updating your profile photo; (b) providing images of your driver’s license and proof of insurance for identity and eligibility verification; and (c) documenting trailer condition with photos taken at pickup and return. You may choose not to grant these permissions, but doing so may limit certain App features; and
  • Other information you provide to us.

Other Information We Collect

We, or third parties acting on our behalf, may collect certain information about your device through the normal operation of our Platform and through cookies, pixels, and other web technologies (collectively, “Usage Data”). Usage Data generally does not identify a specific person on its own. However, if we link Usage Data with Personal Data, we will treat the combined information as Personal Data subject to this Policy.

Depending on how you interact with our Platform, Usage Data may include:

  • Device information, such as IP address, operating system, browser type, language preferences, mobile device identifier, and other similar information;
  • Push notification tokens. When you enable push notifications in the Towlos App, your device’s push notification token (APNs on iOS, FCM on Android) is stored on our servers and registered with Amazon Web Services SNS so we can send transactional alerts, including booking approvals, message notifications, and pickup and return reminders. You may disable notifications at any time in your device settings;
  • Interaction data, such as links clicked, pages or screens viewed, access and session times, and interactions with emails we send;
  • Network activity information, such as websites visited and search engine results associated with a device that accesses our Platform;
  • Other information automatically collected by cookies and similar technologies; and
  • Any other information that a browser or device automatically sends whenever connected to a website or online application.

HOW WE COLLECT PERSONAL DATA

A large portion of the Personal Data we collect comes directly from you. In some cases, we may collect Personal Data from third parties as described below.

Directly from You

When you access, use, or otherwise interact with our Platform — including when you create an account, book a trailer, list a trailer, submit verification documents, or contact us — we may ask you to provide certain Personal Data.

From Third Parties

We, or third parties acting on our behalf, may collect Personal Data about you from third parties, including online and offline sources, entities affiliated with us, our service providers, social media platforms, and advertising networks (collectively, “Third Party Sources”). This includes:

  • When you access or interact with our Platform through Third Party Sites, or associate your use of our Platform with Third Party Sites, you authorize us to collect, share, store, and use any Personal Data we receive from those Third Party Sites. You may be able to revoke such access through your account settings on the applicable Third Party Site.
  • When you interact with us on social media sites such as Facebook or Twitter, we may receive information about you from those sites.
  • We may receive Personal Data about you from third parties that provide services to us in connection with the operation of our Platform, including hosting providers, payment processors, and analytics providers.

We may combine Personal Data we receive about you from multiple sources, including information collected directly from you and information received from Third Party Sources.

HOW WE COLLECT USAGE DATA

We collect Usage Data through several means, including:

  • Our Platform systems. When you access or use our Platform, our systems automatically record information your browser or device sends, including connection duration and in-session activity.
  • Cookies. Cookies are small data files stored on your device. We use first-party cookies to recognize returning devices and third-party cookies from partners to understand usage and support advertising. You can manage cookies in your browser settings, though disabling them may affect Platform functionality. Learn more at allaboutcookies.org.
  • Advertising data collection. We may work with vendors such as Google Ads to serve targeted advertising. These vendors may collect IP addresses, device identifiers, and browsing behavior using cookies, pixels, and similar technologies. You may opt out via adssettings.google.com or aboutads.info/choices.
  • Other tracking technologies, such as web beacons, clear gifs, and pixel tags, which we may use in our Platform and emails to measure delivery, open rates, and other engagement metrics.
  • Third-party analytics tools, including:

Please note, we have not yet developed a response to browser “Do Not Track” signals and do not change our data collection practices when we receive such signals. We will continue to evaluate potential responses in light of industry developments or legal changes.

Third Party Information Collection

Third parties may collect information about you through our Platform, including third parties whose content is linked to on our Platform. Other users may also collect information about you that you make generally available on our Platform. We are not responsible for any misuse of such information. If you believe another user has misused your Personal Data, please contact us at [email protected].

We encourage you to read the privacy policies of any third-party platforms, applications, or content you access.

HOW WE USE PERSONAL DATA

We use Personal Data for various purposes to operate and improve our Platform and conduct our business. The primary purposes include:

  • Operational purposes — including: (1) operating and improving our Platform and presenting content to facilitate bookings and other transactions; (2) validating your identity and eligibility; (3) fulfilling contractual obligations and enforcing our rights; (4) notifying you about policy changes; (5) sending booking updates and transactional alerts via email and push notifications; (6) providing customer service; (7) conducting statistical analysis; (8) complying with legal and regulatory requirements; (9) customizing your experience; (10) protecting against fraud and legal claims; (11) cooperating with law enforcement when necessary; (12) any purpose you authorize; and (13) other lawful business purposes.
  • Marketing purposes — including notifying you of promotions, offers, and events via push notifications, email, and other means, subject to applicable law. We may link Personal Data with other information to facilitate targeted advertising on and off our Platform. You may opt out as described in the “Managing Your Personal Data” section below.

We will not use your Personal Data for materially different, unrelated, or incompatible purposes without providing you notice.

We may use and disclose aggregated, anonymized, or de-identified information (“Anonymized Data”) for any lawful purpose. Our use of Anonymized Data is not subject to this Policy.

