Privacy policy

Who we are

Hauli Ltd. (“Hauli”, “we”, “us”) is responsible for the personal data described in this policy.

Hauli is used by contractors — construction and hauling companies — to manage their own jobs and the drivers who work them. A contractor decides which jobs to create, which drivers to assign and how long raw location data is kept. Hauli is responsible for the account data each person gives us; for the job and location records a contractor manages in Hauli, the contractor decides how they are used and we process them on the contractor’s behalf. Contractors can ask us for a data processing agreement at info@gohauli.ca.

Questions about this policy: info@gohauli.ca.

What we collect

If you use the contractor dashboard

• Account details: your name, email address, phone number (optional), your company’s name, and your role on your company’s team (owner, full or limited access).
• Your password — held only as a one-way hash by our authentication provider. We never see or store it in readable form.
• Job data you enter: job titles, pickup and drop-off addresses and their map positions, materials, weights, load counts, prices and hourly rates, notes, and which drivers are assigned to which work.
• Records of the work: loads confirmed, hours worked, load tickets, disputes you raise on a ticket and your decisions on drivers’ load-change requests.
• Settings, such as your company’s GPS retention window.

If you use the driver app

• Account details: your name and email address, optionally your phone number and licence class, and your availability status.
• Your password — held only as a one-way hash, as above.
• Your location while you work an active job — see Driver location below.
• Your work on each job: the jobs you join and accept, each load you confirm and when, the hours you clock, any request for more or fewer loads (with the note you add), and your earnings, which are calculated from the rates the contractor set.
• Your signature, drawn on screen to sign the load ticket at the end of your work on a job.
• Your driver rating — see How we use it.
• A push notification token for your phone, if you allow notifications, so we can tell you about your jobs.

The app uses your camera only to scan a job’s QR code. The image is read on your phone to find the job code; it is not stored or uploaded. Your sign-in session is kept in your phone’s secure storage (the iOS Keychain or the Android Keystore).

Everyone

• Emails we send you, such as the verification code when you create an account.
• Technical data that any web or app request carries, such as IP address and device or browser type, and — if error tracking is enabled — reports of errors, with personal details removed (see Who can see it).

What we don’t collect

No advertising identifiers, no contacts, no photos, and no analytics or advertising trackers. This website sets no cookies. The contractor dashboard uses cookies only to keep you signed in.

Driver location

When. The driver app collects your location only while you are working an active job. It starts when you start work on a job you have been assigned and stops when you clock out for the day, finish your work on the job, or sign out. While it is on, your phone shows that it is in use — the location indicator on iPhone, and a persistent “Hauli is tracking this job” notification on Android.

The app asks for “Always” (background) location permission so that tracking continues while your phone is locked or you are using another app during a job. It is not used to collect location when you have no active job.

What. Your position (latitude and longitude), its accuracy and the time, about every 10 seconds, linked to the job and the load in progress.

Who sees it. The contractor running the job sees your live position on a map while the job is active and can replay your route afterwards. You can see your own. Other drivers cannot see your location.

How long it is kept. Raw location points are deleted automatically after the retention window the contractor has chosen: 24 hours, 10 days, 30 days, 60 days or 90 days (30 days unless they change it, and never longer than 90 days).

A simplified copy of your route — position and time only, kept at roughly one point every 50 metres or 2 minutes — is stored with each job so the contractor can review the route of completed work. It is kept for as long as the job record exists, and is deleted when the job is deleted or when you delete your account.

How we use it

• To run the service: creating and signing in to accounts, running jobs, showing drivers’ live positions to the contractor, counting loads, calculating earnings from the contractor’s rates, and generating signed PDF load tickets.
• To keep you informed: account emails (such as verification codes), and in-app and push notifications about your jobs — for example when you are assigned work, a job you are on changes, or a load-change request is decided. We do not send marketing email from the product.
• Driver rating: Hauli automatically calculates a 0–5 rating for each driver from how reliably they complete work they are assigned, how much of their assigned load count they fulfil, and how many of their tickets are dispute-free. Finishing a job early because the work is genuinely done does not lower it. The rating is shown to contractors whose jobs you are assigned to. Hauli does not make decisions about you with it — contractors decide who they assign. If you think your rating is wrong, email info@gohauli.ca and a person will review it.
• To keep Hauli secure: verifying email addresses, enforcing access rules, limiting repeated attempts and preventing abuse.
• To fix problems: error reports, if error tracking is enabled, with personal details removed.

We use your data with your consent, which you give when you create an account and when you allow location access on your phone, and because we need it to provide the service you signed up for. You can withdraw consent at any time by turning off location access or deleting your account, though parts of Hauli will then stop working. Where laws such as the GDPR apply, we rely on the same grounds: our contract with you, our legitimate interest in keeping Hauli secure and working, our legal obligations, and your consent for background location.

