Privacy policy

Trading name

TowMate

Registered company name

Flottakezelő Kft.

Company number

13 09 242019 (registered in Hungary)

Registered office

Ady Endre utca 12., 2337 Délegyháza, Hungary

Tax number

22924890-2-13

Website

towmate-recovery.com

Support phone

+44 20 7187 3055

Contact

[email protected]

• Account details: name, email, phone number, password hash.
• Vehicle details: registration and description.
• Location data: pickup and drop-off addresses and coordinates. With location permission, the driver dashboard and job screens report the driver’s precise location for nearby-job matching and job tracking. The phone app can continue driver location updates in the background while its tracking session is active.
• Payment data: Stripe handles full card details. TowMate receives payment, subscription, refund and payout records, including bank-summary information used to check driver payouts.
• Driver application details and documents, and vehicle or job photos you upload.
• Booking messages, support conversations, ratings and diagnostic events.
• Account identifiers and device notification tokens used to deliver job alerts.
• Cookies and similar technologies (see Cookies section below).

• Contract: to match you with a Partner, take payment, provide receipts and support the job.
• Legitimate interests: fraud prevention, service safety, product improvement, and business analytics.
• Legal obligation: tax records, incident reporting, and responses to lawful requests.
• Consent: optional marketing emails and non-essential cookies — you can withdraw consent at any time.

Assigned Partners see your name, phone number, vehicle and live location while the job is active. We use trusted service providers ("subprocessors") to run the platform:

• Stripe — payments, subscriptions, driver onboarding and payouts.
• Google Maps Platform — mapping, geocoding and routing.
• Supabase — database, authentication, messages and file storage. Lovable Cloud also hosts the earlier TowMate service and records during our migration.
• Cloudflare — hosting and delivery of the replacement TowMate website.
• Resend and Twilio — transactional emails, receipts and text messages.
• OpenAI — responses from the in-app AI assistant, using the conversation and relevant booking or support context. Please do not send passwords, full card details or information unrelated to your request to the assistant.
• Apple and Google notification services — phone notifications.
• WhatsApp — when you choose to open a WhatsApp support or job-sharing link. Review the message before sending; WhatsApp also applies its own privacy policy.

We do not sell your personal data. We disclose data to authorities only where legally required.

Data is primarily stored in the UK and EU. Where a subprocessor transfers data outside the UK/EEA, we rely on UK/EU Standard Contractual Clauses and the UK Addendum, together with additional safeguards where needed.

Job and payment records are retained for 7 years to meet UK tax and consumer-law obligations. Account data is deleted within 30 days of a verified deletion request, except where law requires longer. Anonymised analytics may be kept indefinitely.

Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent at any time. Exercise any of these from Account → Data requests, or email [email protected]. We respond within one month.

You can complain to the UK’s Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

We use strictly-necessary cookies to keep you signed in and to secure the app. Optional analytics cookies only load with your consent, which you can change at any time from Settings → Privacy.

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production data is restricted, logged, and reviewed. We have an incident-response process and will notify you and the ICO of any personal-data breach that is likely to result in a risk to your rights, within 72 hours where required.

TowMate is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we have, contact us and we’ll delete it.

We’ll notify you in-app or by email of material changes at least 14 days before they take effect.