Legal
Privacy policy
This policy explains the information WashQ processes to provide customer, partner and operational services.
1. Scope and roles
This policy applies to WashQ websites, customer applications, partner applications and related support. WashQ determines processing for platform accounts, security and platform operations. Participating centers may separately determine how they use customer information for their own service, legal and business purposes and must provide any notice required of them.
2. Personal data we process
This can include names, email addresses, mobile numbers, user IDs, roles, addresses, vehicle details, business and staff profiles, bookings, service notes and evidence, QR associations, invoices, payment references, refunds, support communications, consent and preference records, device and app data, IP and security logs, and approximate or precise location when a feature requires it and permission is granted. WashQ does not require support users to provide complete card details, UPI PINs, passwords or OTPs.
3. Sources
Data may come from you, an authorised business owner or manager, another authorised account member, a participating center, a payment or communications provider, your device with permission, and records generated when the platform is used.
4. Purposes
We process data to create and secure accounts; verify roles; operate check-in, bookings, assignments, pickup and delivery; maintain customer and vehicle history; provide POS, invoices and reports; support payments, refunds and subscriptions; send transactional messages; provide support; prevent fraud and misuse; maintain audit evidence; comply with law; and improve reliability.
5. Consent and other permitted processing
Where consent is required, the request should describe the data and purpose in clear language and permit withdrawal. Some processing may continue without consent where necessary or authorised under applicable law, including security, legal claims, accounting and compliance. Withdrawing consent does not invalidate earlier lawful processing and may make a requested feature unavailable.
6. Location, camera, notifications and QR
Device permissions are requested only when a related feature needs them. Location supports nearby centers, pickup, delivery or navigation; camera or media access supports QR scanning and authorised service evidence; notifications deliver account or operational updates. You can change device permissions, although the related feature may stop working.
7. Sharing and processors
Relevant information may be shared with the selected center and its authorised staff, the customer connected to a booking, and providers supporting payments, email, push notifications, maps, hosting, storage, analytics, security and customer support. Providers should receive only what is reasonably needed for their function. We do not sell personal data.
8. International processing
Some technology providers may process or support data from locations outside India, subject to contractual, security and applicable legal requirements and any transfer restrictions notified by the Government of India.
9. Marketing and analytics
Transactional messages required for an account, booking, payment or security event are separate from promotional communication. Promotional contact should use recorded permission or another lawful basis and provide an available opt-out. The website may use privacy-conscious analytics to understand page performance; browser controls can limit available storage or tracking.
10. Retention
Retention depends on the purpose, account or subscription status, dispute and fraud risk, limitation periods, tax and accounting requirements, security directions and legal obligations. Data no longer needed for a lawful purpose should be deleted or anonymised, subject to backups and required financial, security, audit or legal records.
11. Security and incidents
We use role-based access, verification, encryption where appropriate, logging, backups and vendor controls. No system can guarantee absolute security. Report suspected compromise promptly. WashQ will investigate and provide notifications to affected persons or authorities where applicable law requires them.
12. Your rights and choices
Subject to applicable law, you may request access to a summary of your data and processing, correction, completion, updating or erasure; withdraw consent; manage communication and device permissions; raise a grievance; and nominate another person to exercise rights in circumstances recognised by law. Requests may require identity verification and can be limited by lawful retention duties.
13. Children
WashQ is not intended for independent use by children. A parent or lawful guardian must manage any permitted child-related data and consent. We do not knowingly use children’s data for targeted advertising or behavioural monitoring.
14. Privacy contact
Send privacy questions, rights requests or grievances to support@washq.in with the subject “Privacy request”. Do not include passwords, OTPs, PINs or complete payment credentials.