TowWinch Privacy Policy
Effective date: October 23, 2026
1. Scope and responsibility
Pro365 LLC, PO Box 344, Vine Grove, KY 40175, doing business as TowWinch ("we," "us"), provides TowWinch services through towwinch.com, towdispatch.cloud, toweta.com, and associated applications that link to this Policy. Contact [email protected] for privacy questions or requests.
This Policy covers website visitors, account holders, authorized staff and drivers, support contacts, and people whose information is handled through TowWinch. When we manage accounts, billing, security, and our business communications, we determine how that information is used. When a towing business uses TowWinch to manage operational records, it generally determines the purposes and instructions for processing those records. Contact that business first about its towing activities, charges, employee monitoring, or handling of vehicle and customer records. We assist the business with appropriate requests and respond to obligations that apply directly to us.
Separate products, including TowHooker and ProTruck365, are covered by this Policy only if their relevant service expressly links to it. Visiting an independently operated integration or payment service may involve a separate privacy policy.
2. Information handled through the service
Depending on the features used, we handle:
• Account and business information: names, company details, email addresses, phone numbers, account identifiers, staff roles, login information, subscription details, and billing contacts.
• Towing and vehicle records: dispatch requests, pickup and destination addresses, customer and driver contacts, VINs, license plates, vehicle descriptions, assignment and status history, impound and lot records, invoices, receipts, payments recorded in the workspace, notices, release records, and uploaded documents.
• Field records: precise device location when location features are enabled and permission is granted, trip or assignment information, timestamps, mileage, inspections, expenses, photos, condition and damage diagrams, signatures, and related notes.
• Communications: support requests, dispatch and team messages, notification content, recipient details, delivery status, and correspondence sent through enabled email, SMS, or push services. This does not mean every account has each communications feature enabled.
• Technical information: IP addresses, browser and device characteristics, app version, session and authentication data, access times, service activity, synchronization events, and diagnostic or error information needed to operate and protect the service.
• Payment information: plan purchases, transaction references, payment status, and information supplied to payment processors. Payment details entered directly into a processor's hosted form are handled under that processor's policy. Do not enter card numbers or security codes into notes, chat, photos, or document uploads.
Information comes from you, your employer or business administrator, customers, authorized operational partners and integrations, device permissions, and your interactions with the service. We do not receive every category from every person.
3. Location and device access
TowWinch's driver functions can collect precise device location to support dispatch visibility, driver status, routing, and customer arrival or tracking features when enabled. Authorized company personnel can view location records available within their permissions. A customer tracking feature can disclose the limited location or arrival information included in that tracking experience to a link recipient.
Deny or revoke location permission in device settings to stop app access to device location; location-dependent functions may then be unavailable. Your employer may have separate work requirements and notices. A location-enabled service may continue operating while the app screen is not open, subject to the app version, service state, operating-system restrictions, and permission settings. Review the in-app and device indicators; do not assume closing the screen stops an active service. We do not describe this as unrestricted tracking after an app is stopped.
Camera and photo access support images you choose to capture or upload, such as vehicle condition records. Notification permissions support dispatch and account alerts. Offline drafts, photo batches, and queued work can be stored on the device before upload and may remain there until sent or removed. Server deletion does not automatically delete independent exports, screenshots, or copies on your devices. Secure the device and review unsent work before clearing storage or uninstalling.
4. Why information is used
We use information to create and administer accounts; provide dispatch and operational tools; store and synchronize records; show authorized location and tracking information; generate invoices and reports; process subscriptions; deliver requested communications; respond to support and rights requests; diagnose failures; prevent misuse and unauthorized access; enforce agreements; and meet legal obligations.
Operational content is processed to provide the customer's selected features and follow authorized instructions. Using the service does not grant permission to publish customer records or use them for unrelated advertising. Marketing communications require any consent applicable law requires and offer an appropriate opt-out. Necessary service messages may continue after marketing opt-out.
5. When information is disclosed
Information may be disclosed to:
• Your business account and authorized users according to configured access and operational responsibilities. Employer-managed accounts are not private from appropriately authorized administrators.
• Providers performing hosting, storage, security, support, payment processing, maps, routing, notifications, email, or SMS functions, to the extent needed for those functions and subject to applicable contractual and legal restrictions.
• Integrations and operational recipients you or your administrator authorize, such as a connected accounting service, dispatch partner, customer, or recipient of an invoice, notice, tracking link, or release document. Availability depends on the actual connection; a planned integration does not itself cause a disclosure.
• Authorities or other parties when legally required, or when reasonably necessary to protect legal rights, safety, and service security, with appropriate review of the request.
