Privacy Policy
How Maha 12 LLC, operating as TowFusion, handles information about you, your business, and your drivers.
1. Who we are
TowFusion is a brand of Maha 12 LLC ("Maha 12", "we", "us", "our"), a limited liability company with its principal place of business at 1 Main Street, Woodbridge, NJ 07095, United States. Maha 12 LLC is the entity responsible for the information described in this policy.
This policy covers the TowFusion website at towfusion.com, the TowFusion customer portal, and the driver location-sharing pages we provide to our customers' drivers.
2. Information we collect
Information you give us
When you contact us through the website, book a strategy call, or become a customer, we collect the details you provide. That typically includes your name, business name, email address, phone number, service area, and anything you write in a message to us.
Customer portal information
If you are a TowFusion customer with a portal account, we hold:
- Your sign-in email address and display name
- A cryptographically hashed version of your password — we never store or see the password itself
- Your plan, account status and start date
- Monthly performance figures for your business: revenue, leads received, calls received, and jobs completed and declined
- Details of your trucks and drivers that you or we enter, such as unit names, plates and driver names and phone numbers
Driver location information
Where a customer uses fleet tracking, we collect the last known GPS position of a driver — latitude, longitude, heading, speed and a timestamp — while that driver has our tracking page open and has actively started sharing. Section 5 explains this in detail.
Information collected automatically
Our hosting and infrastructure providers record standard technical data when you visit, such as IP address, browser type, pages requested and timestamps. We use a small number of essential cookies to keep you signed in to the portal. We do not run advertising trackers or third-party analytics profiling on the portal.
3. How we use information
We use the information described above to:
- Provide the services you have asked for, including lead generation, dispatch automation, websites and the customer portal
- Create and manage your portal account and authenticate you when you sign in
- Show you your own performance figures and the live positions of your own drivers
- Respond to enquiries, provide support and communicate about your account
- Bill you and keep business records
- Maintain the security and reliability of our systems, and investigate misuse
- Comply with legal obligations
We do not sell your personal information, and we do not sell or share your business performance figures with other operators.
4. Who we share information with
We share information only with service providers that help us run TowFusion, and only to the extent they need it. Those currently include:
- Supabase — database hosting and account authentication for the customer portal
- Vercel — website and application hosting
- Mapbox — map rendering for fleet tracking
- FormSubmit — delivery of website contact form submissions to our email
- Google — web fonts, and, where you have engaged us for them, Google Business Profile and Local Services Ads management on your behalf
- Our email, telephony and payment providers, for correspondence and billing
We may also disclose information where we are required to by law, to enforce our agreements, or to protect the rights, property or safety of Maha 12 LLC, our customers or the public. If our business is sold or reorganised, information may transfer as part of that transaction.
Customer isolation. Each TowFusion customer can only see their own data. This is enforced in the database itself, not merely in the application, so one customer cannot access another customer's figures, trucks or drivers.
5. Driver location in detail
Fleet tracking exists so that a towing company can see where its own trucks are. It is worth being precise about how it works, because it involves people's real-time whereabouts.
- Sharing is started by the driver. A driver opens a private link on their phone and taps a button to begin sharing. Nothing is collected until they do.
- Sharing stops when they stop it. Tapping stop, or closing the page, ends it. Location is not collected in the background or when the page is closed.
- We store the last known position, not a journey history. Each update overwrites the previous one. We do not build a record of everywhere a driver has been.
- Only the driver's own employer can see it. The position is visible to the towing company that employs them. It is not shared with other customers or with the public.
- The link can be revoked. Deactivating a driver immediately stops their link from working.
If you are a driver and you have questions about this, speak to your employer in the first instance, or contact us using the details below.
For our customers: you are responsible for telling your drivers that you use location tracking and for obtaining any consent your local law requires before you give them a tracking link.
6. How we protect information
All traffic to our website and portal is encrypted in transit. Portal passwords are stored only as a salted cryptographic hash — neither we nor anyone at TowFusion can read them, which is why a forgotten password must be reset rather than looked up. Access between customer accounts is separated at the database level. Access to administrative systems is limited to people who need it.
No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by applicable law.
7. How long we keep information
We keep customer account information and performance figures for as long as your account is active, and afterwards for as long as we need them for legitimate business, accounting, tax or legal purposes. Driver location data is a single most-recent position per driver and is overwritten continuously; it is deleted when the driver record is deleted. Enquiry correspondence is kept for our business records. You can ask us to delete information as described below.
8. Your choices and rights
You can ask us to:
- Tell you what information we hold about you
- Correct information that is wrong or out of date
- Delete information, where we are not required to keep it
- Stop sending you marketing messages — you can also unsubscribe from any marketing email directly
Depending on where you live, you may have additional rights under state or national privacy law. Contact us using the details below and we will respond within the time your law requires. We will not discriminate against you for exercising any privacy right.
9. Cookies
The customer portal uses essential cookies to keep you signed in and to keep your session secure. These are required for the portal to function and cannot be switched off while you are using it. The marketing website does not require cookies to browse.
10. Children
Our services are for businesses. They are not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as our services change. When we do, we will revise the "last updated" date above. If a change materially affects how we handle your information, we will take reasonable steps to tell you.
12. How to contact us
For any privacy question or request, contact us:
- Maha 12 LLC (operating as TowFusion)
- 1 Main Street, Woodbridge, NJ 07095, United States
- Email: towing@towfusion.com
- Phone: 551-235-9153