Privacy Policy

Last updated: 25 August 2026

TowConnect ("we", "us") provides business-management software for towing and roadside operators. This policy explains what information we collect, why we collect it, and how we handle it - both for the businesses that subscribe to TowConnect and for the people whose details those businesses store while running their operations.

Information we collect

• Account information - when you create a workspace: your name, business name, email address, phone number, and workspace address.
• Billing information - subscription and payment details. Card and bank details are handled by our payment providers and never touch our servers. When you take online payments from your own customers through TowConnect, those payments are processed by your own payment provider account (currently Stripe), and your customers' card details go directly to that provider, never to us.
• Business data you enter - jobs, clients, vehicles, drivers, invoices, photos and documents your business records while using TowConnect. This data belongs to you.
• Technical data - sign-in timestamps, IP addresses and logs we need to keep the service secure and reliable.

Connected services (Google, Xero and other integrations)

If you connect a Gmail or Google Workspace account, TowConnect requests only the permission to send email on your behalf (the Gmail gmail.send scope) so your invoices and notifications come from your own address. We store the authorisation token securely, use it solely to send the emails you trigger from TowConnect, and never read, store, or analyse your mailbox. Disconnecting (one click in Connect → Email) deletes the token. TowConnect's use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

If you connect your accounting software (currently Xero, with further providers to follow), TowConnect requests access only to the contacts and accounting transactions (invoices and payments) of the organisation you choose to authorise - nothing else in your accounting file. We use that access in one direction you control: keeping the clients, invoices and payments you raise in TowConnect in sync with your accounting system, and reading back the payment status of those invoices so both systems agree. The authorisation tokens are stored securely on our servers and are never shared. Disconnecting (one click in your workspace's Integrations page) deletes the stored tokens and revokes TowConnect's access with the provider.

How we use information

• To provide, secure and improve the service.
• To send service emails you request or that the service requires (verification codes, invoices you send, trial and billing notices).
• To respond when you contact us for support.

We do not sell personal information, and we do not use your business data for advertising.

Data isolation and storage

Every workspace has its own isolated database. Your business data is only accessible to the users you authorise in your workspace and to the minimal platform operations (backups, support you request) needed to run the service. Data is stored on servers we control, backed up regularly, and retained while your subscription is active. If your workspace pauses or closes, we keep its data for 180 days so you can come back or take it with you. Before we delete a workspace we email its owner and send a complete export of the data, then delete it.

Sharing

We share information only with the service providers needed to operate TowConnect - hosting, email delivery (Amazon SES, processed in AWS's Sydney region, and Google), SMS delivery, and payment processing - each limited to their function, and where the law requires it.

Your rights

You can access, correct or export your data at any time from within the product, and you can ask us to delete your workspace and its data by contacting hello@towconnect.co. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth); if you believe we've mishandled your information, contact us and we'll respond promptly.

For customers in the United Kingdom, we handle personal data in accordance with the UK GDPR and the Data Protection Act 2018: you have the rights of access, rectification, erasure, portability, restriction and objection, and you may lodge a complaint with the Information Commissioner's Office (ICO). TowConnect is operated from Australia; where UK personal data is processed on our Australian infrastructure, we protect it with the safeguards described in this policy. As we expand to further regions, we'll update this policy to reflect the protections that apply there.

If a towing business stored your details

If your car was towed and the operator runs TowConnect, your name, contact details, vehicle, photographs and signature live in that operator's own workspace - the operator is who to contact first to see, correct or remove them, and we act on their instructions. A signing link opened from a text or email also records the time, network address and device it was signed from; that trail exists to protect the record for both sides. If you cannot reach the operator, contact us and we will help.

Contact

Questions about this policy: hello@towconnect.co. If we make material changes, we'll note the new date at the top of this page and, for significant changes, notify workspace owners by email.