We do not sell your data. Ever.
gmail.send permission and your basic email address — never access to read, search, or store your inbox. This is used solely to send invoice emails from your own address; your Google refresh token is stored encrypted at rest and used only to obtain a fresh sending token when you click Email. Revoke access anytime from your Google Account's connected apps settings or PayHaul's own account settings.PayHaul's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Files stored on Cloudflare R2 (US). Database on Railway managed Postgres (US). All data transmitted over HTTPS. Passwords hashed — we cannot see them. Files are private — not accessible via public URLs.
Active account data retained while your account is active. Invoice records retained 7 years (standard business requirement). Deleted accounts purged within 90 days except where required by law.
You may request access, correction, or deletion of your data by emailing support@payhaul.ai. California residents have additional rights under CCPA — contact us to exercise them.
Lee Transportation Inc. DBA PayHaul · Temecula, California · support@payhaul.ai