Privacy

Draft · not yet in effect

1. The short version

We hold your business records so the software can work. We don’t sell them, we don’t advertise, we don’t share them with other customers, and you can download or delete the lot yourself.

2. What we hold

• Account information — your business name, and the name, email address, phone number and job title of each person you add.
• Business records you enter — customers, contacts, yards, access notes, unit rosters, schedules, wash history, invoicing data, inspections, conduct notes and equipment maintenance records.
• Sign-in information — the email address used to sign in and the times of sign-in, handled by our authentication provider. We never see or store passwords; sign-in is by emailed link or code.
• Technical information — the usual server logs (IP address, browser, time of request) kept for security and troubleshooting.

We do not use advertising cookies or third-party analytics trackers. [DECISION: if you later add analytics, this section and the cookie note below change.]

3. Why we hold it

To run the service for you, to authenticate the people you allow in, to bill you, to answer your support requests, to keep the system secure, and to meet legal obligations. Nothing else.

4. Who else touches it

We use a small number of service providers, each doing one job:

• Supabase — database, authentication and file storage. Your records live here.
• Cloudflare — serves the website and the app.
• Stripe — subscription billing. Card details go to Stripe directly; we never see or store them.
• Resend — sends sign-in emails.

They act on our instructions and may not use your data for their own purposes. Data is stored in the United States. [DECISION: if you take on a customer outside the US, this section needs a transfer basis and your lawyer needs to look at GDPR.]

5. Records about employees

Inspection scores and conduct notes are records about identifiable people. Your business is the employer and decides what goes in them; we hold them on your behalf. If one of your employees asks us what we hold about them, we will refer them to you, because it is your record and not ours to explain. Tell your staff what you record about them — in some places you are required to.

6. How long we keep it

For as long as your account is open. After you cancel, records stay available for export during the read-only window and are then deleted [DECISION: after how long — match section 6 of the terms]. Backups roll off within [DECISION: 30 days is typical for daily backups]. You can delete individual records inside the app at any time; some, like wash entries an invoice depended on, are marked deleted and kept on the record deliberately.

7. What you can ask for

• A copy of everything — available to you directly, from inside the app, whenever you want.
• Correction of anything wrong — you can edit it yourself.
• Deletion of your account and its data — email us and we’ll do it, subject to anything we’re legally required to keep.

8. Security

Access to your records is decided by your own permission settings, enforced in the database rather than by hiding screens in the app — a phone signed in as a washer cannot read your inspections or your pricing even outside the app. Traffic is encrypted in transit. Backups are taken daily. No system is perfect; if there is a breach affecting your data we will tell you promptly and say what happened.

9. Cookies

We use only what is needed to keep you signed in and to remember which book you are working in. No advertising or tracking cookies.

10. Children

The service is for businesses and is not intended for anyone under 16. [DECISION: worth a thought — some wash companies employ 16- and 17-year-olds, which means minors’ employment records could be in the system. Your lawyer should look at this.]

11. Changes

If this policy changes materially we’ll email account holders before it takes effect.

12. Contact

[SUPPORT EMAIL] · [BUSINESS ADDRESS]