Privacy Policy

When you request a quote, place an order, or contact us, we collect information you provide directly, including your full name, email address, phone number, billing address, pick-up and delivery addresses, and vehicle details (year, make, model, VIN). If you create an account, we also store your login credentials.

Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We do not store, process, or have access to your full credit card number, CVV, or other sensitive payment credentials. We retain only a transaction reference ID and payment status for order fulfillment.

When you visit our website, we automatically collect device information (browser type, operating system), IP address, pages viewed, referring URLs, and interaction data. This information is collected through cookies, server logs, and analytics tools to help us improve our services.

We collect ZIP codes and city/state information to calculate shipping routes and pricing. During active transport, GPS tracking data from the carrier's device is used to provide real-time shipment tracking. We do not track your personal device location.

We retain records of communications between you and Super AutoHaul, including emails, SMS messages, and chat transcripts. SMS messages sent to you for order updates and verification codes are logged for security and compliance purposes. Message content is retained only as long as necessary for order fulfillment and dispute resolution.

We use your personal information to process quotes, create orders, coordinate with carriers, schedule pick-up and delivery, process payments, and provide shipment tracking. Your contact information is shared with the assigned carrier for coordination during transport.

For security purposes, we verify customer identity through phone-based PIN verification when accessing order details. Driver identity is verified through our third-party verification partner, Persona, which processes government-issued ID and selfie verification. We retain only the verification status and reference ID, not the identity documents themselves.

We analyze aggregate, de-identified data to improve our pricing accuracy, optimize carrier matching, enhance our website experience, and develop new features. This analysis does not identify individual users.

We use your information to respond to inquiries, resolve disputes, process damage claims, and provide post-delivery support. Your order history and communication records help us provide efficient and accurate assistance.

When you place an order, we share your name, phone number, pick-up/delivery addresses, and vehicle information with the assigned carrier. This is necessary for the carrier to complete your transport. Carriers are contractually prohibited from using your information for any purpose other than completing the shipment.

We share information with trusted third-party service providers who assist in operating our business: Stripe (payment processing), Twilio (SMS notifications), Persona (driver identity verification), Mapbox (route mapping), New Relic (application monitoring), and Supabase (database hosting). Each provider processes data only as necessary to perform their services and in accordance with their own privacy policies.

We may disclose your information when required by law, in response to a subpoena or court order, to protect our rights or safety, to investigate fraud, or in connection with a merger, acquisition, or sale of assets. We will notify you of such disclosures when legally permitted to do so.

We never sell, rent, or trade your personal information to third parties for marketing purposes. We never share your data with advertisers. We never provide carrier pay rates, profit margins, or internal pricing calculations to any external party.

All personal information is encrypted both in transit (TLS 1.2+) and at rest (AES-256). Sensitive fields including your name, email, phone number, and addresses are additionally encrypted at the application layer using AES-256-GCM authenticated encryption. Encryption keys are managed separately from the encrypted data.

Access to personal data is restricted to authorized personnel on a need-to-know basis. Our database employs Row Level Security (RLS) policies to enforce data isolation. Administrative access requires multi-factor authentication.

All access to personal data is logged in an immutable audit trail, including who accessed the data, when, and for what purpose. Our systems are monitored 24/7 for unauthorized access attempts. We conduct regular security assessments and vulnerability testing.

In the unlikely event of a data breach, we will notify affected individuals within 72 hours as required by applicable law. Our incident response plan includes immediate containment, investigation, remediation, and notification procedures.

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your verified request. Contact us at info@superautohaul.com.

You have the right to request correction of inaccurate or incomplete personal information. You can update your contact information by contacting our support team. We will process correction requests within 30 days.

You have the right to request deletion of your personal information, subject to legal retention requirements. We are required to retain certain records (order details, payment records, and shipping documentation) for a minimum of 7 years for tax and regulatory compliance. Upon deletion, we will anonymize your data rather than destroy it where retention is required.

You can opt out of marketing communications at any time by replying STOP to any SMS message or clicking the unsubscribe link in any email. Note that transactional communications related to active orders (shipment updates, verification codes, delivery confirmations) cannot be opted out of while an order is in progress.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at info@superautohaul.com.

We use essential cookies that are strictly necessary for the website to function, including session cookies for authentication, security cookies for fraud prevention, and preference cookies that remember your settings. These cannot be disabled.

We use New Relic for application performance monitoring, which collects anonymized usage data to help us identify and fix technical issues. We do not use Google Analytics or any advertising-related tracking pixels.

We honor Do Not Track (DNT) browser signals. When we detect a DNT signal, we limit data collection to what is strictly necessary for providing our services.

By providing your phone number and placing an order, you consent to receive transactional SMS messages related to your shipment, including order confirmations, carrier assignment notifications, pick-up and delivery updates, verification codes, and delivery confirmations. Message and data rates may apply. You can opt out of non-transactional messages by replying STOP at any time.

We send transactional emails related to your orders and account. We may also send periodic service updates and newsletters, from which you can unsubscribe at any time. We will never send you unsolicited marketing emails without your prior consent.

We may contact you by phone regarding active orders, scheduling coordination, or in response to your support requests. We do not make unsolicited sales calls.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child under 18, we will delete it promptly.

We retain personal information only as long as necessary to fulfill the purposes described in this policy. Order records and related documentation are retained for 7 years for tax and legal compliance. Account information is retained until you request deletion. Automatically collected data (server logs, analytics) is retained for 12 months.

Super AutoHaul operates exclusively within the continental United States. Our servers and data processing facilities are located in the United States. We do not transfer personal data internationally.

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. For significant changes, we will also notify you by email or through a prominent notice on our website. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

If you have questions about this privacy policy or our data practices, please contact us at info@superautohaul.com, call 1(866) 378-7375, or write to us at Super AutoHaul, Attn: Privacy, [Address]. We will respond to all privacy-related inquiries within 30 days.