Privacy Policy
Draft: this page is waiting on review by a lawyer before TapHaul launches. It describes how the app works today.
Who we are
TapHaul LLC ("TapHaul", "we", "us") runs a marketplace where customers order construction and landscaping materials and services from independent local businesses ("providers"). This policy covers taphaul.com, app.taphaul.com, our staff tools, the sample-data demo, the waitlist, and the TapHaul apps for iPhone and Android. Our mailing address is TapHaul LLC, 30 N Gould St, Ste N, Sheridan, WY 82801.
What we collect
- Account details: your name, email, phone number if you add one, profile photo if you add one, and whether you are hiring or a pro. Your password is stored only as a salted one-way hash; we can't read it. If you sign in with Apple or Google we receive your name and email from them (with Apple you can hide your real email). If you add a passkey or two-step codes, we keep only what is needed to check them.
- Waitlist: your email. For a business that applies to join: business name, contact name, email, phone, services, service area, website and any notes you add.
- Places: the addresses you save, the drop pin you place on the map, notes for the driver, and any gate or lockbox code. Gate codes are encrypted. They are shown only to the driver on your delivery when the truck is close, to the provider's dispatchers, and to TapHaul staff when they need to help with an order.
- Orders: what you order, quantities, delivery windows, prices, fees, taxes, tips, messages and ratings.
- Payments: Stripe processes all card and bank payments, saved cards and payouts. We never receive or store full card or bank account numbers; we keep the card brand or bank name, the last four digits and the payment status. If you pay by bank, Stripe links your account through Stripe Financial Connections under its own terms.
- Location, customers: if you allow it, your device location is used to show yards and pros near you. We don't store it; your saved addresses are stored.
- Location, drivers: while you are on an active delivery (from loading at the yard until the drop), the app collects your precise location, including when the app is in the background or the screen is off. It stops when the delivery ends. We don't collect it when you are off duty or between deliveries.
- Photos and documents: delivery photos, scale tickets, site photos, insurance certificates, licenses and other documents you upload.
- Community posts: what you post or comment, photos you add (we remove the location data stored inside photos), and the city and state you post from. These are visible to other TapHaul members.
- Tappy, the in-app assistant: the messages you type or say to Tappy, and, when you use the microphone, your voice recording. See "Tappy and AI" below.
- Identity verification (drivers and workers): Stripe Identity checks a photo of your government ID against a live selfie. Stripe processes those images, including a biometric comparison, under its own terms and with your consent at the time. TapHaul receives only the result (verified or not), never the images.
- Background checks (drivers and workers): Checkr, a consumer reporting agency, runs background checks only after you give consent on Checkr's own form, where it collects what it needs (such as your Social Security number and date of birth). TapHaul receives the report status and can view the report as the Fair Credit Reporting Act allows. We never receive your Social Security number.
- Business details (providers): legal name, the last four digits of your EIN, licenses, insurance and service area. Stripe collects payout and tax details during payout setup.
- Messages to us: what you send to support or privacy, and our replies.
- Device and usage: push notification tokens, app version, IP address, browser type, and security and abuse-prevention logs kept by us and our hosting provider.
We don't use advertising or analytics cookies, we don't track you across other companies' apps or websites, and we don't sell your personal information or share it for targeted advertising. The cookies and device storage we use are listed in our Cookie Policy at taphaul.com/cookies.
How we use it
- To run orders: quote delivered prices, dispatch trucks, work out routes and arrival times, notify you, show live tracking, and collect proof of delivery.
- To hold and release payments under payment protection, issue refunds and handle disputes.
- To decide who can work on TapHaul: verify identity, run background checks, check licenses and insurance.
- To answer you through Tappy when you choose to use it.
- To keep the marketplace safe: prevent fraud, spam and abuse, investigate problems and enforce our terms.
- To send the emails and notifications an account needs (sign-in links, receipts, delivery updates). Marketing emails go only to people who asked for them, and each one has an unsubscribe link.
- To support you and to meet legal, tax and accounting obligations.