• A successor in a financing, merger, acquisition, or sale of the relevant business, subject to applicable privacy obligations and notice requirements.
We may disclose information at your direction or with your consent. Public-facing vehicle searches and shared links should expose only the information intended for those features. Someone holding a shared link may forward it; avoid distributing it beyond intended recipients.
For questions about information disclosed through a particular account or integration, contact [email protected]. Requests to opt out of a use or disclosure covered by applicable law can be submitted through the same address.
6. Cookies and similar storage
The service uses session and authentication mechanisms and may use browser storage to keep preferences and application state. The product demo stores sample changes locally in the browser. Device and browser settings can restrict or clear stored data; doing so may sign you out or remove unsynchronized work. Necessary storage does not mean that all analytics or advertising storage is exempt from consent requirements.
Our websites use hosting and network services, including Cloudflare where enabled, which can process network requests, IP addresses, browser information, and performance or security events. Embedded support tools can transmit the support messages and account context you submit. Browser controls can restrict cookies and similar storage. Where applicable law requires consent for an optional technology, that technology requires an appropriate choice in addition to this Policy; reading this Policy is not consent.
7. Retention and deletion
We retain information for the time needed to provide the service, follow customer instructions, maintain required business records, resolve disputes, and comply with legal obligations. Different categories may have different retention periods. Customer operational records generally follow the account's retention arrangements, subject to legal requirements.
Free workspaces and uploads are scheduled for removal after the trial ends unless the customer upgrades. Review the removal date displayed in your account, export needed records before the trial expires, and contact support promptly if that date differs from the offer you accepted. The availability of a grace period does not guarantee continued access to trial features. Backup copies can remain until the applicable backup cycle expires, with restrictions on use; legal holds and legally required records may be retained longer.
Account identifiers and permissions are retained while needed to administer the account. Operational records, including location and field records, are retained to provide the customer's recordkeeping and dispatch services and follow authorized deletion instructions. Support correspondence is retained as needed to resolve the request and related disputes. Transaction records are retained for applicable accounting, tax, and dispute obligations. Security and diagnostic records are retained while needed to investigate failures, prevent abuse, and protect the service. A minimal hashed eligibility record derived from business contact information can remain after trial-account deletion to prevent repeat free trials; it is used for eligibility and abuse prevention. Contact support for the retention or deletion arrangements applicable to a particular account or record.
8. Security
We use safeguards designed to protect personal information, taking account of the service and risks. No method of storage or transmission is completely secure. Customers should configure access carefully, protect credentials and devices, and report suspected security incidents to [email protected]. We will provide legally required incident notifications.
9. Your choices and requests
You can update available profile information, ask your business administrator about company records and permissions, manage device permissions, and request assistance through [email protected]. A request to cancel a subscription and a request to delete information are separate; tell us which you need. We may verify identity and authority using information proportionate to the request and will not request unnecessary sensitive identifiers.
Depending on where you live and which laws apply, you may have rights to access, obtain a copy of, correct, delete, or restrict certain personal information; object to certain processing; withdraw consent; or opt out of sale, targeted advertising, or specified profiling where applicable. Rights are subject to legal exceptions. We will respond within applicable deadlines, explain relevant denials, and provide an appeal process where required. Authorized agents may submit requests with appropriate proof of authority. We will not unlawfully discriminate against you for exercising applicable rights.
For a record controlled by a towing business, identify that business so we can direct or assist the request appropriately. We cannot erase records another business must lawfully retain merely because they are stored through our software. You may also complain to the relevant data protection or consumer protection authority.
10. Children's information
TowWinch business accounts are intended for adults and the services are not directed to children under 13. We do not knowingly collect personal information from children under 13 through their use of the service. If you believe a child has provided information, contact [email protected] so we can investigate and take appropriate action. Business users should avoid uploading unnecessary information about children in operational records.
11. Processing location and applicable rights
Pro365 LLC is based in Kentucky, United States. Our service uses hosting and communications providers whose processing arrangements may differ from where you live. Contact [email protected] for information about the processing arrangements relevant to your account before submitting records subject to location or transfer restrictions. Where applicable law requires a specific transfer safeguard or additional processing agreement, those requirements must be addressed for the relevant service; accepting this Policy does not waive them or constitute a substitute for consent where consent is required.
12. Updates and contact
We may update this Policy as the service or our practices change. We will revise the effective date and provide notice of material changes through appropriate channels. If a new use requires consent, we will obtain it before that use. Contact TowWinch, Pro365 LLC, at PO Box 344, Vine Grove, KY 40175 or [email protected].