Who can see it

Inside Hauli

• Contractors see a limited profile of their drivers. While you are assigned to a contractor’s job, that contractor’s team sees your name, email address, phone number, availability, rating, and how many jobs you accepted but were never given work on — plus your live location during the job, your route, loads, hours and signed tickets for their jobs. They do not see your earnings from other contractors. Your licence class is not part of that profile, but it is printed on the load tickets for their jobs.
• A contractor’s team sees that company’s jobs, according to each member’s access level.
• Drivers see the job details a contractor shares with them — the company name, addresses, materials, their own assigned work and their own pay — and nothing about other drivers.

Service providers

We use these providers to run Hauli. They process personal data on our behalf and only for the purpose listed.

• Supabase — Database, sign-in and authentication, private file storage, live updates and server functions. Data involved: All account, job and location data described in this policy.
• Vercel — Hosts this website and the contractor dashboard. Data involved: Standard web request data, such as IP address and browser type.
• Resend — Delivers transactional email, such as the verification code sent when you sign up. Data involved: Your email address and the content of the email.
• Mapbox — Maps and address search on the contractor dashboard. Data involved: Addresses typed into search, the map area being viewed and standard request data.
• Apple Maps / Google Maps — Draws the map inside the driver app (Apple Maps on iPhone, Google Maps on Android). Data involved: The map area shown on your phone and standard request data.
• Expo — Delivers push notifications about your jobs to your phone. Data involved: Your device’s push token and the notification text.
• Sentry (if enabled) — Error tracking. When an error occurs, a technical report is sent so we can fix it. Data involved: The error and app/device details. Names, email addresses, phone numbers and GPS coordinates are removed before the report leaves the device or server.

Our database is hosted in Canada. Some of these providers may process data in the United States or elsewhere; when they do, it is protected by their data processing terms with us, and it may be accessible to authorities there under local law.

Otherwise

We do not sell or rent personal data, and we do not share it for advertising. We disclose it outside the cases above only when the law requires it, to protect people’s safety or our legal rights, or as part of a merger or sale of the business, in which case this policy continues to apply.

How long we keep it

• Account and profile data: until you delete your account.
• Raw driver location: the contractor’s retention window — 24 hours, 10 days, 30 days, 60 days or 90 days, 30 days by default.
• Simplified job routes: as long as the job record exists, or until the driver deletes their account.
• Job records — load tickets, loads, per-driver assignments with their earnings and pricing, load-change history, job event history, jobs created by team members, disputes, payment records and issued load ticket PDFs: these are the contractor’s business records and are kept with the contractor. If a driver or a team member deletes their account, these records stay with the contractor with the person’s name kept only as text, no longer linked to any account (their email, phone number, licence class and signature images are not kept). Ticket PDFs already issued still show the name, email address and licence class printed on them. Job records are kept for as long as the contractor’s account exists and are deleted with it.

The details of what deletion removes and keeps are on Delete your account. Deleted data is removed from our backups within 90 days as they expire. Error reports, if error tracking is enabled, are kept for up to 90 days.

Security

• Access rules on every table. The database enforces who may read or change each record (row-level security), so a contractor sees only its own jobs and drivers, and a driver sees only their own work.
• Encrypted in transit. All traffic between the apps, this website, the dashboard and our servers uses HTTPS (TLS).
• Hashed passwords. Passwords are stored only as a one-way hash by our authentication provider.
• Private files. Signatures and ticket PDFs are kept in private storage, never at public links.
• Secure sessions. The driver app keeps your sign-in in the phone’s secure storage, and new accounts must verify their email address.

No system is perfectly secure. If a breach affects your personal data, we will tell you as the law requires.

Your rights and choices

• See and correct your data: your profile is in Settings in the app and on the dashboard. For a copy of your data, email info@gohauli.ca.
• Delete your account yourself at any time — see Delete your account.
• Location: you can withdraw location permission in your phone’s settings at any time. Hauli needs location to run a job, so you will not be able to work a job without it.
• Notifications: turn push notifications off in your phone’s settings at any time.

Depending on where you live, you may also have the right to access, port, restrict or object to the use of your data, and to complain to a data protection authority. In Canada these rights come from PIPEDA and provincial privacy laws; elsewhere, laws such as the GDPR or the CCPA may give you similar rights. To use any of them, email info@gohauli.ca. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or your local privacy regulator.

Some of a driver’s records are also held by the contractor they worked for, as that contractor’s business records. We may pass a request about those records to the contractor.

Children

Hauli is a business tool for construction companies and professional drivers. It is not directed at children, and you must be at least 18 to use it. If we learn that we hold data about a child, we will delete it.

Changes to this policy

When this policy changes we will update this page and its “Last updated” date. If a change is significant, we will tell you in the app, on the dashboard or by email before it takes effect.

Contact us

Privacy questions and requests: info@gohauli.ca. Help with the product: support@gohauli.ca.