Skip to content
TowMileJoin waitlist
Legal

Privacy Policy

Effective June 11, 2026. We update this policy when we add features that change how data is handled. Material changes will be announced on this page at least 14 days before they take effect.

Draft — under attorney review. Use is governed by the version posted at the time you used the service.

1. Who we are

TowMile is an on-demand roadside-assistance marketplace and directory, operated by Express Services Group dba TowMile ("TowMile", "we", "us"). Through our website and mobile apps, riders can browse listings and request help (tow, jumpstart, tire change, lockout, fuel, winch-out, mobile mechanic), and independent shops can receive, accept, and get paid for those jobs. Browsing the directory is free and requires no account.

2. Information we collect

  • Account info: phone number and/or email, name, and role (rider or shop). Authentication uses one-time codes — we do not store passwords.
  • Precise location (riders): when you request help in the app, we use your device GPS while the app is in use to find nearby shops, route the job, and show ETA. We do not track your location in the background.
  • Job details: service type, pickup/drop-off addresses, vehicle make/model/year, tire size, issue description, and the photos you attach (e.g. a tire sidewall, rim, or damage) so shops bring the right equipment.
  • Payment information: processed by our payment provider, Stripe. We do not store full card numbers — Stripe stores them and returns a token plus the card brand and last four digits, which we keep to show you which card is on file and to authorize and charge jobs. See Section 5.
  • In-app messages: the chat between a rider and the assigned shop for a job. See Section 6.
  • Shop verification documents (shops only): if you operate as a shop, the documents you upload to get verified — insurance certificates, driver's / commercial / business licenses, vehicle registration, W-9/EIN. See Section 7.
  • Ratings & reviews: the star ratings and optional written feedback riders and shops leave after a job.
  • Push tokens: a device token (APNs/FCM), if you enable notifications, so we can alert you about offers, status changes, and messages.
  • Usage & device data: IP address, device type, app version, and event logs, used to keep the service online, prevent fraud, and improve reliability.

3. What we do NOT collect

  • Background or continuous location — GPS is used only while you have a request open in the app.
  • Full payment card numbers — these go directly to Stripe and never touch our servers.
  • Government IDs or SSNs from riders. (Shops provide business/tax documents for verification and payouts.)
  • Data from anyone under 18. TowMile is for adults; do not use it if you are under 18.

4. Location data

Riders' precise location is collected only when the app is open and you are requesting or receiving help. We use it to match you with nearby shops, calculate distance and ETA, and let the assigned shop find you. We do not sell location data or use it for advertising. You can deny or revoke location permission in your device settings; without it, instant dispatch can't locate you.

5. Payments and Stripe

Payments are processed by Stripe, a PCI-DSS Level 1 certified processor. When a shop accepts your job, we place an authorization hold on your saved card for the quoted amount plus a flat service fee; the hold is captured when the job is completed. If you cancel after a shop is already on the way, a cancellation/no-show fee may be captured (the rest is released). Browsing and requesting are free — we never charge you to look. Shops are paid through Stripe Connect and provide their own banking/tax details directly to Stripe. We receive transaction metadata (amounts, status, card brand/last-4) but not full card numbers. Stripe's handling of payment data is governed by its own privacy policy.

6. In-app messaging

Once a shop accepts your job, you and that shop can message each other in the app to coordinate. Messages are stored and visible to both parties and to TowMile for safety, support, and dispute resolution. Do not share sensitive personal or payment details in chat. We may review messages if a dispute or abuse report is filed.

7. Shop verification documents

Shops upload documents (insurance, licenses, registration, tax forms) so we can verify they're legitimate and enable payouts. These are stored securely and shared only with the staff and service providers (e.g. Stripe for identity/payout verification) needed to review them. We display only a "Verified" badge to riders — never the underlying documents. We retain verification records while a shop is active and for a reasonable period afterward to meet legal and tax obligations.

8. How we share data

We do not sell your data. We share it only with:

  • The other party to a job: when a shop accepts, we reveal the shop's business name, rating, and contact to the rider, and the rider's name, location, and contact to the shop, so the service can happen. Contact is hidden until a job is accepted.
  • Service providers we use to run TowMile: Stripe (payments and payouts), Cloudflare (hosting, DNS, security), Apple/Google (push notifications), email and SMS providers (for codes and notifications), and analytics. Each processes data only on our behalf.
  • Law enforcement, only when compelled by a valid subpoena or court order. We do not provide voluntary access.
  • A successor entity if TowMile is sold or merged, with 30 days' notice before any transfer.

9. SMS messaging (TCPA)

If you provide your phone number, you consent under the Telephone Consumer Protection Act (TCPA) to receive transactional SMS from TowMile — login codes and job notifications. We do not send marketing SMS. Standard message and data rates may apply. Reply STOP to opt out of all future SMS, HELP for help. Opt-outs are honored immediately and permanently for that number.

10. Email messaging (CAN-SPAM)

We send transactional emails (verification codes, security and account notices), which are exempt from CAN-SPAM unsubscribe requirements. Any marketing email includes a one-click unsubscribe we honor within 10 business days.

11. Directory listings

Our national directory of shops is sourced in part from public business records and the Overture Maps Foundation (Apache License 2.0). If you are a shop owner and want your listing removed or corrected, email [email protected]; we act within 7 business days.

12. California residents (CCPA/CPRA)

You have the right to know what personal information we hold, request a copy, request deletion, correct it, and not be discriminated against for exercising these rights. Email [email protected] with the subject "CCPA Request." We respond within 45 days. We do not sell or share personal information as defined by CPRA.

13. Account deletion

You can delete your account anytime in the app under Profile → Delete account, or by emailing [email protected]. Deletion permanently removes your profile, saved details, request history, and saved card reference. We may retain limited records (e.g. completed-transaction and tax records) where required by law.

14. Security

All traffic is encrypted with TLS. We don't store passwords or full card numbers. We follow standard practice for incident response and will notify affected users within 72 hours of confirming any breach involving personal data.

15. Contact

Express Services Group dba TowMile
[email protected]

← Back to home