Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly when you:

Register for an account: name, email address, phone number, postal address, date of birth, profile photo
Place an order: pickup address, delivery address, laundry preferences, special instructions
Make a payment: payment card type and last four digits (full card data is processed and stored by Stripe only)
Register as a Laundromat Partner: business name, address, EIN, business license, insurance certificate, banking information
Register as a Driver Partner: government-issued ID, driver's license, vehicle information, Social Security Number or ITIN, banking information
Contact our support team: communications, attachments, and other information you provide
Participate in surveys, promotions, or referral programs

1.2 Information Collected Automatically

When you use the Platform, we automatically collect:

Device information: device type, model, operating system version, unique device identifier (UDID), mobile network information
Log data: IP address, browser type, pages accessed, features used, time and duration of access, clickstream data, crash reports, and error logs
Location data: precise GPS location data (when location permissions are granted), general location inferred from IP address
App usage data: order history, search queries, in-app navigation patterns, and feature interactions
Transaction data: order amounts, payment amounts, tip amounts, cancellation history, and rating history

1.3 Information from Third Parties

We may receive information about you from third parties, including:

Stripe, our payment processor, for payment verification, fraud detection, and identity verification
Background check providers (for Driver Partners only)
Analytics providers (including Google Analytics and Firebase) for Platform performance analysis
Social login providers (such as Google or Apple), if you use social sign-in features
Mapping and navigation providers (such as Google Maps) for pickup and delivery routing

2. How We Use Your Information

We use the personal information we collect for the following purposes:

Account creation, authentication, and account management
Processing and fulfilling laundry pickup and delivery orders
Matching Customers with appropriate Laundromat Partners and Driver Partners
Sharing necessary order information with Driver Partners and Laundromat Partners
Processing payments, disbursing earnings to Service Providers, and preventing fraud
Sending transactional communications, including order confirmations, status updates, receipts, and delivery notifications
Sending promotional communications, marketing messages, and special offers (where you have opted in or as permitted by law)
Providing customer support and responding to inquiries and complaints
Monitoring, analyzing, and improving Platform performance, features, and user experience
Enforcing our Terms of Service and our Policies
Detecting, investigating, and preventing fraud, abuse, unauthorized access, and other security incidents
Complying with applicable legal obligations, including tax reporting, law enforcement requests, and court orders
Verifying the identity and eligibility of Driver Partners and Laundromat Partners
Calculating and distributing ratings, reviews, and performance metrics
Conducting research and analytics to improve our services and develop new features

3. How We Share Your Information

3.1 With Service Providers for Order Fulfillment

To fulfill your order, we share necessary information with the applicable Laundromat Partner (including Customer name, pickup address, delivery address, order details, and special instructions) and Driver Partner (including Customer name, pickup address, delivery address, and order details). We do not share Customer payment card information with any Service Provider.

3.2 With Technology and Service Vendors

We engage trusted third-party vendors to assist us in operating the Platform. These vendors may have access to your personal information to the extent necessary to perform their services and are contractually obligated to maintain the confidentiality and security of such information. Our key vendors include: Stripe (payment processing); Google (mapping, analytics); Amazon Web Services (cloud infrastructure); and customer communication platforms. We do not authorize these vendors to use your personal information for their own independent purposes.

3.3 For Safety and Legal Compliance

We may disclose your personal information: (a) to comply with applicable law, regulation, legal process, court order, or governmental request; (b) to enforce our Terms or our Policies; (c) to detect, prevent, or address fraud, security, or technical issues; or (d) to protect the rights, property, or safety of Washzi, our users, Service Providers, or the public.

3.4 Business Transfers

If Washzi is involved in a merger, acquisition, asset sale, financing, bankruptcy, or reorganization, your personal information may be transferred as part of such transaction. We will provide reasonable notice before your personal information is subject to a materially different privacy policy.

3.5 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized information (which cannot reasonably be used to identify you) with third parties for research, analytics, marketing, and other purposes.

3.6 No Sale of Personal Data

Washzi does not sell, rent, or lease your personal information to any third party for monetary consideration. This commitment applies to all users, including California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

4. Data Retention

We retain your personal information for as long as necessary to provide you with services, comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes. Specifically:

Active account information is retained for the duration of your account
Order and transaction records are retained for up to 7 years following the transaction date, in accordance with applicable tax and financial record-keeping requirements
Driver Partner information, including background check records, is retained for 7 years following the termination of the Driver Partner relationship, as required by applicable law
Communications with our support team are retained for up to 3 years
Upon account deletion, we will delete or anonymize your personal information within 90 days, subject to the above retention requirements

We may retain de-identified or anonymized data indefinitely.

5. Data Security

We implement commercially reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

Encryption of all data transmitted to and from the Platform using TLS/SSL protocols
Payment data processed exclusively through Stripe, which maintains PCI-DSS Level 1 compliance
Password storage using industry-standard hashing algorithms (bcrypt or equivalent)
Role-based access controls limiting employee access to personal data on a strict need-to-know basis
Regular security audits and vulnerability assessments
Employee training on data security and privacy practices

Notwithstanding these measures, no data transmission over the internet or electronic storage system is 100% secure. Washzi cannot guarantee absolute security of your personal information. In the event of a data breach affecting your personal information, Washzi will notify you as required by applicable law, including the New York SHIELD Act.

6. Your Rights and Choices

6.1 Access and Correction

You may access and update most of your account information directly through the Platform settings at any time. If you need assistance accessing or correcting specific information, please contact us at info@washzi.com.

6.2 Account Deletion

You may request deletion of your Washzi account at any time directly through the in-app account settings. Upon submitting a deletion request, your account will be temporarily deactivated for a period of 30 days. During this 30-day window, you may restore your account at any time by logging back in.

After 30 days, your account will be permanently deleted, provided that your account has no outstanding balance owed to Washzi or any Service Provider. Accounts with outstanding balances will not be permanently deleted until the balance is fully resolved. Following permanent deletion, we will delete or anonymize your personal information within 90 days, subject to any legal retention requirements.

Note that permanent deletion is irreversible, and any credits, referral balances, or promotional rewards associated with the account will be forfeited.

6.3 Marketing Communications

You may opt out of promotional email communications at any time by clicking the “unsubscribe” link in any marketing email or by updating your notification preferences in the Platform. You may also opt out of SMS marketing messages by replying “STOP” to any marketing text. Opting out of marketing communications does not affect your receipt of transactional communications related to active orders or account matters.

6.4 Push Notifications

You may disable push notifications from the Washzi app through your device settings at any time. Disabling push notifications may affect your ability to receive real-time order status updates.

6.5 Location Data

You may disable location access for the Washzi app through your device settings at any time. Note that disabling precise location access may significantly limit the Platform's functionality, including the ability to match you with nearby Laundromat Partners and track deliveries in real time.

6.6 Data Portability

Upon written request to info@washzi.com, we will provide you with a copy of the personal information we hold about you in a commonly used, machine-readable format, to the extent required by applicable law.

7. Cookies and Tracking Technologies

Washzi and its service providers use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your interactions with the Platform and our emails. We use these technologies for the following purposes:

Essential/Functional Cookies: Required for the Platform to operate properly, including maintaining login sessions and security features. These cannot be disabled.
Analytics Cookies: Help us understand how users interact with the Platform, which features are most used, and where users encounter problems. We use Google Analytics and Firebase Analytics for this purpose.
Preference Cookies: Store your preferences and settings to improve your experience on return visits.
Marketing Cookies: Track your activity across our Platform and other websites to enable targeted advertising (only where applicable and where required consent has been obtained).

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more detailed information, please review our Cookie Policy.

8. Children's Privacy

The Washzi Platform is directed exclusively to individuals 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will promptly delete such information from our records.

If you are a parent or guardian and believe that your child has provided personal information to Washzi, please contact us immediately at info@washzi.com. We comply with the Children's Online Privacy Protection Act (COPPA) and all applicable laws protecting children's privacy.

9. California Residents — CCPA and CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: The right to request that we disclose what personal information we collect, use, disclose, and sell about you.
Right to Delete: The right to request that we delete personal information we have collected about you, subject to certain exceptions.
Right to Correct: The right to request that we correct inaccurate personal information we hold about you.
Right to Opt-Out of Sale/Sharing: Washzi does not sell or share your personal information as defined under CCPA/CPRA. You may exercise this right at privacy@washzi.com if our practices change.
Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to what is necessary to provide services.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise any of these rights, submit a verifiable consumer request to info@washzi.com or call +1 (917) 588-8837. We will respond to verifiable requests within 45 days. We may extend this period by an additional 45 days where necessary, with prior notice.

10. New York Residents — SHIELD Act

Washzi complies with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act. In the event of a breach of the security of our system that reasonably appears to have caused, or is reasonably believed to have caused, unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of the private information of New York residents, Washzi will notify affected New York residents in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement, and consistent with any measures necessary to determine the scope of the breach and restore the reasonable integrity of the system.

11. International Users

The Washzi Platform is operated from the United States and is intended primarily for users located in the United States. If you are accessing the Platform from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to the transfer of your personal information to the United States.

If you are located in the European Economic Area (EEA) or United Kingdom, additional data protection rights may apply to you; please contact us at info@washzi.com for more information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or Platform features. If we make material changes to this Privacy Policy, we will notify you by: (a) email to the address associated with your account; (b) in-app notification upon your next login; or (c) posting a prominent notice on www.washzi.com.

Material changes will become effective no earlier than 14 days after notification. Your continued use of the Platform after the effective date of any update constitutes acceptance of the updated Privacy Policy.