TrashLane
Privacy Policy
Version 1 · Last updated August 14, 2026 · Effective August 14, 2026
This Privacy Policy explains how TrashLane, LLC (“TrashLane,” “we,” “us”) collects, uses, and shares personal information when you use our services: the trashlane.com website, the TrashLane web application at app.trashlane.com, the TrashLane mobile applications (including the TrashLane Driver app), our APIs, and the hauler-branded surfaces we host for our customers — service-request/signup pages, the customer portal, and hosted invoice payment pages (together, the “Services”).
1. Two ways we handle personal information
TrashLane is a product for waste-hauling businesses (“haulers”). We handle personal information in two distinct roles:
- Information about our own users and visitors — hauler account holders and their staff, website visitors, and waitlist subscribers. For this information, TrashLane decides how and why it is processed, and this policy describes those decisions.
- Information about haulers’ customers (“End Customers”) — the names, contact details, service addresses, service history, invoices, and related records that haulers store in TrashLane, and the information End Customers submit through their hauler’s branded pages, customer portal, and payment pages. We process this information on the hauler’s behalf and on its instructions, as a service provider. The hauler decides how and why it is used.
If you are an End Customer of a hauler that uses TrashLane: your relationship is with your hauler. To access, correct, or delete personal information your hauler keeps about you, contact your hauler directly — we support haulers in fulfilling those requests. Where this policy describes information collected through the customer portal or payment pages, we collect it for your hauler. Your use of those pages is governed by our Portal & Website Terms of Use.
2. Information we collect
Information you provide:
- Account and profile — name, email address, and a password (stored only as a salted cryptographic hash), or your Google account identity if you sign in with Google. Customer-portal users sign in with email magic links instead of passwords.
- Business profile (haulers) — company name, logo and brand color, business address, phone number, notification email, timezone, invoicing preferences, and EIN (used to prefill Stripe payment onboarding).
- Team and driver records (entered by haulers) — staff names, emails, roles, and for drivers: phone, driver’s-license number and class, and notes.
- Customer Data (entered by haulers, or by End Customers through branded pages and the portal) — End Customer names, emails, phones, company names, service addresses, notes and custom fields, uploaded documents, service and invoice records, and service-request submissions.
- Photos and documents — files haulers upload about their customers, and photos drivers capture at stops. These are stored in private object storage and served only through short-lived signed links.
- Communications and support — messages you send us, and in-app feedback, which may include a screenshot you attach and technical diagnostics (recent browser console errors, the page you were on, app version, browser type, and window size).
- Waitlist — the email address you submit on trashlane.com.
Information collected automatically:
- Session and device data — IP address, browser/device type (“user agent”), and sign-in session records.
- Location data (Driver app) — precise device location, collected while the Driver app is in use and in the background while a route is active, to show route progress, record service events, and improve routing. You can stop collection at any time through your device’s location permissions; haulers are responsible for informing their drivers about this collection.
- Product analytics — pages viewed and product events (for example, creating an organization or adding a customer), collected through our analytics providers (Plausible and PostHog), which may use first-party cookies and similar technologies. This may include session replays of how the app is used, with text inputs masked.
- Error and performance data — application errors, performance traces, and session replays via Sentry, with text masked and media blocked. This data can include your IP address and device information.
- Bot-protection signals — we use Cloudflare Turnstile on sign-in and public forms to distinguish people from bots.
- Payment events — subscription and payment status events from Stripe. TrashLane never receives or stores full card numbers or bank credentials; those go directly to Stripe.
Information from third parties: if you sign in with Google, we receive your name, email, and profile image from Google. Payment, payout, and account-status information about connected Stripe accounts comes from Stripe.
3. How we use information
We use personal information to: provide, maintain, and secure the Services; create and manage accounts and organizations; process subscription billing and, on haulers’ behalf, End Customer invoicing and payments through Stripe; send transactional and service communications (for example magic links, invoices, receipts, service notifications, and billing alerts); geocode service addresses and compute routes; provide support (which can include our staff accessing an account in a supervised support mode); monitor performance, debug errors, and analyze product usage to improve the Services; enforce our Terms of Service and prevent fraud and abuse; and comply with legal obligations.
We do not use personal information for third-party advertising.
We use information in the Services — including Customer Data — to develop, train, tune, and evaluate the machine-learning and AI models that power features such as route optimization, address matching, anomaly detection, and in-product assistance. We do not use it to train models made available for the benefit of third parties. Where an AI feature depends on a third-party model provider, we list that provider in the subprocessor table below and contract for terms that prevent it from using our customers’ data to train its own models.
4. How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only with:
- Service providers (subprocessors) that host and operate parts of the Services for us, under agreements that limit their use of the data:
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Application hosting, storage, queues, bot protection, logs | All Service traffic and stored files |
| Neon | Primary database hosting (PostgreSQL, US region) | All application data |
| Stripe | Subscription billing; payment processing for haulers’ connected accounts | Billing contact and payment data; hauler business/KYC data |
| Resend | Sending transactional and notification email; delivery status | Recipient addresses and message content |
| Optional sign-in (OAuth) | Name, email, profile image | |
| Geocodio | Converting service addresses to map coordinates | Service addresses |
| Geoapify | Address autocomplete while typing | Partial addresses (proxied through our servers) |
| Fly.io | Route computation infrastructure | Site coordinates for routing |
| OpenFreeMap | Map tile rendering | Map-viewport requests, including IP address |
| Plausible | Privacy-focused website and product analytics (cookieless) | Page views, referrer, device type |
| PostHog | Product analytics and session replay (masked) | Usage events, device data |
| Sentry (US) | Error tracking, performance, session replay (masked) | Error context, device data, IP address |
| Slack, GitHub | Internal operations — new-signup alerts, waitlist notifications, and feedback triage in our team tools | Signup names/emails; waitlist emails; feedback content |
- Your hauler — information collected through a hauler’s branded pages, portal, and payment pages, and messages you exchange there, belong to the hauler’s account.
