Last updated: June 18, 2026 | Effective immediately
Haulr collects only what it needs to run deliveries and communicate with you. We do not sell your data. We use Stripe for payments, Postmark for transactional emails, and Google Analytics (only with your consent) to understand site traffic. You can request deletion of your data at any time.
1. Information We Collect
When you book a delivery or apply as a driver, we collect:
Contact information. Name, email address, and phone number.
Delivery addresses. Pickup and dropoff locations (street address, city, ZIP code) and geographic coordinates for driver routing.
Order details. Item descriptions, dimensions, quantity, and any notes about access or special requirements.
Payment information. Processed by Stripe — Haulr does not store raw credit card numbers. We receive a transaction token and order amount from Stripe.
Driver application data. Name, email, phone, vehicle type, city, and uploaded documents (driver's license, vehicle insurance, vehicle registration). Background check results from a third-party provider.
Driver location. During an active delivery, we track approximate driver GPS coordinates and share them with the customer in real time.
SMS consent. If you opt into SMS notifications, your phone number is stored and used to send order updates. Reply STOP to opt out at any time.
Cookie data. A single consent preference cookie (haulr_consent) stores whether you have accepted or declined non-essential cookies. We do not use third-party advertising cookies.
Analytics data. When you consent, Google Analytics collects anonymous session data including pages visited, referral source, and general location (city-level only). No personally identifiable information is sent to Google.
2. How We Use Your Information
Matching and delivery. Connect you with a driver, share your contact info and address with the matched driver for the duration of the job.
Payment processing. Process your payment via Stripe and, for drivers, pay out via Stripe Connect.
Transactional communications. Send order confirmations, driver assignments, in-transit updates, and delivery notifications via email (Postmark) and SMS (Twilio, if opted in).
Post-delivery follow-up. Send a review request email 2 hours after delivery.
Driver onboarding. Review driver applications, run background checks, and manage driver accounts.
Analytics. With your consent, use Google Analytics to understand site traffic and improve the booking experience.
Safety and fraud. Detect and prevent fraudulent transactions, resolve disputes, and enforce our Terms of Service.
3. Third-Party Sharing
We share your information only in these limited circumstances:
Stripe. Payment card data is handled entirely by Stripe. Their privacy policy applies: stripe.com/privacy.
Postmark. Email addresses are transmitted to Postmark (by SparkPost) for transactional email delivery. Their privacy policy applies: postmark.com/legal/privacy.
Twilio. Phone numbers are transmitted to Twilio for SMS delivery. Their privacy policy applies: twilio.com/legal/privacy.
Google Analytics. If you consent, anonymous session data is sent to Google. See section 5 below for how to opt out.
OpenRouteService. Addresses are geocoded via OpenRouteService to obtain coordinates for driver routing.
Law enforcement. We may disclose information if required by law, court order, or to prevent illegal activity.
Business transfer. In the event of a merger, acquisition, or sale of assets, your data may transfer to the acquiring entity under the same privacy protections.
We do not sell, rent, or trade your personal information to advertisers or data brokers.
4. Data Retention
Customer orders. Retained for 3 years after last activity to support dispute resolution, accounting, and tax compliance.
Driver applications. Active driver records kept while the driver is active. Inactive drivers archived for 2 years, then deleted.
Email addresses. Removed from our email list within 30 days of unsubscribe request.
SMS opt-outs. Phone numbers are flagged for suppression and never re-contacted.
Analytics data. Google Analytics data retained by Google for up to 26 months (configurable by Haulr).
5. Your Rights (CCPA & GDPR)
If you are a California resident, you have the right under the CCPA to request:
Access. A copy of the personal information we hold about you.
Deletion. Removal of your personal information (subject to certain exceptions for legal and tax records).
Opt-out of sale. We do not sell your data. If we ever change this policy, we will update this page and give you the option to opt out.
If you are in the European Economic Area, you have the right under GDPR to:
Access, correct, or delete your personal data.
Object to or restrict certain processing.
Portability of your data in a machine-readable format.
Lodge a complaint with your local data protection authority.
To exercise any of these rights, email support@haulrit.com. We will respond within 30 days.
6. Cookie Choices
On your first visit, you are shown a cookie consent banner. You can:
Accept all. Enable analytics cookies (GA4). A cookie stores this preference for 12 months.
Decline. Suppress all analytics and non-essential cookies. A cookie stores this for 12 months.
Manage preferences. Toggle analytics cookies on/off. Functional cookies (required for site operation) cannot be disabled.
You can change your cookie preference at any time by visiting our site and clicking "Manage preferences" in the banner.
7. Data Security
We use industry-standard encryption (TLS) for all data in transit. Payment card data is handled by Stripe's PCI-DSS compliant infrastructure. Our database (Neon PostgreSQL on Render) is not publicly accessible. Admin accounts are protected by session-based authentication with HttpOnly signed cookies.
No method of transmission over the internet is 100% secure. While we take reasonable measures, we cannot guarantee absolute security.
8. Children's Privacy
Haulr does not knowingly collect information from anyone under 18. If we learn that we have collected data from a minor without parental consent, we will delete it and terminate the account.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect when posted on this page with an updated "Last updated" date. We will notify you via email of material changes to how we handle your data.