Privacy Policy

This Privacy Policy applies to information collected through:

• The Haul mobile applications
• Haul websites and portals
• Dispatcher and administrative portals
• Customer support interactions
• In-app messaging systems
• SMS, email, and push notification systems
• Third-party integrations used to operate the Services

The Services are intended only for users located in the United States.

Depending on how you use the Services, we may collect:

Customer Information

• Name
• Email address
• Phone number
• Pickup and dropoff addresses
• Uploaded photos, videos, or other content
• Job descriptions and inventory information
• Customer support communications
• Payment-related information

Service Provider Information

• Business name
• Contact information
• Insurance verification information
• Business licensing information where required
• Tax identification information
• Vehicle and operational information
• Dispatch and driver information
• Service history and operational metrics

Communications

We may collect information you provide through:

• In-app messaging
• SMS communications
• Emails
• Customer support interactions
• Push notification preferences

We use authentication and account security systems, including services provided by Amazon Web Services ("AWS") Cognito.

In connection with account creation, login, and verification, we may collect and process:

• Email addresses
• Phone numbers
• One-time passcodes (OTP)
• Authentication tokens
• Device identifiers
• Session information
• Login metadata
• IP addresses
• Security and fraud-prevention information

We may use automated systems to identify suspicious, fraudulent, abusive, or unauthorized account activity.

Customers

Customers may voluntarily provide location information, including by:

• Entering pickup or dropoff addresses manually
• Allowing the app to access current device location while using the app

Customer location information is used to:

• Populate addresses
• Determine service availability
• Identify nearby service providers
• Support routing and operational logistics

Customer precise location is collected only while the app is actively in use and only where permission is granted. Haulwerk does not use customer background location tracking to continuously monitor customer movements. Customer GPS session data may be processed temporarily for operational functionality and may be stored ephemerally in operational systems.

Drivers & Service Providers

Drivers and service providers may share precise real-time location information during active jobs.

During active jobs, precise driver location may be visible to:

• Customers associated with the job
• Authorized dispatcher personnel
• Authorized service provider personnel

Driver location sharing ends when the active job concludes or tracking is disabled.

We may also use geolocation and geofencing technologies to:

• Determine service coverage areas
• Match jobs with providers
• Improve dispatch operations
• Support fraud prevention and operational integrity

We do not use geolocation data to infer users' home routines, work routines, or behavioral profiles unrelated to operation of the Services.

Users may upload photos, videos, inventory information, and other materials in connection with jobs and platform usage.

Uploaded content may contain information relating to:

• Household items
• Property interiors
• Waste materials
• Furniture
• Appliances
• Vehicles
• Moving inventory
• Other job-related content

We may remove metadata associated with uploaded files, including EXIF or device metadata.

Payments are processed through third-party payment processors, including Stripe.

Haulwerk does not store complete payment card numbers.

We may collect or retain limited payment-related information, including:

• Payment status
• Transaction identifiers
• Card brand
• Last four digits of payment cards
• Billing metadata
• Chargeback and fraud indicators
• Payment authorization and capture records

We may support:

• Credit and debit cards
• Apple Pay
• Google Pay
• Other payment methods made available through our payment processors

Identity verification and KYC-related information may be processed by Stripe or related providers in connection with payment processing, business verification, fraud prevention, tax compliance, or regulatory obligations.

When you provide personal data in connection with Stripe payment services, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy.

We automatically collect certain information relating to usage of the Services. This may include:

• Device type
• Operating system
• Browser type
• App version
• Device identifiers
• Mobile advertising identifiers
• Push notification tokens
• IP addresses
• Crash reports
• Performance and diagnostic information
• Session duration
• Clickstream events
• Feature usage
• Referring URLs
• Interaction and engagement metrics

We may use cookies, SDKs, APIs, local storage, pixels, and similar technologies.

