Privacy Notice

1. Who we are

hayroute.com is operated by Creative Group Holdings LLC. For the purposes of data protection law, Creative Group Holdings LLC is the data controller for the personal data described in this notice.

2. What we collect

• Account data — email address and login credentials, used to create and secure your account
• Business data you enter — producers, buyers, hauls, backhaul leads, contact details, and notes you save in the app
• Support messages — anything you send us when you ask for help
• Usage and device data — basic telemetry, device identifiers, and IP address, used for security and product improvement

Payment card details are collected directly by Paddle (our Merchant of Record) and are never stored by us.

3. Why we use it and our legal basis

• Providing the service and your subscription — performance of our contract
• Security, fraud prevention, and product improvement — our legitimate interests
• Customer support — performance of our contract and legitimate interests
• Meeting legal obligations (for example tax and accounting records)
• Marketing emails, where sent — your consent, which you can withdraw anytime

4. Who we share it with

• Service providers and subprocessors — hosting, database, and analytics providers that help us run the service
• Paddle, our Merchant of Record — for the sale of the product, subscription management, payments, tax compliance, and invoicing
• Professional advisers — legal and accounting, where needed
• Authorities — where required by law

5. Retention

We keep your personal data only as long as needed for the purposes above, including any legal retention requirements. When data is no longer needed, it is deleted or anonymised.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any of these, contact us through the site and we will respond as required by applicable law.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data.

8. Cookies

We use essential cookies and local storage to keep you signed in and run the app. We do not use marketing cookies. You can clear cookies and site data in your browser settings, though sign-in will stop working without the essential ones.