SHARING PERSONAL DATA WITH THIRD PARTIES

To operate our Platform and provide our Services, we may share Personal Data with the following categories of third parties:

  • Our Service Providers, including for payment processing, data hosting, marketing, and fraud protection. We use Stripe as our payment processor and do not retain credit card numbers; all payment information is provided directly to Stripe and governed by stripe.com/privacy. Real-time chat between guests and hosts is delivered via CometChat (CometChat, Inc.), which processes message content and metadata to route messages between users; see cometchat.com/legal-privacy-policy. We currently perform identity and eligibility verification using documents you submit directly to us. We may in the future engage a third-party identity verification provider to assist with this process; if we do so, we will update this Policy to identify that provider.
  • Our Operational Service Providers, including marketing, data hosting, and fraud prevention vendors. We require these providers to exercise reasonable care to protect your Personal Data and restrict their use to the purposes for which we provided it.
  • Our Marketing Partners, to facilitate delivery of targeted ads, promotions, and offers to you on and off our Platform.
  • Protect+ Insurance. Towlos Protect+ is an in-house insurance product administered directly by Towlos, Inc. Personal Data you provide in connection with a booking — including your name, contact information, driver’s license information, and booking details — may be used internally to administer coverage and process claims. We do not currently share this information with third-party insurers, underwriters, or claims administrators. If Towlos engages a third-party insurance partner in the future, we will update this Policy to identify that partner and describe the data shared.
  • Depending on how you interact with our Platform, we may share your name, profile information, profile picture, and certain location information with other users for purposes related to facilitating transactions.
  • In the event of a merger, acquisition, bankruptcy, or other sale or transfer of our assets, we may transfer Personal Data to third parties as part of that transaction. The use and disclosure of transferred Personal Data will remain subject to this Policy, except as otherwise required by law or adopted by a successor entity.
  • Government and law enforcement, as necessary to comply with applicable law, respond to legal process, protect our rights or the rights of third parties, or ensure the safety of any person.
  • Any third party to whom you consent or instruct us to provide your Personal Data.

DATA RETENTION

We retain your personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Specifically: account and profile information is retained while your account is active; transaction and rental records are retained for up to 7 years for tax and legal compliance; driver’s license and insurance images are retained for the duration of your account plus a reasonable period for dispute and claims resolution; chat messages are retained while your account is active; and marketing preferences are retained until you opt out. Aggregated or de-identified information may be retained indefinitely.

PROTECTING YOUR PERSONAL DATA

We maintain commercially reasonable safeguards to protect the security and privacy of Personal Data we collect in connection with our Platform. Nevertheless, no method of transmission over the internet or method of electronic storage is completely secure. Your Personal Data may be intercepted without our knowledge or consent. We cannot guarantee the security of any information you disclose online, and you do so at your own risk.

CHILDREN’S PRIVACY

We do not direct any portion of our Platform to children under the age of 13. If we learn that we have collected Personal Data from anyone under the age of 13, we will take appropriate steps to delete this information. If you are a parent or guardian and believe your child under 13 has submitted Personal Data to us, please contact us at [email protected]. We will make reasonable efforts to remove such information from our databases.

MANAGING YOUR PERSONAL DATA

We offer you several choices with respect to how we use your Personal Data:

  • To update, correct, or delete Personal Data, or to otherwise contact us about our use of your information, please email [email protected].
  • You can delete your Towlos account at any time from within the mobile app (Profile → Edit Profile → Delete Account) or by visiting towlos.com/delete-account. When you delete your account, we will delete the personal information associated with your account, except where we are required or permitted to retain it. We retain certain information after account deletion for legal, tax, fraud prevention, and dispute resolution purposes, including transaction and rental records held by us and our payment processor Stripe. We will complete deletion requests within 30 days.
  • To opt out of marketing communications, follow the unsubscribe instructions in any marketing email or adjust your notification settings within the App. Opting out of marketing communications will not affect transactional notifications related to your bookings or account.

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, under California’s Shine the Light Law (California Civil Code Section 1798.83) you have the right to request the following information regarding our disclosure of your personal information to third parties for direct marketing purposes: (1) the categories of personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year; (2) the names and addresses of the third parties that received the information; and (3) if the nature of the third party’s business cannot be determined from their name, examples of the products or services they marketed. This information may be provided in a standardized form that is not specific to you.

You are permitted to obtain this information from us once a year, free of charge. To make such a request, please submit your request in writing to [email protected] with the subject line “CA Privacy Rights Request.”

CHANGES AND UPDATES TO THIS POLICY

Because the methods used to protect your Personal Data and the services we provide are continually evolving, this Policy may change at any time. Unless otherwise noted, changes will be effective upon posting. We will provide notice of material changes on our Platform or via email and will update the “Effective Date” above. Please check back periodically.

Your continued use of our Platform after any changes to this Policy become effective constitutes your acknowledgement that you understand we may continue to use your Personal Data as described in this Policy.

CONTACT US

We welcome your questions, comments, and concerns about privacy. Please email us at [email protected] with any questions or feedback about our privacy practices.