Privacy Policy

1. Information We Collect

We collect information you provide and records generated when you use the Service, such as:

• Contact information (name, email, phone number)
• SMS consent records, phone-verification status, opt-out status, and message-delivery metadata
• Vehicle information (license plate, VIN, make, model)
• Location data for vehicle searches
• Chat messages and vehicle recovery context you send to the AI assistant, including license plate, state, vehicle details, towing location, and related recovery details you provide
• Account credentials for registered users
• Payment status, receipt, and checkout metadata for subscriptions
• Support messages, analytics events, device/browser data, and cookies

2. How We Use Your Information

We use the information we collect to:

• Help you locate and recover your towed vehicle
• Provide cost estimates and recovery instructions
• Provide AI-powered vehicle recovery assistance after you allow AI data sharing in the app
• Process payments and maintain your account
• Send service updates and important notifications
• Verify phone ownership and send optional vehicle-discovery text alerts after you expressly opt in
• Improve our services and develop new features
• Measure site performance, search flow usage, checkout starts, and unlock events
• Comply with legal obligations

3. Information Sharing

We do not sell, trade, or rent your personal information. We may share your information:

• With recovery partners when needed to support protected vehicle recovery workflows
• With towing companies and impound lots to help locate your vehicle
• With Google Gemini AI services, after you allow AI assistance, to process your chat messages and vehicle recovery context so the assistant can respond
• With Stripe for web payments, Apple for iOS purchases, and Google Play and RevenueCat for Android purchase processing and entitlement management
• With PostHog for optional mobile product analytics only after you enable Share Usage Analytics, and with Umami and Google Analytics for website analytics when enabled
• With Google Ads to measure whether our ads lead to subscriptions, as described in Cookies and Tracking
• With Twilio to verify phone ownership, send optional text alerts, process delivery callbacks, and honor messaging keywords such as STOP and HELP
• When required by law or to protect rights and safety
• With your consent or at your direction

Mobile information, including phone numbers, text messaging originator opt-in data, and consent, will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not sold, rented, transferred, or shared with third parties or affiliates for marketing or promotional purposes. We disclose a mobile number and operational messaging data only to service providers such as Twilio and participating carriers as needed to verify the number, deliver the text alerts you requested, process delivery events, and honor opt-out requests.

4. AI Assistance and Permission

Towji uses Google Gemini AI services to help answer vehicle recovery questions. Before Towji sends personal data to the AI assistant in the app, the app asks for your permission.

If you allow AI assistance, Towji may send your chat messages, license plate, state, vehicle details, towing location, and recovery context you provide to Towji servers and Google Gemini AI services so the assistant can respond. If you do not allow AI data sharing, Towji will not send your chat or vehicle details to Google Gemini AI services, and some AI chat features may be unavailable or limited.

Google Gemini AI services process this information as a service provider for the AI assistance feature. We require service providers to protect personal data using safeguards appropriate to the information they process.

4A. Optional Text Alerts

Towji Vehicle Discovery Alerts are optional recurring automated service messages. If Towji makes the program available to your account and you enroll, we use the mobile number you provide, a verification code sent through Twilio, and a versioned record of your express consent to confirm that you control the number and requested the alerts. Consent to receive text messages is not a condition of purchase.

Message frequency varies based on your monitoring activity and matched vehicle-discovery events. Message and data rates may apply. Towji discovery texts do not include a license plate, VIN, facility, address, fee, or other recovery detail; they direct you to sign in securely instead.

Reply STOP to cancel or HELP for help. You may also disable alerts in the Towji app. For support, email support@towji.com. We retain consent, verification, delivery, and opt-out records only as needed to operate the program, prevent unwanted messages, resolve support issues, and demonstrate compliance.

Review our public, privacy-safe documentation of the verified-phone and express-consent flow on the SMS Consent & Text Alerts page.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. This includes encryption, secure servers, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Your Rights

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Opt-out of marketing communications
• Withdraw SMS consent by replying STOP or disabling text alerts in the app
• Withdraw consent where applicable

You can delete your account from the Towji app profile or use our account-deletion page. You may also request access, correction, deletion, or export through our secure contact form. We may ask for information needed to verify the request before acting on it.

7. Cookies and Tracking

On the website, we use cookies and similar technologies for login/session behavior, saved preferences, security, analytics, and checkout flow measurement. If Umami or Google Analytics is configured, it may collect website events such as page views, search flow activity, checkout starts, and subscription purchases.

When you arrive from a Google ad, the Google Ads tag sets a cookie that records the ad click. When you buy a subscription, we send Google the page address without its query details (except ad-click and campaign tags), the plan amount, and a one-way hashed order reference. We do not send your license plate, email, phone number, or payment details to Google, and we turn off ad personalization signals. Google's use of this data is covered by its own privacy policy. You can manage Google ad settings at adssettings.google.com or block these cookies in your browser.

In the mobile app, PostHog product analytics is off by default and only starts after you enable Share Usage Analytics. Towji does not send chat text, license plates, vehicle details, contact details, exact location, towing addresses, authentication tokens, or payment credentials to PostHog. You can disable analytics in Settings at any time. You can control website cookies through your browser settings; some account, checkout, and dashboard features may not work correctly if cookies are disabled.

8. Payments

Web checkout is processed by Stripe. iOS purchases are processed by Apple, and Android purchases are processed by Google Play Billing with RevenueCat used to manage mobile purchase entitlements. Towji does not store full card numbers or card security codes. We receive payment status, receipt, customer, entitlement, and transaction metadata needed to unlock paid recovery details, provide support, prevent abuse, and keep business records.

9. Retention

We keep search, support, account, analytics, and payment records only as long as needed to provide the service, support users, prevent fraud or abuse, meet legal obligations, and improve product reliability. When data is no longer needed, we delete it or de-identify it where practical.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: