Privacy Policy

1. Two roles: controller and processor

For information about HAULER accounts — the business owner and team members who sign up for Trash Tools — we are the data controller.

For information about a hauler's OWN customers (residents booking pickups or renting dumpsters through a hauler's site), the hauler is the controller and we process that data on the hauler's behalf, under our Terms of Service and Data Processing Addendum. Requests about that data should go to the hauler you did business with; we support them in responding.

2. Information we collect

From hauler accounts:

• Account details: name, email, company name, password (stored as a hash).
• Billing details for your subscription, processed by Stripe — we store an identifier, never your card number.
• Workspace content you enter: customers, addresses, routes, bookings, invoices, messages.
• Service logs: requests, errors, and security events (IP address, user agent) needed to run and protect the platform.

3. Cookies

We use only first-party, functional cookies — session tokens for the admin dashboard, driver app, and customer portal, and one preference cookie remembering a portal address selection. All are httpOnly where applicable and none are used for advertising or cross-site tracking. We do not use third-party analytics or tracking pixels, so no cookie consent banner is presented: nothing optional is set.

4. How we use information

• Provide, secure, and support the Service.
• Process subscription payments and send transactional service messages (receipts, trial notices, security alerts).
• Send messages haulers compose or configure to THEIR customers (as processor).
• Diagnose problems and prevent abuse.
• Comply with legal obligations.

5. What we don't do

We do not sell personal information. We do not use Customer Data to advertise to haulers' customers. We do not use third-party advertising trackers on the platform.

6. Sharing and subprocessors

We share information only with service providers that help us run the platform (hosting, database, payments, email, SMS, DNS, geocoding), listed with their roles at trash-tools.com/subprocessors. Each is bound by contractual confidentiality and data-protection obligations. We may also disclose information when required by law.

Note for visitors to hauler websites: those sites load fonts from Google Fonts, which involves your IP address being sent to Google to serve the font files.

7. Retention

Active workspace data is retained while the account is active. After cancellation, workspace data is retained for a 60-day wind-down period (allowing export and reactivation), then deleted. Operational logs (errors, job history, security events) are retained for approximately 90 days. Records we must keep longer for legal, tax, or fraud-prevention reasons are kept only as long as required.

8. Security

Data is encrypted in transit (TLS) and at rest. Payment-processor credentials haulers connect are additionally encrypted at the application layer (AES-256-GCM). Sessions use httpOnly cookies. Access to production systems is restricted and logged. No system is perfectly secure; report suspected issues to support@trash-tools.com.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Hauler account holders can exercise these by emailing support@trash-tools.com. If you are a customer OF a hauler, contact that hauler; we will assist them in fulfilling your request.

10. Children

The Service is for businesses and is not directed to children under 13. We do not knowingly collect children's personal information.

11. Changes

We may update this policy; material changes will be notified to account owners by email or in the dashboard, with the effective date updated above.

12. Contact

[COMPANY LEGAL NAME — e.g. Trash Tools LLC], [BUSINESS STREET ADDRESS, CITY, STATE ZIP]. Email: support@trash-tools.com.