Privacy Notice

Last updated November 2, 2026

TollProof is operated by Owen Willis, an individual based in New Jersey, USA. Owen Willis is the data controller for the personal data described here and decides how and why it is used.

What we collect and why

• Account details (email address, name if you give it, login credentials or sign-in provider ID): to create and secure your account. Basis: contract.
• Location data (GPS position, only while GPS auto-detect is switched on and the Drive page is open): to detect when you pass a toll plaza. We save the plaza and coordinates of logged crossings, not a continuous track. Basis: consent, which you can withdraw by turning GPS off.
• Toll and trip records (crossings, lanes, costs, which app the trip was for): to provide your log and reconciliation. Basis: contract.
• Uploaded statements and charges (E-ZPass or rental toll statements and the charges taken from them): to reconcile your charges. We store the extracted charges, not the original file. Basis: contract.
• Dispute details (reason, trip notes, name and account reference you type in): to draft your dispute letter. Basis: contract.
• Support messages: to help you. Basis: legitimate interests.
• Technical data (IP address, browser and device type, error logs): to keep the service secure, prevent fraud and fix problems. Basis: legitimate interests.

We do not sell your personal data and do not use it for advertising.

Who we share it with

• Service providers who host our app and database, run sign-in, and provide the AI model that drafts dispute letters. Dispute details are sent to the AI provider only to generate your letter.
• Paddle.com, our Merchant of Record, which handles the sale of subscriptions, subscription management, payments, tax compliance and invoicing. Paddle processes your payment details under its own privacy policy. We never see your full card number.
• Professional advisers such as lawyers and accountants, where needed.
• Authorities, where the law requires it.

How long we keep it

We keep your data while your account is active. If you delete your account, we delete or anonymise your data within 30 days, except where we must keep records by law, such as billing records.

Your rights

You can ask to access, correct, delete or export your data, or object to how we use it. If you live in a state with its own privacy law, such as California or New Jersey, you have the rights that law gives you. We will not treat you differently for using them. Email owendwillis@gmail.com and we will respond within 30 days.

Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit, access controls, and per-account database rules so only you can read your records.

Cookies

We use only essential browser storage to keep you signed in. We do not use analytics or advertising cookies. Paddle's checkout may set its own cookies when you pay.

Children

TollProof is not meant for anyone under 18.

Changes and contact

We will post updates to this notice here. Questions: Owen Willis · owendwillis@gmail.com