Privacy Policy

This Privacy Policy describes how [WASH HUB LEGAL ENTITY NAME] (“Wash Hub,” “we,” “us,” or “our”) collects, uses, shares, protects, and retains information in connection with our websites, software platform, QR checkout workflows, customer app or mobile web experiences, payment and membership features, operator dashboards, and related services (collectively, the “Services”).

Wash Hub provides software and digital workflows for car wash owners and operators. We do not own, operate, manage, or control physical car wash locations unless specifically stated in a signed written agreement.

By accessing or using the Services, you acknowledge that you have read this Privacy Policy. For information about your contractual rights, please also review our Terms of Service.

This Privacy Policy applies to information collected through the Services, including information collected from car wash operators, business customers, fleet account administrators, and end users who scan QR codes, purchase washes, join memberships, or otherwise interact with Wash Hub-powered checkout and account tools.

This Privacy Policy does not apply to third-party websites, payment processors, car wash operator websites, or other services that may be linked from or integrated with the Services. Those parties maintain their own privacy practices.

Wash Hub is operated by [WASH HUB LEGAL ENTITY NAME], a [Massachusetts limited liability company / Massachusetts corporation / other entity type] with business operations based in Massachusetts.

Because Wash Hub is based in Massachusetts and may collect, maintain, process, or store information relating to Massachusetts residents, our privacy and security practices are designed to account for applicable Massachusetts privacy, data security, breach notification, consumer protection, and record disposal requirements.

This Privacy Policy is intended to describe our general privacy practices. It is not a complete description of every legal obligation that may apply to Wash Hub, car wash operators, payment processors, or other third parties.

Wash Hub may act in different roles depending on the context:

• Car wash operators (“Operators”) use Wash Hub to configure packages, pricing, memberships, locations, promotions, and customer-facing checkout workflows. Operators may be controllers or business owners of customer relationship data they collect through their use of the Services.
• End users are customers who scan QR codes, purchase washes, join memberships, manage accounts, or otherwise interact with Operator offerings throughWash Hub-powered experiences.
• Wash Hub provides the software platform, integrations, and related tools. In some cases, Wash Hub processes information on behalf of Operators as a service provider or processor. In other cases, Wash Hub may process information for its own business purposes, such as platform security, billing, support, and product improvement.

Operators are responsible for providing their own legally required privacy notices to end users and for ensuring their use of the Services complies with applicable law.

We may collect the following categories of information, depending on how you use the Services:

• Contact information (such as name, email address, phone number, and mailing address)
• Account and profile information (such as username, password, preferences, and membership details)
• Transaction information (such as wash purchases, membership enrollments, refunds, and payment status)
• Vehicle or fleet information (such as license plate, vehicle description, or fleet account identifiers, if provided)
• Business information (such as company name, location details, tax identifiers, and billing contacts)
• Communications (such as support requests, feedback, and correspondence)
• Device and usage information (described further below)
• Information from third parties (such as payment processors, Operators, and integration partners)

When you access or use the Services, we may automatically collect certain technical and usage information, such as:

• IP address and general location information
• Browser type, device type, operating system, and device identifiers
• Pages viewed, features used, clicks, session duration, and referral URLs
• Log files, error reports, and diagnostic data
• Security and fraud-prevention signals

We may use cookies, pixels, local storage, and similar technologies to collect this information, as described in the Cookies section below.

Wash Hub may enable payments through third-party payment processors, such as Stripe or another processor. Payment information may include card details, billing information, digital wallet information, transaction identifiers, payment status, and recurring billing status.

Wash Hub generally does not store full credit card numbers. Payment information is processed by the applicable payment processor according to its own terms, privacy policy, and security practices.

Wash Hub may receive limited payment-related information from payment processors, such as:

• Payment status
• Transaction amount
• Transaction date
• Last four digits of a card
• Card brand
• Billing name
• Failed payment notices
• Refund status
• Chargeback status
• Subscription or recurring billing status

Car wash operators and end users should review the applicable payment processor’s terms and privacy policy for more information about how payment data is handled.

Operators are responsible for ensuring that their pricing, fees, memberships, taxes, refund policies, and cancellation policies are accurately disclosed and compliant with applicable law, including Massachusetts consumer protection requirements where applicable.

If you are an Operator or business customer, we may collect information you provide when you create an account, configure locations, set up packages and memberships, manage fleet accounts, invite team members, connect integrations, or contact support. This may include business contact details, billing information, staff account information, location data, pricing configurations, promotional content, and customer records you upload or generate through the Services.

Operators are responsible for ensuring they have appropriate rights, notices, and consents to collect and use Customer Data through the Services.

If you are an end user, we may collect information you provide when you scan a QR code, select a wash package, join a membership, create or manage an account, update payment methods, redeem offers, contact support, or otherwise complete a Wash Hub-powered workflow.

Some end user information may be shared with the applicable Operator so the Operator can fulfill purchases, administer memberships, provide support, and manage customer relationships.

We use cookies and similar technologies to operate the Services, remember preferences, understand usage, maintain security, and improve performance. These technologies may include session cookies, persistent cookies, local storage, and analytics tools.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services.

