← Back to Haulr
Privacy Policy
Effective Date: April 1, 2026 | Last Updated: April 10, 2026
1. Introduction
Haulr Technologies LLC ("Haulr", "we", "our", or "us") operates the Haulr mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We are committed to protecting the privacy and security of our users, including both customers who request hauling services and independent drivers who fulfill those requests. This policy applies to all users of the Haulr platform, regardless of how they access or use the Service.
By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
Personal Information You Provide:
- Full name, email address, and phone number (required for account creation)
- Profile photo (optional, used to help drivers and customers identify each other)
- Payment information (credit/debit card details processed securely through Stripe — we never store full card numbers on our servers)
- Pickup and dropoff addresses for hauling jobs
- Item descriptions, dimensions, weight estimates, and photos submitted with hauling requests
- Communications with drivers, customers, and our support team (including in-app messages and support tickets)
- Ratings and reviews you leave for drivers or customers
- Feedback, survey responses, and other information you voluntarily provide
Driver-Specific Information:
- Driver's license number, issuing state, and expiration date
- Last four digits of Social Security Number (used for identity verification via Stripe)
- Date of birth (used for age verification and identity confirmation)
- Vehicle information including make, model, year, color, and license plate number
- Vehicle registration and insurance policy details (carrier name, policy number, coverage dates)
- Photos of driver's license, insurance card, and vehicle (front and rear)
- Bank account information (processed through Stripe Connect for driver payouts)
- Background check consent and results (conducted through third-party verification services)
Automatically Collected Information:
- Device type, model, operating system version, and unique device identifiers
- IP address and approximate geographic location derived from IP
- App version, usage data, screen views, and interaction patterns
- Push notification tokens (used to deliver real-time updates)
- General usage data for debugging and performance metrics
- Referral source and app install attribution data
- Session duration and frequency of use
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: Process hauling requests, match customers with nearby drivers, calculate upfront pricing, and facilitate secure payments and payouts
- Real-Time Tracking: Provide live location tracking during active hauls so customers can monitor their items in transit
- Communications: Send booking confirmations, driver assignment notifications, pickup and delivery updates, digital receipts, and promotional offers (with your consent)
- Safety & Verification: Verify driver identities, validate insurance and vehicle information, facilitate background checks, and maintain overall platform safety and integrity
- Payment Processing: Process customer charges, calculate driver payouts (80% of haul price), issue refunds, and generate tax documentation
- Service Improvement: Analyze aggregated usage patterns and feedback to improve app features, optimize driver dispatch algorithms, and enhance the overall user experience
- Customer Support: Respond to inquiries, troubleshoot issues, resolve disputes between customers and drivers, and provide technical assistance
- Legal Compliance: Comply with applicable federal, state, and local laws, regulations, tax requirements, and legal processes
- Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities on the platform
4. Location Data
Location data is fundamental to our Service. We collect and use location information as follows:
- Customers: We collect pickup and dropoff addresses that you enter when creating a hauling request. We may also request access to your device's GPS to auto-fill your current location as the pickup address. Customer location is not tracked beyond what is needed to fulfill the haul request.
- Drivers: During active hauls (from job acceptance through delivery completion), we collect real-time GPS location data from the driver's device. This enables live tracking for customers and helps us optimize dispatch and routing. Drivers' location is not tracked when they are offline or not actively fulfilling a haul.
- Route Calculation: We use Google Maps Platform APIs to calculate driving routes, estimate distances, determine travel times, and provide turn-by-turn navigation support for drivers.
- Pricing: Pickup and dropoff locations are used to calculate distance-based pricing components of each haul.
You can control location permissions through your device settings at any time. Disabling location services may limit certain features of the app, including the ability to auto-detect your pickup address and (for drivers) the ability to accept and fulfill haul requests.
5. Information Sharing & Disclosure
We share your information only in the following limited circumstances:
- Between Users: When a haul is booked and a driver is assigned, we share the customer's first name and pickup/dropoff addresses with the assigned driver. The driver's first name, profile photo, vehicle details (make, model, color, license plate), and real-time location are shared with the customer during active hauls.
- Service Providers: We share data with third-party service providers who assist us in operating the platform, processing payments, hosting data, and delivering communications (see Section 6 for details).
- Legal Requirements: We may disclose your information if required to do so by law, subpoena, court order, regulatory request, or other valid governmental authority.
- Safety & Protection: We may share information when we believe in good faith that it is necessary to protect the safety, rights, or property of our users, employees, or the general public, including to prevent fraud or enforce our Terms of Service.
- Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, user data may be transferred as part of the transaction. We will notify you of any such change in ownership or control.
- With Your Consent: We may share information for purposes not described in this policy if we have obtained your explicit consent.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We have never sold user data and have no plans to do so.
6. Third-Party Services
We rely on the following third-party services to operate and improve our platform. Each provider has their own privacy policy governing their handling of your data:
- Stripe — Payment processing for customer charges, driver payouts via Stripe Connect, and driver identity verification. Stripe is PCI DSS Level 1 certified. Stripe Privacy Policy
- Supabase — Cloud database hosting, user authentication, real-time data synchronization, and serverless edge functions. Supabase Privacy Policy
- Google Maps Platform — Address autocomplete, geocoding, route calculation, distance estimation, and map rendering within the app. Google Privacy Policy
- Cloudflare — Website and API hosting, content delivery network (CDN), DDoS protection, and SSL/TLS encryption. Cloudflare Privacy Policy
- OpenStreetMap — Map tile provider used to render route previews. Collects IP address when map tiles are requested. See their privacy policy.
