Privacy Policy

This Privacy Policy describes how Trailer Rental Manager ("we," "us," "our," or the "Service") collects, uses, and shares information about you when you use trmanager.app or any of our related services.

1. Who we are

Trailer Rental Manager is operated by the team behind trmanager.app, a software-as-a-service platform that helps trailer rental fleet operators manage contracts, inspections, payments, and customer portals. For privacy questions, contact us at privacy@trmanager.app.

2. Information we collect

2.1 Information you provide directly

• Account information: name, email address, password (hashed), company name, phone number when you register.
• Customer data: information you enter into the Service about your own customers, trailers, contracts, inspections, payments, and related records.
• Payment information: billing address, last four digits of payment card, and Stripe customer identifier. We do not store full payment card numbers — these are handled directly by Stripe.
• Communications: emails, support tickets, and any other content you send us.

2.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, click events, error logs.
• Device and browser: IP address, browser type and version, operating system, screen resolution, time zone.
• Cookies and similar technologies: session cookies for authentication, preferences, and anti-abuse purposes; analytics and advertising cookies on our public marketing pages (see Section 4 for the providers we use). You can opt out of advertising cookies through your browser settings or via the opt-out tools each provider offers.

3. How we use information

• Provide, maintain, and improve the Service.
• Authenticate users and prevent fraud or abuse.
• Process payments and send transactional emails (invoices, payment reminders, password resets, contract notifications).
• Respond to support requests and communicate about your account.
• Comply with legal obligations and enforce our Terms of Service.
• Generate aggregated analytics about Service usage and marketing-page traffic. Inside the authenticated application, analytics do not identify individual users or customers; on our public marketing pages (e.g. the homepage, pricing, and landing pages), we and our advertising providers use cookies and pixels to measure ad performance and to show our ads to people who have visited our site.

We do not sell your personal information. We do use analytics and advertising providers (listed in Section 4) on our public marketing pages to measure marketing performance and to retarget visitors with our own ads. We do not share customer data entered into the authenticated application with any advertising provider.

4. Service providers we share data with (subprocessors)

We rely on the following third-party service providers, each of which processes data only on our instructions and is contractually bound to protect it:

• Vercel Inc. — application hosting, content delivery, and first-party Web Analytics (page-view counts, no cookies). Vercel's privacy policy is at vercel.com/legal/privacy-policy.
• Supabase Inc. — managed PostgreSQL database and file storage.
• Stripe Inc. — payment processing. Stripe's privacy policy is at stripe.com/privacy.
• Resend Inc. — transactional email delivery.
• Google LLC (Google Analytics 4) — marketing-page analytics and ad measurement. Opt out at tools.google.com/dlpage/gaoptout.
• Meta Platforms, Inc. (Meta Pixel) — marketing-page conversion measurement and retargeting. Manage your ad preferences at facebook.com/ads/preferences.

We will update this list when subprocessors are added, removed, or changed. We do not transfer your data to any third party not listed above, except (a) as required by law, valid legal process, or government request; (b) to enforce our Terms of Service; or (c) in connection with a merger, acquisition, financing, or sale of business assets, in which case the recipient will be bound by terms at least as protective as this Policy.

5. Data retention

We retain your account information and customer data for as long as your account is active. After account deletion, we delete or anonymize personal information within 30 days, except where retention is required by law (tax records, audit trails, fraud prevention) or where retention is necessary to resolve disputes or enforce agreements.

Backups may persist for up to 7 additional days after deletion before being overwritten.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated personal information.
• Export your data in a portable format.
• Opt out of certain communications (we will always send transactional and security emails).
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@trmanager.app. We will respond within 30 days. Account-level access, correction, export, and deletion are also available directly in the Service settings.

7. California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the purposes of collection, the right to delete personal information (subject to exceptions), and the right not to be discriminated against for exercising these rights. We do not sell personal information.

8. European Economic Area, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the legal bases for our processing are: performance of a contract with you, compliance with legal obligations, and our legitimate interests in operating and securing the Service. You have the right to lodge a complaint with a supervisory authority.

Data may be transferred to and processed in the United States. We rely on appropriate safeguards (Standard Contractual Clauses or successor mechanisms) for such transfers.

9. Security

We protect data with industry-standard measures including encryption in transit (HTTPS/TLS), encryption at rest (for database and stored files), access controls, audit logging, and regular security reviews. No system is perfectly secure — we will notify affected users without undue delay if we become aware of a breach affecting their personal information, as required by law.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe we have collected such information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email or through the Service at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

12. Contact

Privacy questions, requests, and complaints: privacy@trmanager.app