- Navigation hand-offs — if a driver opens turn-by-turn navigation, we open the destination in the device’s map app (for example Google Maps); that provider’s privacy policy applies from that point.
- Legal and safety — when required by law or legal process, or to protect the rights, safety, and property of TrashLane, our users, or others.
- Business transfers — as part of a merger, acquisition, financing, or sale of assets, subject to this policy’s commitments.
When you provide personal data in connection with Stripe onboarding or payments, Stripe receives that personal data and processes it in accordance with the Stripe Privacy Policy.
5. Cookies and similar technologies
We use only essential cookies and first-party analytics cookies — no advertising or cross-site tracking cookies:
| Cookie / storage | Type | Purpose |
|---|---|---|
Session cookies (better-auth.*) | Essential | Keeping you signed in; short-lived session cache |
tl_signup_token | Essential | Carrying an invite code through signup (30-minute lifetime) |
| Cloudflare Turnstile | Essential | Bot protection on sign-in and public forms |
PostHog (ph_*) cookies and localStorage | Analytics (first-party) | Understanding product usage; session replay (masked) |
| Preference storage (localStorage) | Essential | Theme, sidebar, and table-layout preferences, stored on your device |
Because we do not sell or share personal information for targeted advertising, there is nothing to opt out of under state “do not sell/share” rules, and we do not show a cookie consent banner. You can block or delete cookies in your browser; blocking essential cookies will prevent sign-in.
Do Not Track and opt-out preference signals. We do not track you across other companies’ websites or apps, so there is no cross-site activity for a “Do Not Track” browser setting or a Global Privacy Control signal to turn off. We do not respond to those signals, and receiving one would not change what we collect.
6. Data retention
| Data | Retained |
|---|---|
| Account and organization data | Life of the account, then deleted within 60 days of account/organization deletion or termination |
| Customer Data (haulers’ End Customer records) | Until the hauler deletes it or the organization is terminated, then deleted within 60 days (with a 30-day export window after termination) |
| Notification delivery records | Life of the hauler’s account, as an audit record that a message was sent |
| Billing, subscription, and tax records | Up to 7 years, as required for tax and accounting |
| Error, replay, and diagnostic data | Per our providers’ rolling retention windows (typically ≤ 90 days) |
| Waitlist emails | Until launch communications conclude, or on request |
| Backups | Rolling backup window; deleted data ages out of backups on the backup cycle (within 30 days) |
7. Security
We protect personal information with encryption in transit (TLS) and at rest, salted password hashing (scrypt), magic-link authentication for the customer portal, role-based access control within organizations, bot protection and rate limiting on sensitive endpoints, and private object storage accessible only through short-lived signed links. No method of transmission or storage is 100% secure, but we work to protect your information. If we confirm a breach of security that leads to the unauthorized access, disclosure, or loss of personal information, we will notify the affected hauler without undue delay, and we will notify affected individuals and authorities as required by law.
8. Your rights and choices
You can access and update your account information in the app, export core records (customers, drivers, invoices) as CSV, and request deletion of your account. Depending on your state of residence, you may also have legal rights to access, correct, delete, or obtain a copy of your personal information, and to not be discriminated against for exercising them — we honor these requests for all US users regardless of state. To exercise any right, email support@trashlane.com; we will verify your request (typically via your account email) and respond within 30 days, and if we decline a request you may appeal by replying to our response.
If you are an End Customer, direct requests about the information your hauler keeps to your hauler; we will assist them in fulfilling verified requests. You can manage your notification preferences in the customer portal (billing notices required for active service cannot be disabled).
Email choices: transactional emails (magic links, invoices, receipts, billing alerts) are part of the Services and can’t be opted out of while you use them; waitlist and product-news emails include an unsubscribe option.
Calls and texts: we may contact hauler account holders by phone or text about their account, billing, security, and support. You can opt out of marketing calls and texts at any time by replying STOP or writing to support@trashlane.com. Mobile numbers and any text-messaging opt-in consent we collect are never shared with third parties or affiliates for marketing or promotional purposes.
9. Children
The Services are business tools intended for adults, are not directed to children under 13, and require account holders to be at least 18. We do not knowingly collect personal information from children; if you believe a child has provided us personal information, contact us and we will delete it.
10. Where your information is stored
TrashLane is operated from the United States, our infrastructure is hosted in the United States, and the Services are offered only to US businesses. If you access the Services from elsewhere, you understand your information will be processed in the United States.
11. Changes to this policy
We may update this policy from time to time. If a change is material, we will notify you at least 30 days before it takes effect (by email, in-app notice, or both); otherwise, updates take effect when posted with a revised “Last updated” date.
12. Contact us
TrashLane, LLC 4 Quail Drive, Raymond, NH 03077 support@trashlane.com