TowFlow Privacy Policy
Updated September 29, 2026
This Privacy Policy describes how TowFlow collects, uses, discloses and protects personal information when you use our website, web applications, driver app and related services.
The Services are provided by Nour Laaroubi, doing business as TowFlow (“TowFlow,” “we,” “us” or “our”), 46 Rio Grande Dr, Fairport, New York 14514. If you have any questions, please contact us.
Scope of This Policy
This Privacy Policy applies to personal information collected through the TowFlow website, web applications, driver mobile application, application programming interfaces and related services (collectively, the “Services”), and applies to all users of the Services, including towing and roadside service companies (“Customers”), their employees and drivers, business partners, and motorists (collectively, “Users” or “you”).
Where a Customer uses the Services to process information about its own customers and personnel, the Customer determines the purposes and means of that processing, and TowFlow processes that information on the Customer’s behalf as a service provider. Requests concerning such information should be directed to the applicable Customer.
Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms and Conditions.
Information We Collect
Information you provide. We collect information you or your organization provide, including account information (name, business name, email address, telephone number, role and login credentials); service request information (pickup and destination addresses, vehicle year, make, model, color, vehicle identification number and license plate, service type, notes and photographs); customer, account and rate information entered by Customers; billing information (invoices, line items, payment status and remittance details); and the content of messages and support requests submitted through the Services.
Information collected automatically. When you use the Services, we automatically collect device and usage information, including browser type, device type, IP address, pages accessed, date and time stamps, and diagnostic and error logs.
Location information. While a driver is checked in to the driver application, we collect the precise geolocation of the driver’s device to enable dispatching, routing and arrival-time estimates. Collection ceases when the driver checks out. A motorist who chooses to share his or her location through a service request or location link provides that location for the related service request only. Location permissions may be withdrawn at any time through the device settings, which may limit the functionality of the Services.
Information from third parties. We receive information from third parties that submit service requests through the Services, such as motor clubs, dealerships, repair facilities and fleet operators, which may include a motorist’s name, telephone number, vehicle information and location.
Information from integrated services. Where a Customer connects a third-party service to the Services, we receive the information necessary to operate that integration. For Intuit QuickBooks Online, this includes an OAuth authorization token, the QuickBooks company identifier, and the customer, item, invoice, credit memo and payment records required to synchronize accounting data. For Square, this includes invoice and payment status information. We do not receive or store full payment card numbers.
How We Use Information
We use the information we collect to:
- provide, operate and maintain the Services, including creating, dispatching, routing and tracking service requests;
- generate invoices, process payments through the payment provider selected by the Customer, and synchronize records with the Customer’s accounting system;
- send transactional communications, including service status updates, invoices, receipts and account notices;
- provide automated recommendations for driver assignment and scheduling;
- provide customer support, and diagnose, secure and improve the Services;
- detect and prevent fraud, abuse and security incidents; and
- comply with legal obligations and enforce our Terms and Conditions.
Information obtained from Intuit QuickBooks Online or any other integrated service is used solely to provide the integration features enabled by the Customer and is not used for any other purpose.
TowFlow does not sell personal information and does not use personal information for targeted or third-party advertising.
How We Disclose Information
Parties to a service request. We disclose information to the parties to a service request as necessary to perform it, for example the assigned driver’s name and location to the motorist, and request status to the business partner that submitted the request.
Service providers. We disclose information to vendors that perform services on our behalf under obligations of confidentiality, including cloud hosting and database services (Railway), file storage (Amazon Web Services), SMS delivery (Twilio), email delivery (Resend), mapping and geocoding (Google Maps and Mapbox), payment processing (Square), automated scheduling assistance (OpenAI), and accounting integration (Intuit). We will update this list before a new service provider begins processing personal information.
Legal requirements. We may disclose information where required by law, subpoena or court order, or where we believe in good faith that disclosure is necessary to protect the rights, property or safety of TowFlow, our Users or others.
Business transfers. Information may be transferred in connection with a merger, acquisition or sale of all or part of TowFlow’s business, subject to this Privacy Policy.
Aggregated information. We may disclose aggregated or de-identified information that cannot reasonably be used to identify any individual or Customer.
With consent. We disclose information at your direction or with your consent.
Text Messaging
Transactional text messages are sent only to recipients who have consented to receive them. Mobile telephone numbers and consent records are not sold or shared with third parties for marketing purposes. Recipients may opt out at any time by replying STOP. Additional terms are set out in our SMS Privacy Policy.
Data Retention
We retain personal information for as long as the Customer’s account is active and thereafter for as long as necessary to comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. Upon account closure, we delete or de-identify information within a reasonable period, except where retention is required by law. Upon disconnection of an integrated service, the associated access tokens are deleted.
Data Security
We maintain reasonable administrative, technical and physical safeguards designed to protect personal information, including encryption of data in transit, encryption of integration access tokens at rest, and role-based access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify affected parties of a security breach as required by applicable law.
Your Rights and Choices
You may review and update certain account information within the Services. Subject to applicable law, you may request access to, correction of, or deletion or export of your personal information by contacting us at info@towflow.net. We may need to verify your identity before responding. Where information was provided by a Customer, we may refer your request to that Customer.
Promotional emails, if any, will contain an unsubscribe link. Opting out of promotional communications does not affect transactional or account-related communications.
We will not discriminate against you for exercising any of your privacy rights.
California and Other State Privacy Rights
Residents of California and certain other states may have the right, subject to applicable law, to know the categories and specific pieces of personal information collected, to request correction or deletion, and to opt out of the sale or sharing of personal information. TowFlow does not sell or share personal information for cross-context behavioral advertising. With respect to information processed on behalf of Customers, TowFlow acts as a “service provider” as defined in the California Consumer Privacy Act. Requests may be submitted to info@towflow.net.
Children's Privacy
The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. If you believe a child has provided us with personal information, please contact us at info@towflow.net.
International Users
The Services are operated in the United States, and information is stored and processed in the United States. If you access the Services from outside the United States, you consent to the transfer, storage and processing of your information in the United States, where data protection laws may differ from those of your jurisdiction.
Third-Party Services
The Services may link to or integrate with third-party services, including Intuit QuickBooks and Square. This Privacy Policy does not apply to those services, whose use is governed by their own privacy policies.
Changes to This Privacy Policy
We may amend this Privacy Policy from time to time. The “Updated” date at the top of this page indicates when it was last revised. We will notify Customers of material changes by email or through the Services. Continued use of the Services after the effective date of a revised Privacy Policy constitutes acceptance of the revision.
Contact Information
Questions or requests regarding this Privacy Policy may be directed to:
TowFlow
Attn: Privacy
46 Rio Grande Dr
Fairport, NY 14514
Email: info@towflow.net
Telephone: (440) 941-7061