We carefully vet our service providers and only share the minimum data necessary for them to perform their functions. We require all providers to maintain appropriate security measures and to process data only as instructed by us.
7. Data Security
We take the security of your data seriously and implement industry-standard technical and organizational measures, including:
- All data transmitted between your device and our servers is encrypted in transit using TLS 1.2+ (HTTPS)
- Sensitive data is encrypted at rest in our database
- Payment card data is processed exclusively by Stripe and is never stored on, or transmitted through, our own servers
- Driver documents (license photos, insurance cards) are stored in private, encrypted cloud storage with signed URLs that expire after one hour
- Sensitive fields such as SSN last four digits are stored with restricted database access and are never exposed through public APIs
- Row Level Security (RLS) policies are enforced at the database level, ensuring users can only access their own data
- Authentication is managed through secure token-based sessions with automatic expiration and refresh
- Administrative access to production systems requires multi-factor authentication (MFA)
- We conduct regular security reviews and update our infrastructure to address known vulnerabilities
While we strive to protect your personal information using commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents that may arise.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Our specific retention periods are:
- Account Data: Retained while your account is active. Upon account deletion request, personal data is permanently deleted within 30 days, except where retention is required by law.
- Transaction Records: Retained for 7 years after the transaction date to comply with tax, accounting, and financial reporting obligations.
- Driver Documents: Retained while the driver's account is active and for 1 year after account deactivation or termination, after which they are securely destroyed.
- Location Data: Real-time GPS tracking data from active hauls is retained for 90 days after haul completion for dispute resolution and quality assurance, then permanently deleted.
- Support Communications: Retained for 2 years to help us improve our support processes and resolve recurring issues.
- Aggregated Data: De-identified, aggregated analytics data may be retained indefinitely, as it cannot be used to identify individual users.
9. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you, including the categories of data collected and the purposes for which it is used
- Correction: Update or correct inaccurate or incomplete personal information through your account settings or by contacting us
- Deletion: Request deletion of your account and all associated personal data by emailing privacy@haulrapp.com
- Portability: Request a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON)
- Restriction: Request that we limit the processing of your personal data under certain circumstances
- Opt-Out of Marketing: Unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in any marketing email or adjusting your notification preferences in the app
- Push Notifications: Manage push notification preferences in the app settings or through your device's notification settings
- Location Permissions: Control location access through your device's system settings at any time
To exercise any of these rights, email us at privacy@haulrapp.com. We will verify your identity and respond to your request within 30 days. We will not discriminate against you for exercising any of your privacy rights.
10. Cookies & Tracking Technologies
We use cookies and similar tracking technologies on our website and within the Service for the following purposes:
- Essential Cookies: Required for user authentication, session management, and core functionality of the platform. These cannot be disabled without impairing the Service.
- Functional Cookies: Used to remember your preferences, language settings, and recently used addresses to provide a more personalized experience.
- Analytics Cookies: Help us understand how users interact with the Service, which features are most popular, and where users encounter issues. This data is used in aggregate to improve the platform.
- Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and abuse of the platform.
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from logging in or using key features of the Service.
We do not use cookies or tracking technologies for third-party advertising purposes.
11. Children's Privacy
The Haulr Service is not intended for use by anyone under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18, and we do not knowingly allow such persons to register for or use the Service.
If we become aware that we have inadvertently collected personal data from anyone under 18, we will take immediate steps to delete that information from our systems and terminate the associated account.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@haulrapp.com and we will take prompt action to remove the data.
12. International Data Transfers
Haulr is headquartered in and primarily operates within the United States. Our servers, databases, and third-party service providers are located in the United States.
If you access or use the Service from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.
By using the Service, you explicitly consent to the transfer of your information to the United States and acknowledge that your data will be subject to United States law. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
13. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain legal exceptions (such as data needed to complete a transaction or comply with legal obligations).
- Right to Opt-Out of Sale: We do not sell your personal information to third parties. If this practice ever changes, we will provide a clear opt-out mechanism.
- Right to Non-Discrimination: We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your CCPA rights.
- Right to Correct: You may request correction of inaccurate personal information we maintain about you.
- Right to Limit Use of Sensitive Information: You may request that we limit the use and disclosure of your sensitive personal information to purposes necessary to provide the Service.
To exercise your CCPA/CPRA rights, contact us at privacy@haulrapp.com. We will verify your identity before processing your request and respond within 45 days as required by law. You may also designate an authorized agent to make a request on your behalf.
14. Do Not Track Signals
Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to or alter our practices when we receive DNT signals from your browser.
However, we do not engage in cross-site tracking of our users, and we do not use third-party advertising trackers on our platform. We only use analytics and tracking technologies as described in Section 10 of this policy.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Post the updated policy on this page with a revised "Last Updated" date
- Send a push notification or email to registered users for material changes that significantly affect how we handle personal data
- Provide at least 30 days' notice before any material changes take effect, giving you the opportunity to review the updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.