1. Who We Are

TowMeUp is a flight park management platform operated by TowMeUp LLC ("TowMeUp," "we," "us," or "our"), based in the United States. We provide software for aerotow hang gliding and paragliding parks, including online ticket sales, digital check-in, membership validation, and flight operations management.

Questions about this policy? Email us at hello@towmeup.app.

2. Information We Collect

Account & profile information

When you create an account or book a flight, we collect your name, email address, phone number, and body weight (required for hang gliding aerotow safety limits). Instructors and tug pilots may also provide a profile photo and payment handle information (Venmo, CashApp, PayPal, Zelle) for tip pages.

Membership & certification data

We collect your USHPA (United States Hang Gliding and Paragliding Association) member number in order to validate active membership status at the time of check-in. We do not store your full USHPA membership record — only your member number and the most recent validation result.

Payment information

All payment processing is handled by Stripe. TowMeUp does not store your credit card number, CVV, or bank account details. We receive transaction identifiers, amounts, and confirmation statuses from Stripe in order to issue and track your flight tickets.

Usage and device data

We may collect standard server logs including IP addresses, browser type, and pages visited in order to diagnose errors and improve the platform. We do not use third-party advertising trackers.

Push notifications

If you opt in to push notifications, we store a browser push subscription token tied to your account. You can revoke this permission at any time in your browser or device settings, or in your TowMeUp account settings.

3. How We Use Your Information

To process ticket purchases and issue your flight booking token (QR code).
To validate your USHPA membership and weight limits at check-in.
To send booking confirmations, reminders, and flight-day notifications via email or push.
To allow park staff to manage the flight queue, ramp assignments, and safety rosters.
To provide instructors and tug pilots with operational tools and tip pages.
To detect and prevent fraud, abuse, or safety violations.
To comply with applicable law and respond to valid legal requests.

We do not sell your personal information to third parties. We do not use your data for behavioral advertising.

4. Multi-Tenant Data Isolation

TowMeUp is a multi-tenant platform. Each flight park (tenant) can only access data belonging to their own park. Your booking history, profile, and flight records are isolated per park and are not shared across tenants. Park operators can view data related to bookings at their park; they cannot access your data at other parks.

5. SMS Messaging

If you opt in to TowMeUp SMS messages (via the consent checkbox in the Alert Settings panel of the TowMeUp app), you consent to receive daily flying coordination polls and weather summaries via text message. See our SMS Program page for full details. Message frequency: 1–2 messages per day. Message and data rates may apply.

Reply STOP at any time to unsubscribe. Reply HELP for help. You can also email hello@towmeup.app to be removed from SMS messaging.

Your mobile phone number is never sold or shared with third parties for their own marketing purposes. It is used solely to deliver TowMeUp coordination messages you have opted in to receive. SMS delivery is handled by Twilio (see Section 6).

6. Third-Party Services

Stripe — payment processing. Your payment information is governed by Stripe's Privacy Policy.
Supabase — cloud database and authentication. Data is stored in Supabase's managed PostgreSQL infrastructure.
Resend — transactional email delivery (booking confirmations, reminders).
Twilio — SMS message delivery. Your phone number is transmitted to Twilio solely for the purpose of delivering messages you have opted in to receive. Twilio does not use your number for any other purpose.
USHPA — membership validation API. We query your member number against USHPA's database at check-in time only.

7. Data Retention

We retain your account data for as long as your account is active. Booking records are retained for at least two years to support dispute resolution and safety audits. You may request deletion of your account and associated personal data at any time (see Section 7).

8. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you.
Correction — update inaccurate or incomplete information via your account settings.
Deletion — request that we delete your account and personal data, subject to retention requirements above.
Portability — request your data in a machine-readable format.
Opt-out of communications — unsubscribe from email or revoke push notification permissions at any time.

To exercise any of these rights, email hello@towmeup.app. We will respond within 30 days.

9. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), row-level security policies on our database, and access controls that limit which staff can view sensitive records. No method of transmission or storage is 100% secure; if you believe your account has been compromised, contact us immediately.

10. Children's Privacy

TowMeUp is not directed to children under 13. We do not knowingly collect personal data from children under 13. Minors participating in flights must have a parent or guardian complete the booking and any required waivers.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated via email or an in-app notice. Continued use of TowMeUp after changes take effect constitutes acceptance of the revised policy.

12. Contact

TowMeUp LLC
hello@towmeup.app

Privacy Policy