Customer Privacy Policy

Welcome to WashPot ("WashPot", "we", "our", or "us"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use the WashPot mobile application and related services ("Service").

WashPot is an online marketplace that connects customers with independent vehicle washing service providers. We are committed to protecting your privacy and handling your information responsibly.

By creating an account or using the Service, you agree to this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create a WashPot account, we may collect:

• Full name
• Email address
• Encrypted password
• Profile photograph (optional)
• Account creation date
• Account update history

Your email address is verified through a one-time verification code (OTP) during registration.

If you choose to sign in with Google or Apple, we receive from that provider a verified sign-in token containing your email address and, for Apple, a unique Apple account identifier. If you choose Apple's "Hide My Email" option, we receive an Apple relay email address instead of your personal email address. We do not receive your Google or Apple password.

1.2 Location Information

To provide location-based services, we may collect:

• Saved addresses
• Address name (Home, Work, etc.)
• Latitude
• Longitude
• Postal/PIN code
• Delivery or service instructions

Location information is used only when required for:

• Saving service addresses
• Locating nearby service providers
• Facilitating pickup or doorstep vehicle washing services

WashPot does not continuously track your location in the background.

1.3 Booking Information

When you make a booking, we collect information including:

• Booking ID
• Booking status
• Booking date and time
• Service provider
• Selected services
• Vehicle model
• Service mode (Pickup, Doorstep, Self Drop)
• Price breakdown (service price, platform fee, convenience fee, pickup fee, premium, and total amount)
• Cancellation, refund, and no-show status
• Pickup/service address
• Assigned service personnel (where applicable)

1.4 Reviews and Ratings

You may voluntarily submit:

• Ratings
• Reviews
• Feedback regarding providers or services

These reviews may be visible to other users within the Service.

1.5 Payment Information

Payments for bookings are processed by our payment gateway partner, Razorpay. Your card, UPI, net banking, or wallet details are entered directly with Razorpay and are processed under Razorpay's own privacy policy. WashPot does not receive or store complete debit card, credit card, UPI, or banking credentials.

In connection with each payment, WashPot stores limited payment records, including:

• Razorpay order identifier and payment identifier
• Payment verification signature
• Amount paid, payment status, and payment date and time
• Refund identifiers, refund amounts, and refund status
• Fees charged by the payment gateway on the payment
• Accounting (ledger) entries relating to the payment, refund, and booking

To create a payment order, WashPot shares with Razorpay the booking amount and a booking reference. WashPot also periodically retrieves payment and refund information from Razorpay to confirm payments, process refunds, and ensure that our records match Razorpay's records.

1.6 Device and Notification Information

If you allow notifications, we collect a push notification token for your device. This token is used to send you notifications about your bookings and payments.

1.7 Communications

We may send transactional emails including:

• Account verification
• Password reset
• Email address changes
• Account deletion confirmation
• Important security notifications

We may also send push notifications relating to your bookings and payments, such as booking confirmations and status updates. You can disable push notifications in your device settings.

WashPot does not currently send promotional or marketing emails or notifications.

2. Permissions We Request

Depending on your device and operating system, WashPot may request the following permissions.

Location — Used only when adding an address, selecting your current location, or finding nearby service providers. Location access is requested only when required.

Camera — Allows you to capture a profile photograph directly from the application.

Photos and Media — Allows you to choose an existing profile photograph from your device.

Notifications — Allows WashPot to send you booking and payment notifications.

WashPot does not access your media library except when you explicitly choose to upload an image.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Verify your identity
• Authenticate your login
• Provide booking services
• Process payments, cancellations, and refunds
• Verify payments and prevent duplicate charges and payment fraud
• Reconcile our records with our payment gateway
• Send booking and payment notifications
• Connect you with service providers
• Display nearby providers
• Maintain booking history
• Improve service quality
• Respond to customer support requests
• Prevent fraud and misuse
• Maintain platform security
• Maintain accounting and tax records
• Comply with legal obligations

4. Sharing of Information

WashPot does not sell your personal information. We may share information only in the following circumstances.

Service Providers — When you create a booking, the selected service provider may receive only the information necessary to complete the service, including your name, service address (where applicable), and booking details. Only the provider associated with your booking receives this information.

Third-Party Service Providers — We use trusted third-party services including:

• Razorpay for payment processing and refunds. Razorpay receives the booking amount and reference, and collects your payment details directly from you.
• Amazon Web Services (AWS) for secure file storage.
• OpenStreetMap, Nominatim, and Apple Maps for mapping, geocoding, and address search. Addresses or coordinates you search for or select may be sent to these services.
• Google and Apple for sign-in, if you choose to use those options.
• Expo for delivering push notifications. Expo receives your device's push token and the content of the notification.
• Email service providers for transactional communications.

These providers receive only the information necessary to perform their respective services.

Legal Requirements — We may disclose information if required to comply with applicable law, respond to lawful government requests, protect the rights or safety of WashPot, users, or the public, or investigate fraud or security incidents.

5. Data Storage and Security

We implement reasonable technical and organisational measures to protect your information, including password hashing using industry-standard encryption methods, HTTPS encryption for production systems, secure authentication using JSON Web Tokens (JWT), restricted access to customer information, and secure cloud storage for uploaded profile images.

No system connected to the Internet can be guaranteed to be completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain personal information only for as long as necessary to provide our services and comply with applicable legal obligations. Generally:

• Account information is retained while your account remains active.
• Booking records may be retained for operational, legal, accounting, fraud prevention, and dispute resolution purposes.
• Payment, refund, invoice, and accounting records are retained for as long as required under applicable accounting, tax, and other laws, which may extend for several years after the transaction.
• When an account is deleted, personal information is anonymised within a reasonable period where practicable, while non-identifying operational records may be retained.

7. Account Deletion

You may request deletion of your WashPot account. Upon processing your request:

• Personally identifiable information will be removed or anonymised where reasonably practicable.
• Historical booking records may be retained without personally identifying information for operational, legal, or fraud-prevention purposes.
• Payment and refund records are retained as required for accounting, tax, and legal compliance, linked only to the anonymised account.
• Deleting your account does not automatically cancel upcoming bookings or trigger refunds. Please cancel any upcoming bookings before requesting deletion.

Certain information may be retained where required by law.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Update your profile
• Change your email address
• Change your password
• Request account deletion
• Request clarification regarding how your information is used

Requests may be submitted using the contact details provided below.

9. Children's Privacy

WashPot is intended for users aged 13 years or older. Users under the age of 18 should use the Service only with the involvement or consent of a parent or legal guardian. We do not knowingly collect personal information from children in violation of applicable law.

10. Third-Party Services

The Service may interact with third-party services including payment processing (Razorpay), sign-in (Google and Apple), mapping, push notifications, cloud storage, and email providers. Your use of those services may also be governed by their respective privacy policies. WashPot is not responsible for the privacy practices of independent third-party services.

11. Future Features

WashPot may introduce additional functionality in future releases, including but not limited to additional customer features, loyalty programmes, and additional payment options. If these features materially change how personal information is collected or processed, this Privacy Policy will be updated accordingly.

12. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. Updated versions will be published within the application or on our website. Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.

WashPot Support Email: support.washpot@gmail.com Privacy Email: support.washpot@gmail.com Website: https://washpot.app

14. Governing Law

This Privacy Policy shall be governed by the laws of India. Any disputes relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts located at Mangaluru, Karnataka, India.

Thank you for trusting WashPot.