We may use information for the following purposes:

• Providing and operating the Services
• Creating and managing accounts
• Authenticating users
• Matching customers with service providers
• Processing payments and transactions
• Coordinating dispatch and logistics
• Ranking and recommending Service Providers
• Supporting trust scoring and operational metrics
• Supporting platform integrity systems
• Reviewing disputes and chargebacks
• Retrying or recovering failed payments
• Facilitating communications
• Providing customer support
• Sending transactional notifications
• Sending marketing communications where permitted
• Fraud prevention and abuse detection
• Safety investigations
• Incident response
• Identity verification
• Platform security
• Enforcing our agreements and policies
• Improving and developing products and features
• Conducting analytics and operational reporting
• Supporting recommendation systems and personalization
• Improving AI and machine learning systems
• Detecting hazardous or prohibited materials
• Complying with legal obligations
• Protecting the rights, property, and safety of Haulwerk, users, service providers, and the public

Haulwerk may use artificial intelligence ("AI"), machine learning models, large language models ("LLMs"), computer vision systems, and automated processing technologies in connection with the Services.

These systems may assist with:

• Volumetric analysis
• Pricing estimates
• Job scope analysis
• Hazardous material detection
• Fraud prevention
• Content moderation
• Operational analytics
• Recommendation systems
• Platform safety
• Customer support
• Product improvement
• Trust and safety systems
• Operational investigations
• Platform integrity systems

Uploaded content and related data may be processed using systems provided by third-party AI providers, including:

• Anthropic
• OpenAI
• Amazon Web Services
• Other infrastructure or AI providers used to support the Services

Automated outputs may not always be accurate, complete, or appropriate.

Human review may occur in connection with:

• Pricing disputes
• Safety investigations
• Customer support
• Operational review
• Fraud prevention
• Service provider assessment of job scope
• Platform integrity reviews

Users should not rely exclusively on automated outputs generated through the Services.

We and our service providers may use cookies, SDKs, APIs, pixels, local storage, device identifiers, and similar technologies.

These technologies may be used for:

• Authentication
• Security
• Fraud prevention
• Session management
• Analytics
• Performance monitoring
• Advertising and marketing
• Personalization
• Attribution measurement
• Operational functionality

Technologies and vendors we may use include:

• Google Analytics
• Firebase Analytics
• AWS services
• Sentry
• Cloudflare Turnstile
• Push notification providers
• Mapping and geolocation providers
• Communication service providers
• Advertising and analytics partners

Depending on applicable law, some activities may constitute "sharing" or "targeted advertising."

You may manage certain tracking technologies through:

• Browser settings
• Device permissions
• Cookie banners
• Mobile operating system privacy controls
• Advertising identifier settings
• Marketing communication preferences

Where required by law or platform policy, we will request permission before engaging in cross-app or cross-site tracking for advertising purposes.

We may send:

• Transactional emails
• SMS messages
• Push notifications
• Operational alerts
• Marketing communications
• Safety and account notifications

Users may opt out of marketing communications through available unsubscribe or preference management tools. Some operational or transactional communications may still be sent where necessary to provide the Services.

We may log, preserve, review, and disclose communications where reasonably necessary to:

• Investigate fraud or abuse
• Address safety concerns
• Enforce our policies
• Respond to legal requests
• Protect users or the Services
• Resolve disputes
• Maintain operational integrity and support platform integrity systems

We do not routinely monitor private communications.

Haulwerk may rank, recommend, prioritize, feature, or highlight certain Service Providers within the Services.

Placement, ranking, "preferred provider" status, badges, or recommendation status may be based on factors including:

• Historical completion data
• Customer ratings
• Cancellation rates
• Operational responsiveness
• Geographic availability
• Platform participation
• Commercial relationships
• Promotional participation
• Paid placement
• Trust and safety metrics
• Internal operational considerations

Placement, ranking, or designation does not constitute:

• Certification
• Endorsement
• Guarantee
• Warranty
• Representation regarding legality, licensing, insurance, safety, quality, or suitability

"Verified" means only that Haulwerk received certain information or documentation at a point in time and does not constitute confirmation of ongoing compliance, insurance validity, legal authorization, or suitability.

We may share information with:

Customers and service providers may receive certain information necessary to complete services, including:

• Names
• Addresses
• Job details
• Communications
• Operational information
• Real-time location information during active jobs

We may disclose information:

• To comply with law, regulation, subpoena, or legal process
• To respond to government or law enforcement requests
• To cooperate with insurers or safety investigations
• To protect rights, safety, and property
• To investigate fraud, abuse, or unlawful conduct
• To preserve evidence or records relevant to disputes or litigation

Information may be disclosed or transferred in connection with:

• Mergers
• Acquisitions
• Financing transactions
• Asset sales
• Bankruptcy proceedings
• Corporate restructuring

We may share limited information with advertising and analytics providers in connection with:

• Attribution
• Advertising effectiveness
• Audience measurement
• Marketing optimization

We do not sell personal information for monetary compensation. However, certain advertising or analytics activities may constitute "sharing" under California law.

By uploading or submitting content through the Services, you grant Haulwerk a worldwide, non-exclusive, royalty-free license to host, store, process, reproduce, analyze, modify, create derivative metadata from, display, and use such content for purposes relating to:

• Providing the Services
• Platform operations
• Fraud prevention
• Safety systems
• Customer support
• Dispute resolution
• Product development
• AI and machine learning improvement
• Analytics
• Operational intelligence

Where reasonably practicable, Haulwerk may use deidentified or aggregated information derived from uploaded content to improve products, analytics, operational systems, and platform intelligence.

We retain information for different periods depending on:

• Operational needs
• Legal obligations
• Safety and fraud prevention
• Accounting and tax requirements
• Dispute resolution
• Contractual obligations
• Legitimate business purposes

In general:

• Account records may be retained for up to five (5) years following account closure
• Financial and transaction records may be retained for up to seven (7) years or longer where required by law
• Safety, fraud, and investigation-related records may be retained as reasonably necessary
• Analytics and usage data may be retained for shorter operational periods
• Certain temporary operational data may be retained ephemerally

When users request deletion of accounts, we may delete or deidentify certain information, subject to legal obligations, fraud prevention needs, tax and accounting obligations, dispute resolution requirements, security purposes, enforcement of agreements, and preservation obligations.

Backups and archived systems may retain information for limited periods following deletion requests.

We implement administrative, technical, and organizational safeguards designed to protect information. These measures may include:

• Access controls
• Encryption
• Authentication systems
• Monitoring systems
• Fraud-prevention tools
• Infrastructure security protections

However, no method of electronic transmission, storage, or processing is completely secure. Accordingly, Haulwerk cannot guarantee absolute security. Users transmit information at their own risk.

Depending on applicable law, users may have rights relating to their personal information. These may include the right to:

• Access information
• Know what categories of information are collected
• Correct inaccurate information
• Request deletion
• Opt out of targeted advertising or sharing activities
• Limit certain uses of information
• Appeal certain privacy decisions where applicable

Users may submit privacy requests through: support@haulwerk.com

We may take reasonable steps to verify requests before responding. Authorized agents may be required to provide proof of authority.

Residents of certain U.S. states, including California, may have additional privacy rights under applicable law. Depending on applicable law, these rights may include:

• The right to know categories of personal information collected
• The right to know categories of sources
• The right to know categories of disclosures
• The right to request deletion
• The right to correct inaccurate information
• The right to opt out of targeted advertising or certain sharing activities
• The right not to be discriminated against for exercising privacy rights

Haulwerk does not sell personal information for monetary compensation. Some advertising, analytics, or attribution activities may constitute "sharing" under certain state privacy laws.

Users may exercise privacy rights by contacting: support@haulwerk.com

Some browsers and devices offer "Do Not Track" or Global Privacy Control ("GPC") signals.

Because standards for these technologies continue to evolve, Haulwerk may not respond to all such signals uniformly.

Where required by applicable law, we will process qualifying opt-out preference signals.

The Services are intended only for users who are at least 18 years old.

Haulwerk does not knowingly collect personal information from children under 18. If we learn that a user under 18 has provided personal information, we may delete the information and terminate associated accounts.

The Services are intended for users located in the United States.

If you access the Services from outside the United States, you understand that information may be transferred to, processed in, and stored in the United States.

We may update this Privacy Policy from time to time.

Changes become effective when posted unless otherwise indicated.

Your continued use of the Services following updates constitutes acceptance of the updated Privacy Policy.