Skip to main content

HaulHQ - Privacy & Security Policy


Effective date: October 4, 2026

1. Who is responsible

HaulHQ is operated by Dustline in Alberta, Canada (“Dustline,” “we,” “us”). This policy explains how we handle personal information through the HaulHQ app and related account, subscription and support services. Direct privacy questions to the Dustline privacy contact at hey@dustline.ca.

Transport companies also decide what information to enter about their customers, staff and shipments and are responsible for their own collection and use of that information. This policy explains Dustline’s handling of information; it does not replace your transport company’s privacy obligations. General browsing of dustline.ca is covered by the website’s privacy policy and cookie information.

2. Information we collect and why

  • Accounts and access: names, phone numbers, staff email addresses, authentication identifiers, verification status, passwords processed through our authentication provider, company membership and roles. These enable sign-in, account recovery, invitations and access controls.
  • Company and shipment records: company names, logos, contact details, customer and staff contact records, horse details and photos, routes, pickup and destination information, dates, shipment status, notes and assigned staff. These support transport coordination and customer shipment access.
  • Transport payment records: amounts, payment status and balances recorded by the transport company. These are separate from a company’s HaulHQ subscription.
  • Driver location: precise coordinates and update times when location tracking is enabled and permission is granted. These provide shipment tracking, including while the app is in the background if background permission is granted. Authorized company staff and customers associated with the relevant shipment may see these updates.
  • Subscriptions: purchase and transaction identifiers, subscription status, product, renewal and expiry information, and a company-specific billing identifier. On iOS, subscription payments are processed by Apple through the App Store. On Android, subscription payments are processed by Stripe. RevenueCat helps validate purchases and manage subscription access where integrated. Dustline does not receive or store your full payment-card details.
  • Technical and support information: IP addresses, device and app information, authentication and service logs, notification tokens when notifications are enabled, and information you send to support. These help operate, secure, troubleshoot and support the service.

Information comes from you, your transport company and its authorized staff, your device when relevant features are used, and our authentication and subscription providers. A company may add your contact and shipment information before you create an account. Please avoid putting unnecessary sensitive personal information in notes or images.

3. Permissions and choices

You can control location, photo/camera and notification permissions in your device settings. Disabling location permission stops the app obtaining further location through that permission, but does not automatically erase information already recorded. Declining an optional permission may prevent the related feature from working. Customer shipment viewing does not require sharing the customer’s own live location.

You may contact us to withdraw consent to a use that relies on consent, subject to legal or contractual restrictions. We will explain any effect on your account or service. This policy is not a request for blanket consent to unrelated uses.

4. Who receives information

Authorized transport-company staff can access their company’s records. Customers can access shipment information associated with their verified account. Company branding and contact information appear with shipments. Routes, dates and availability deliberately published through a public schedule may be visible to people outside the company.

We use Google Firebase for authentication, database, file storage and backend services; Apple for iOS app distribution and subscription payments; Stripe for Android subscription payments; RevenueCat for subscription validation and management where integrated; and Expo and platform notification services where notification or app-delivery features are used. These providers process information necessary to deliver their respective services. Firebase phone authentication sends phone numbers to Google, which stores them for spam and abuse prevention across Google services. See Firebase privacy information.

Opening a map, calling or texting a company takes you to another app or service with its own privacy practices. We may also disclose information when required or permitted by law, to respond to lawful requests, protect rights and safety, or investigate fraud and security incidents.

5. Processing outside Canada

Our service providers may process or store information in the United States and other countries where they or their subprocessors operate. Information processed abroad may be accessible to courts, law enforcement or other authorities under those countries’ laws. Contact hey@dustline.ca for questions about our use of service providers outside Canada, including their collection, use, disclosure and storage of personal information.

6. Retention and account deletion

We retain information for the purposes described in this policy, including providing accounts and shipment history, resolving disputes, maintaining security and meeting applicable legal obligations. Retention depends on the record’s purpose, the company’s continuing need for its business records, and applicable requirements; there is no single retention period for every category.

To request deletion of your HaulHQ account or personal information, email hey@dustline.ca. We may verify your identity and clarify the request. Do not send your password or verification codes. If you are the company’s sole administrator, contact us to arrange transfer of company control or company closure as part of the request.

Deleting a login does not necessarily delete the company’s shipment and payment records. We assess what must be retained for legitimate business or legal purposes and what can be removed or anonymized. We will explain applicable exceptions or steps needed to complete your request. Information no longer needed for those purposes should be deleted or anonymized. Backup and service-provider copies may take additional time to expire under their retention processes; deletion is not an assurance of instant removal from every backup.

Uninstalling HaulHQ does not delete your account or cancel an active subscription. Deleting your HaulHQ account also does not automatically cancel your subscription. iOS subscriptions must be cancelled through Apple’s subscription management settings. Android subscriptions are managed through Stripe using the subscription management options provided at purchase. If you need assistance managing or cancelling your subscription, contact hey@dustline.ca.

7. Access, correction and complaints

You may request access to your personal information, information about its use or disclosure, correction of inaccuracies, or deletion or withdrawal of consent where applicable. Contact hey@dustline.ca. We will handle requests within applicable legal time limits and explain any lawful refusal or limitation. For records maintained by a transport company, we may need to coordinate with that company.

If a privacy concern remains unresolved, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, as appropriate.

8. Security

We use authentication and company/account access controls to help protect information. No online service is completely secure. Keep credentials private and report suspected unauthorized access to hey@dustline.ca. We will address privacy breaches and provide notifications as required by applicable law.

9. Changes to this policy

We will update this page when our practices change and revise the effective date. Where required, we will provide additional notice and obtain consent before using information for a new purpose.