We may use information to:

• Provide, operate, maintain, and improve the Services
• Process transactions, memberships, and recurring billing
• Authenticate users and manage accounts
• Provide customer and operator support
• Send transactional, administrative, and service-related communications
• Enable QR checkout, mobile payments, and customer self-service tools
• Configure and display Operator pricing, packages, offers, and locations
• Detect, investigate, and help prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our agreements
• Analyze usage and improve product features, reliability, and performance
• Send promotional communications where permitted by law and based on consent or other legally permitted grounds

We may share information:

• With car wash Operators when necessary to fulfill purchases, memberships, support, and account management
• With payment processors and financial service providers to process payments and subscriptions
• With service providers and subprocessors that help us operate the Services
• With integration partners connected by an Operator or by us
• With professional advisors, auditors, or counsel where appropriate
• In connection with a business transfer, merger, acquisition, or similar transaction
• To comply with law, regulation, legal process, or governmental request
• To protect the rights, safety, and security of {c.brandName}, users, Operators, and others
• With your consent or at your direction

We do not sell personal information in the conventional sense. Where state privacy laws define “sale” or “sharing” broadly, we will address those requirements in the State Privacy Rights section where applicable.

We may use third-party vendors to host infrastructure, process payments, send email or SMS messages, provide analytics, deliver customer support, and perform other business functions. These providers may process information on our behalf subject to contractual obligations appropriate to the nature of the services provided.

Operators may also use or authorize third-party integrations that process information independently of Wash Hub. Operators are responsible for reviewing those third parties’ practices.

The Services may support one-time purchases, memberships, subscriptions, and other recurring billing arrangements configured by Operators. Wash Hub may process or facilitate payment-related data needed to administer these workflows, but Operators control the customer-facing terms, pricing, renewal terms, cancellation policies, and refund policies unless otherwise agreed in writing.

End users should review Operator disclosures before enrolling in a membership or recurring plan.

Wash Hub or the applicable car wash operator may send transactional, administrative, or service-related communications, including:

• Receipts
• Membership confirmations
• Renewal notices
• Failed payment notices
• Account updates
• Security alerts
• Support responses
• Cancellation confirmations

Where permitted by law and based on consent or other legally permitted grounds, Wash Hub or the applicable car wash operator may also send promotional messages, offers, or marketing communications.

End users can opt out of promotional email communications by using the unsubscribe link in the email. For SMS messages, users may be able to reply STOP to opt out. Transactional or service-related messages may still be sent where necessary to provide the Services or administer an account, transaction, or membership.

Operators are responsible for ensuring their marketing communications, SMS campaigns, consent practices, and customer messaging comply with applicable laws.

We may use analytics tools and aggregated or de-identified information to understand how the Services are used, diagnose technical issues, improve features, and develop new functionality. Where possible, we use aggregated or de-identified data that does not reasonably identify an individual.

Wash Hub may use automated systems, rules-based workflows, or artificial intelligence tools to support features such as fraud detection, customer support routing, analytics, content suggestions, or operational efficiency. If we deploy AI features that materially affect privacy practices, we will update this Privacy Policy as appropriate.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects without appropriate notice where required by law.

Massachusetts law includes specific requirements relating to the protection of certain personal information of Massachusetts residents. Where applicable, Wash Hub designs its administrative, technical, and physical safeguards to account for Massachusetts data security requirements, including requirements relating to the protection of personal information, breach notification, and secure disposal of records.

For purposes of Massachusetts law, “personal information” may have a narrower meaning than general personal information under this Privacy Policy. Massachusetts personal information generally includes a Massachusetts resident’s first name and last name, or first initial and last name, in combination with one or more sensitive data elements such as Social Security number, driver’s license number, state identification card number, financial account number, credit card number, debit card number, or related security code, access code, or password that would permit access to a financial account.

Wash Hub may also collect broader categories of personal information as described in this Privacy Policy, including contact information, transaction information, membership information, device information, account information, and customer support information.

Where Massachusetts law applies, we apply safeguards designed to protect Massachusetts personal information in accordance with our security program and applicable legal requirements. We limit collection of sensitive identifiers to what is reasonably necessary for the Services and discourage Operators from uploading unnecessary sensitive information.

Where required by Massachusetts law and applicable to Wash Hub’s actual data practices, Wash Hub maintains or will maintain a written information security program designed to protect Massachusetts personal information.

The program may include administrative, technical, and physical safeguards appropriate to the size, scope, and type of business, the resources available, the amount of stored data, and the need for security and confidentiality.

Safeguards may include:

• Designating one or more individuals responsible for the security program
• Identifying and assessing reasonably foreseeable internal and external risks
• Limiting access to personal information to authorized users
• Maintaining employee, contractor, and vendor access controls
• Reviewing and updating security practices as business needs evolve
• Using secure authentication where appropriate
• Encrypting sensitive information where appropriate and technically feasible
• Protecting information transmitted across public networks where appropriate
• Maintaining reasonable monitoring and logging
• Maintaining secure hosting and database practices
• Overseeing service providers that process personal information
• Maintaining incident response procedures
• Maintaining reasonable retention and disposal practices
• Reviewing the security program periodically

If Wash Hub becomes aware of a security breach involving Massachusetts personal information, Wash Hub will evaluate and respond to the incident in accordance with applicable Massachusetts law and other applicable legal obligations.

