Privacy Policy

TrashOS, Inc. ("TrashOS," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at trashos.com and our waste management software platform (collectively, the "Service"). Please read this Privacy Policy carefully. By accessing or using the Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide when you register for an account, fill out a form, make a purchase, or otherwise interact with the Service. This may include:

• Account Information: Name, email address, phone number, company name, job title, and password.
• Billing Information: Credit card number, billing address, and payment details. Payment information is processed by our third-party payment processor (Stripe) and is not stored on our servers.
• Business Data: Route data, customer records, fleet information, service schedules, and other operational data you input into the platform.
• Communications: Messages, support tickets, feedback, and other communications you send to us.

Information Collected Automatically

When you access the Service, we may automatically collect certain information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, and referring URLs.
• Location Data: Approximate geographic location based on IP address. For driver-facing applications, precise GPS location data may be collected with explicit consent.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies as described in our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To operate and deliver the features and functionality of TrashOS, including route optimization, fleet management, customer management, and billing.
• Process Transactions: To process your subscription payments and manage your account.
• Communicate With You: To send you service-related notices, updates, security alerts, and support messages.
• Improve the Service: To analyze usage patterns, diagnose technical problems, and develop new features and enhancements.
• Marketing: To send you promotional communications about TrashOS products, features, and events. You may opt out of marketing emails at any time.
• Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights and the rights of others.
• Safety and Security: To detect, prevent, and address fraud, abuse, and security incidents.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share information with trusted third-party service providers who perform services on our behalf, such as payment processing (Stripe), cloud hosting (AWS), analytics (Google Analytics), and customer support (Intercom). These providers are contractually obligated to protect your information and may only use it to provide services to us.
• Business Transfers: If TrashOS is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena).
• With Your Consent: We may share your information for other purposes with your explicit consent.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits and penetration testing.
• Role-based access controls limiting employee access to personal data.
• SOC 2 Type II compliance for our cloud infrastructure.
• Automated monitoring and alerting for suspicious activity.

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and to improve and analyze our Service. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. For more information about how we use cookies, please see our Cookie Policy.

6. Your Rights and Choices

For All Users

• Access and Update: You can access and update your account information at any time by logging into your TrashOS account settings.
• Email Opt-Out: You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any promotional email.
• Account Deletion: You can request deletion of your account by contacting us at privacy@trashos.com.

For Users in the European Economic Area (GDPR)

If you are a resident of the European Economic Area, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: The right to request that we limit our processing of your personal data.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: The right to object to our processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: If processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@trashos.com. We will respond to your request within 30 days. Our legal basis for processing personal data includes the performance of a contract, legitimate interests, consent, and legal obligations.

For California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: The right to request information about the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a request, please contact us at privacy@trashos.com or call us at (800) 555-1234. We will verify your identity before fulfilling your request.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal, accounting, or compliance purposes. Aggregated and anonymized data that cannot be used to identify you may be retained indefinitely for analytics and product improvement.

8. International Data Transfers

TrashOS is based in the United States, and your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to a country with different data protection laws. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 16, please contact us at privacy@trashos.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice, such as an email notification or a prominent notice within the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@trashos.com
• Mail: TrashOS, Inc., Attn: Privacy Team, 100 Innovation Drive, Suite 400, Austin, TX 78701
• Phone: (800) 555-1234

If you are in the EU and believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.