Tappy and AI
Tappy is optional. When you use it, what you type or say, and the order, address and listing details Tappy looks up to answer you, are sent to the AI providers that run Tappy: Groq, Google (Gemini) and OpenAI. They process it to write a reply, to turn your voice into text and to read replies aloud, as our service providers and under their own terms for business customers. Your device's own speech service may also be used to turn your voice into text.
Tappy can make mistakes. It can suggest an order or a change, but nothing is ordered, paid, sent or cancelled until you tap Yes in the app, and the app's own screens show the real price. Tappy never asks for card numbers or gate codes; please don't type them, or other sensitive details, into a chat.
Who sees it
- The other side of your order: the provider and its dispatchers and driver see your name, delivery address, drop pin and notes, and (near arrival) your gate code. You see the provider, your driver's first name and vehicle, and the truck's live position during the delivery.
- Other members, for what you post in the community.
- Service providers who process data for us: Cloudflare (hosting, security, the human check on forms, file storage), Supabase (database), Stripe (payments, saved cards, payouts, identity verification, fraud prevention), Checkr (background checks), Google (route distances and arrival times through Google Maps Platform, Sign in with Google, push notifications through Firebase Cloud Messaging, Gemini for Tappy, and our own email), Apple (Sign in with Apple, push notifications on iPhone), Groq and OpenAI (Tappy), Resend (email delivery), Komoot's Photon service (address search; it receives the text you type into an address box, from our servers) and OpenFreeMap (map images; your device loads them directly, so OpenFreeMap sees your IP address and the part of the map you look at).
- Authorities, when the law requires it, or to protect the safety of people or property.
- A buyer or successor if TapHaul is sold or merged, under this policy.
How long we keep it
- Your account and saved places: while your account is open.
- Driver location history: 180 days after the delivery, for disputes and safety, then deleted.
- Orders, payments, refunds and payouts: 7 years, as tax and payment rules require. After an account is deleted these records are kept with the personal details removed.
- Background check and identity results: as long as the law requires for the screening decision and its records.
- Waitlist: until you unsubscribe or ask us to delete it. After you unsubscribe we keep the address only so we never email it again.
- Business applications: while we review them and onboard the business, or until you ask us to delete them.
- Security logs: for a short time, then deleted by our hosting provider.
- Admin actions on accounts: kept as an audit record.
Deleting your account
You can delete your account in the app under Account, Delete account, where you type DELETE to confirm. If you have an order or a delivery in progress, it waits until that is finished. You are signed out everywhere at once. After 30 days your name, email, phone, saved places, gate codes, photos and posts you added, sign-in methods and push tokens are erased; signing back in before then cancels the deletion. Records we must keep by law are kept without your personal details. Without the app, email privacy@taphaul.com from the address on your account or see taphaul.com/delete-account.
Your choices and rights
In the app you can download a copy of your data (Account, Download my data), correct your details, turn off location and notifications in your phone's settings, and delete your account. Every marketing email has a one-click unsubscribe link.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, the EU or the UK) you may have further rights, such as to know, access, correct, delete or port your data, and to object to or limit some uses. Email privacy@taphaul.com. We verify requests before acting, you can use an authorized agent, and if we turn a request down you can reply to ask us to look again. We never treat you differently for using a right. Because we don't sell or share personal information for advertising, there is nothing to opt out of there.
Drivers and workers have rights under the Fair Credit Reporting Act, including to a copy of their background report and to dispute it with Checkr.
Security
Data is encrypted in transit; gate codes are encrypted at rest; passwords are hashed; staff access requires two-step verification and every staff action is logged. No system is perfectly secure, and we cannot guarantee absolute security. Report a security problem to security@taphaul.com.
Age
You must be 18 or older to create a TapHaul account, join the waitlist or apply as a business. TapHaul is not meant for children under 13 and we don't knowingly collect their personal information. If we learn that we have, we delete it and close the account. A parent or guardian who thinks a child has given us information can email privacy@taphaul.com.
Where data is processed
TapHaul operates in the United States, and our service providers process data in the United States and other countries where they work.
Changes
We will post updates here with a new date, and tell account holders about material changes by email or in the app.
Contact
Privacy questions or requests: privacy@taphaul.com. Everything else: support@taphaul.com. Post: TapHaul LLC, 30 N Gould St, Ste N, Sheridan, WY 82801.