Where required, Wash Hub may provide notice to affected Massachusetts residents, the Massachusetts Attorney General, the Massachusetts Office of Consumer Affairs and Business Regulation, car wash operators, payment processors, service providers, or other parties as required by law or contract.

Where required by law, notice will be provided as soon as practicable and without unreasonable delay, subject to law enforcement needs, investigation, restoration of system integrity, and other legally permitted considerations.

If a breach involves Social Security numbers or other information requiring additional protections, Wash Hub will evaluate whether additional notice, credit monitoring, or other measures are required.

If Wash Hub processes information on behalf of a car wash operator, Wash Hub may notify and cooperate with the operator so the operator can fulfill its own legal obligations.

Wash Hub retains information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, support backups, and fulfill the purposes described in this Privacy Policy.

Where Massachusetts law applies to the disposal of records containing personal information, Wash Hub will use reasonable measures designed to make personal information unreadable or unreconstructable when it is no longer needed and is disposed of.

For paper records, this may include shredding, redaction, burning, or other secure destruction methods. For electronic records, this may include deletion, erasure, destruction, or other technical measures designed to prevent the information from practicably being read or reconstructed.

If Wash Hub uses a third-party vendor for disposal, Wash Hub will require appropriate safeguards designed to prevent unauthorized access, acquisition, or use during collection, transportation, and disposal.

Wash Hub uses reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, acquisition, disclosure, alteration, misuse, or destruction.

These safeguards may include:

• Access controls
• Authentication controls
• Role-based permissions
• Secure hosting providers
• Encryption where appropriate
• Monitoring and logging
• Vendor review
• Limited access to personal information
• Incident response procedures
• Payment processor security controls
• Backup and recovery practices
• Internal policies and procedures

No method of transmission or storage is completely secure. Wash Hub cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of login credentials, using secure devices and networks, and promptly notifying Wash Hub of unauthorized access or suspected security incidents.

Operators are responsible for the security of their own systems, staff access, devices, physical locations, signage, payment workflows, POS systems, gates, tunnel controllers, and third-party integrations.

Depending on your relationship with Wash Hub and applicable law, you may have choices regarding:

• Accessing or updating account information
• Opting out of promotional emails
• Opting out of promotional SMS where supported
• Managing cookie preferences through your browser
• Requesting deletion or correction of certain information
• Closing your account, where available

To exercise available choices, contact us using the information in the Contact Us section below.

Residents of certain U.S. states may have additional privacy rights under applicable state law. These rights may include the right to know, access, correct, delete, or opt out of certain processing activities, subject to exceptions.

We will honor applicable state privacy rights where legally required. The sections below address specific state or regional requirements only where they apply to our processing activities.

If you are a California resident and California privacy law applies to our processing of your personal information, you may have rights under the California Consumer Privacy Act and California Privacy Rights Act, including rights to know, access, correct, delete, and opt out of certain processing, as well as rights regarding sensitive personal information and automated decision-making where applicable.

This section applies only where California law requires it. To submit a request, contact [PRIVACY EMAIL]. We will verify requests as required by law.

If you are located in the European Economic Area, United Kingdom, or another jurisdiction where the General Data Protection Regulation or similar law applies, and that law applies to our processing of your personal data, you may have rights such as access, rectification, erasure, restriction, portability, and objection, subject to legal limitations.

This section applies only where GDPR or similar law legally requires it. To exercise applicable rights, contact [PRIVACY EMAIL].

Wash Hub is based in the United States. If you access the Services from outside the United States, your information may be processed in the United States or other countries where we or our service providers operate. Those countries may have different data protection laws than your jurisdiction.

Where required by applicable law, we will implement appropriate safeguards for international transfers.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to review and delete the information as required by law.

Some browsers transmit “Do Not Track” signals. Because there is no consistent industry standard, we do not currently respond to all Do Not Track signals. We will honor legally required opt-out mechanisms, such as Global Privacy Control signals, where applicable law requires us to do so.

The Services may contain links to third-party websites, payment processors, Operator pages, or integrated services. We are not responsible for the privacy practices of those third parties. You should review their privacy policies before providing information to them.

If Wash Hub is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction subject to applicable law and notice requirements.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by posting the updated policy on our website and updating the effective date. Your continued use of the Services after the effective date of an updated policy may constitute acknowledgment of the changes, subject to applicable law.

Questions about this Privacy Policy or Wash Hub’s privacy practices may be sent to:

[WASH HUB LEGAL ENTITY NAME]
[MASSACHUSETTS BUSINESS ADDRESS]
Privacy Email: [PRIVACY EMAIL]
Support Email: support@washhub.io

If you are a Massachusetts resident with questions about your personal information, please contact us at [PRIVACY EMAIL].

For contractual terms governing use of the Services, see our Terms of Service.