Privacy Policy

Last updated: April 26, 2026

HaulBid (“HaulBid,” “we,” “us”) operates a two-sided marketplace at haulbidapp.com and in our mobile apps (the “Service”) that connects independent dump-truck drivers with concrete contractors, dirt-work contractors, and other businesses that need material hauled. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to drivers, contractors, and visitors to our website.

1. Information we collect

From everyone

Name, email address, mobile phone number, ZIP code, and a password (hashed). If you sign in with a third-party provider, we receive your email and basic profile information from them.

From drivers

Truck type and capacity, fleet size, service radius, equipment photos, CDL number and class, motor-carrier authority (MC/DOT) numbers when applicable, certificate of insurance details (carrier, policy number, limits, effective dates), W-9 information, and the bank account or debit card you use to receive payouts. Stripe Connect collects and verifies your tax ID and identity documents directly — we receive a verification status and the last four digits of any account, but we do not store full bank or tax-ID numbers on our servers.

From contractors

Company name, business address, work type (concrete, dirt, demolition, etc.), typical haul volume, and the payment method you use to fund jobs. Stripe collects and stores card or ACH details directly. We retain only the last four digits and the card brand for receipts and dispute support.

Job and transaction data

Pickup and drop-off addresses, material type and estimated weight, scheduled times, bid amounts, accepted prices, GPS check-ins from the driver app at pickup and drop-off, dump-ticket photos and weights, two-way ratings and written reviews, in-app messages, and dispute submissions. Job records (including GPS and dump-ticket data) are retained for as long as we are legally required to keep them — typically seven years for tax and accounting purposes — and longer if a dispute, claim, or investigation is open.

Device and usage data

IP address, device type, operating system, browser, app version, pages or screens visited, and rough geolocation derived from IP. The driver app additionally requests precise location while a job is active so we can timestamp pickup and drop-off; you can revoke that permission in your phone’s settings at any time, but you will not be able to accept jobs without it.

Communications

If you email, text, or call us, we keep a record of that conversation. If you opt in to marketing texts, we keep a record of your opt-in (date, IP, and message content) to comply with the Telephone Consumer Protection Act. You can opt out by replying STOP at any time.

2. How we use it

We use your information to run the Service and to keep both sides of the marketplace honest. Specifically:

• To match drivers with contractor jobs, deliver bid notifications, and route messages between the two sides.

• To verify driver identity, CDL status, and insurance, and to verify contractor business information so that bad actors don’t make it onto the platform.

• To process job payments through escrow, hold funds until delivery is confirmed, release driver payouts, calculate platform fees, and issue 1099s.

• To investigate disputes, including reviewing GPS data, dump-ticket photos, and message logs to determine the right outcome.

• To send transactional notifications (bid accepted, job assigned, payout sent, dispute opened) by email, push, and SMS.

• To send marketing messages, but only to people who have opted in, and only until they opt out.

• To prevent fraud, abuse, and policy violations — including using account, device, and behavioral signals to detect duplicate accounts and chargeback fraud.

• To improve the Service, debug issues, and build features. We use aggregated and de-identified data for product analytics and internal reporting.

3. Who we share it with

The other side of your job

When a driver accepts a contractor’s job, the contractor sees the driver’s name, truck type, rating, and contact number. The driver sees the contractor’s company name, job site address, and contact number. We do not share home addresses, payment details, or government IDs across sides of the marketplace.

Service providers (sub-processors)

We use the following vendors to run the platform. Each is contractually required to protect your data and use it only to provide their service to us:

• Stripe — payment processing, escrow, payouts, and identity verification (Stripe Connect KYC).

• Twilio — SMS and voice notifications.

• WordPress.com / Automattic — website hosting and analytics.

• Amazon Web Services — cloud infrastructure and database hosting.

• Sentry — error monitoring (no PII included in error reports).

• Postmark or SendGrid — transactional email delivery.

• Google Workspace — internal email and document storage for the HaulBid team.

Legal and safety

We will share information with law enforcement, regulators, or in response to a subpoena or court order when we are legally required to do so. We may also share information when we reasonably believe it is necessary to investigate fraud, protect someone from harm, or enforce our Terms of Service.

Business transfers

If HaulBid is acquired, merged, or sells substantially all of its assets, your information may transfer to the new owner. We will notify you by email or in-app before that happens, and the new owner will be bound by this policy or a successor with equivalent protections.

What we do not do

We do not sell your personal information. We do not share it with advertising networks for cross-context behavioral advertising. We do not rent contact lists to third parties.

4. How long we keep it

Account profile data is kept while your account is active and for up to 90 days after deletion to allow for account recovery. Job records, payment records, and tax documents are retained for seven years to comply with IRS and state requirements. Dispute records are retained for seven years from the date the dispute is closed. Marketing-message opt-in records are retained for four years. Server logs and security event logs are retained for up to 12 months.

5. How we protect it

All traffic between your device and our servers is encrypted in transit with TLS. Sensitive fields (passwords, identity verification tokens) are encrypted at rest. Access to production systems is limited to a small number of engineers, requires multi-factor authentication, and is logged. We run regular backups and have a documented incident-response plan. No system is perfectly secure, and we cannot guarantee that your data will never be intercepted or accessed without authorization.

6. If something goes wrong (breach notification)

If we discover a security incident that affects your personal information, we will notify you and the appropriate regulators within the timeframes required by applicable law — in most US states, that means within 30 to 60 days of discovery. Notice will describe what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.

7. Your rights

You can email us at privacy@haulbidapp.com to:

• See a copy of the personal information we hold about you.

• Correct anything that is wrong.

• Delete your account and the data tied to it (we will keep records we are legally required to keep, such as completed-job and tax records).

• Export your data in a portable format.

• Opt out of marketing communications. Transactional messages (job assignments, payouts, disputes) cannot be turned off while your account is active because the Service depends on them.

California, Colorado, Connecticut, Utah, Virginia, and other state-specific rights: Residents of these states have additional rights under their state privacy laws, including the right to know, delete, correct, opt out of “sales” and “sharing” (we do not engage in either as defined by those laws), and to non-discrimination for exercising any of these rights. To exercise any of them, email us at the address above with the subject “Privacy Rights Request” and tell us which state you live in. We will verify your identity using information already on your account before fulfilling the request, and we will respond within 45 days. If you disagree with our response, you may appeal by replying to our email within 30 days.

8. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. You can clear or block cookies in your browser; some parts of the Service will not work without them. We use privacy-friendly analytics (Plausible) and do not run third-party advertising trackers.

9. Children’s privacy

HaulBid is a business platform and is not intended for anyone under 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will delete it.

10. International users

HaulBid is operated from the United States and currently serves customers in the US. If you access the Service from outside the US, your information will be transferred to and processed in the US, where data-protection law may be different from where you live.

11. Changes to this policy

We will update this policy when we add features, change vendors, or our legal obligations change. Material changes will be announced by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top of the policy always reflects the most recent change.

12. Contact

Questions, requests, or complaints about this policy or how we handle your information:

HaulBid

Email: privacy@haulbidapp.com

Mail: HaulBid, Tulsa, Oklahoma