Privacy Policy
Last updated: October 9, 2026
1. What we collect
When you use Don't Get Towed!, we collect:
- Account info: your email address (required), and phone number and name if you choose to provide them.
- How you found us: if you arrive through one of our marketing links or from another website, we note the campaign label and that site's name (for example "reddit") in a small cookie, and save it to your account if you sign up. We also count page visits with Vercel Web Analytics, which uses no cookies and collects no personal information. This tells us which outreach works; it is never used for advertising or shared.
- Vehicle info: license plate, state of issuance, and optionally make and model, for vehicles you add. This is used to look up NYC's own public violation records for that plate -- data the City already makes public to anyone who looks up that plate.
- Payment info: handled entirely by Stripe. We receive confirmation that a payment succeeded and basic transaction details -- we never see or store your full card number.
- Dispute drafting input: if you use the paid dispute-drafting feature, the explanation you type is sent to Anthropic's Claude API, along with the ticket's own public facts (plate, violation type, date, amount, location), to generate a draft statement. We do not send any other account data to Anthropic for this purpose.
- Usage data: basic technical logs needed to operate and secure the Service.
We deliberately do not require or collect vehicle registration, insurance documents, or government ID to add a vehicle.
2. How we use it
- To operate the Service: track your vehicles, send alerts, and run your dashboard;
- To process payments and provide the paid features you request;
- To send you the notifications you've opted into (email and/or text);
- To detect and prevent misuse, and to keep the Service reliable and secure;
- To respond to you when you contact us.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Who we share it with
We share data with the following service providers, only as needed to run the Service:
- Supabase -- database hosting and account sign-in;
- Stripe -- payment processing;
- Resend -- sending email notifications;
- Twilio -- sending text message notifications;
- Anthropic -- generating AI-drafted dispute statements, as described above;
- Vercel -- application hosting and anonymous visit statistics;
- NYC Open Data -- we query this public government feed by plate and state to retrieve violation records; we do not send it any other personal information.
We may also disclose information if required by law, or to protect the rights, safety, or property of the Service, our users, or the public.
Mobile numbers and text message opt-in consent are never shared with or sold to third parties or affiliates for marketing or promotional purposes. Your number is shared only with Twilio, solely to deliver the text alerts you asked for.
4. Data retention
We keep your account and vehicle data for as long as your account is active, plus a reasonable period afterward for recordkeeping (for example, payment and dispute records, which we may need to retain for tax or legal purposes). You can request deletion at any time -- see Section 6.
5. Notification preferences
You can control whether you receive email and/or text notifications from your account settings. Text alerts are off unless you turn them on by entering a mobile number and ticking the consent box; you can turn them off at any time from your dashboard or by replying STOP to any text. Some account-related messages (for example, payment receipts or a notice that tracking has paused due to a failed charge) may still be sent regardless of notification preferences, since they relate directly to your account's status.
6. Your choices and rights
You can, at any time, by emailing us:
- Request a copy of the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion of your account and associated data, subject to Section 4;
- Remove a vehicle from tracking directly from your dashboard.
If you are a California resident or otherwise covered by a state privacy law that gives you additional specific rights, contact us and we will honor applicable requests.
7. Security
We use industry-standard measures (encrypted connections, access controls, and a payment processor that is itself PCI-compliant) to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.
8. Children's privacy
The Service is not directed to, and we do not knowingly collect information from, anyone under 18.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
10. Contact
Questions about this policy, or a request under Section 6: contact@dontgettowednyc.com.