Privacy Policy

Version 1.1 · Effective TBD — launch date

This policy explains what personal data TBD — fill before launch (legal name as registered) ("we", "us") collects when you use PriceMyWash (https://pricemywash.com) and its website, why we collect it, how long we keep it, and what rights you have.

Summary.

• We collect only what we need to run the product and bill you. We do not sell personal data, and we do not use it for advertising.
• Our website uses no tracking or advertising cookies. We measure visits with self-hosted, cookieless analytics.
• Data you put into the product belongs to your organisation. We process it on your organisation's instructions (we are its "processor"), under our Data Processing Addendum.
• Our servers are in Germany (EU). The few services we use are listed on our Subprocessors page.
• Email privacy@pricemywash.com to access, correct or delete your data.

Contents

1. Who we are
2. Our two roles: controller and processor
3. What we collect and why
4. Data in the product
5. Cookies and analytics
6. AI features
7. Who we share data with
8. Where your data is stored and international transfers
9. How long we keep data
10. How we protect data
11. Your rights
12. US state privacy notice
13. Children
14. Changes to this policy
15. Contact and complaints

1. Who we are

PriceMyWash is provided by TBD — fill before launch (legal name as registered), a sole proprietor registered in TBD — fill before launch, at TBD — fill before launch (registered address). For privacy questions email privacy@pricemywash.com.

Representatives. Because we are not established in the EU or the UK, we have appointed representatives you can also contact about data protection:

• EU representative: TBD — fill before launch (name and address, or remove the line)
• UK representative: TBD — fill before launch (name and address, or remove the line)

We are a one-person company, so we have not appointed a data protection officer; the founder is responsible for privacy.

2. Our two roles: controller and processor

• Controller. We decide how and why we use data about visitors to our website, people who use our free tools, people who sign up for an account, people we contact about our products, and people who contact us. This policy mainly covers that data.
• Processor. When your organisation uses PriceMyWash, it decides what data goes into the product (for example, content from a connected system, or details submitted by its own customers). For that data your organisation is the controller and we act on its instructions under our DPA. If you are one of those people (for example, a customer of a business that uses PriceMyWash), please contact that business first; we will help it respond. Section 4 describes this data.

3. What we collect and why

We don't knowingly collect special-category data (such as health data) about you, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

If you don't provide data. We need your email address to create an account. Everything else is optional or comes from your use of the product.

4. Data in the product

4.1 Homeowners who request a quote

If you requested a price through a PriceMyWash widget on a business's website, hosted page or QR code, that business is responsible for your data and we process it on its behalf. Our notice for people who request a quote explains this in short. For this data, the business is the controller and we are its processor (service provider).

We send your request to the business by email and show it in its dashboard. We don't sell your data, don't pass it to other businesses, and don't contact you ourselves. The business keeps leads for up to 24 months by default (it can choose a shorter period) and can delete them at any time.

4.2 Visitors to websites that use the widget

The widget runs on a separate, cookieless address and sets no cookies. On the page where it is installed, the business's loader script counts:

• page views;
• visits, one per browser tab session, using a random ID the script keeps in that tab only (sessionStorage, gone when the tab closes). We store it only as a one-way hash that changes every day, and delete it after two days;
• form submissions on that page, as a number only: never what was typed, the names of the fields or which form it was;
• inside the widget: whether it was shown, whether someone started using it and whether a price was shown, again as numbers only.

A hashed IP address is used to limit abuse and to leave out the business owner's own test visits; it is not stored with the counts. If the business turns on "Prove it" mode, a random test bucket is stored in the browser (localStorage) so the same visitor sees the same version. We keep daily totals per widget, not individual visits. This lets the business see how many visitors saw its widget and requested a price.

4.3 Business owners and demo pages

• Demo pages. To show a business what PriceMyWash would look like, we may create a demo page with its public business name, city and sample prices, using public business listings and websites. We may email the business about it (see "People we contact about our products" in section 3). Any business can remove its demo page with one click or by emailing support@pricemywash.com.

• Owner accounts. When you claim a demo or sign up, we process your account data as described in section 3, plus your business details, prices and widget settings. When you open your dashboard we keep a daily-changing hash of your IP address for that day, so your own visits to your website aren't counted in your widget statistics; it is deleted after two days.

• Free price calculator. If you download a price sheet from our free calculator, we collect your email address and city only after you tick the consent box, and we use them to send the sheet and occasional product news until you unsubscribe.

• Past jobs you enter. If you choose to enter past jobs in your dashboard, we store the job address, what you charged, the service and any note you add. We use them for one purpose: to check how accurately a house can be measured from its address, so we can decide whether to build that feature. We do not contact anyone at that address, we do not sell or share the addresses, and we publish only aggregate results (for example "half the estimates were within 15%"). They are yours: they appear in your data export, you can delete any of them at any time, and they are deleted with your account.

• Alerts on your phone. If you turn on phone alerts for new leads, your browser creates a subscription — an address at your browser maker's push service (Google, Mozilla, Apple or Microsoft) plus two encryption keys — and sends it to us. We store it against your account, use it only to send you a notification when a lead arrives, and label it with a short device description ("iPhone · Safari") so you can tell your devices apart. Each notification is encrypted to that device: the push service passes it on but cannot read it. The notification shows the price and the job, never the homeowner's name or address. Turning alerts off on a device, or switching notifications off for us in your browser or phone settings, deletes the subscription — we do not keep trying. Your lead alert emails are unaffected and always keep coming.

4.4 How long we keep PriceMyWash data

4.5 The support chat in your dashboard

The support chat is provided by Crisp IM SAS (France) and is only ever loaded in your dashboard — never on your website, never on your price link (/q/…), never on a demo page (/d/…) and never inside the calculator a homeowner uses. Nothing is fetched from Crisp until you click "Chat with us": before that there is no third-party script on the page and nothing of Crisp's in your browser.

When you do open it, Crisp processes the name and email address you give it, the messages you send, and technical data about your browser, and it stores an identifier in your browser so your conversation is still there when you come back. We use it only to answer you. Please don't paste a homeowner's details into the chat — send us the lead's id from your dashboard instead, and we'll look it up. Email to support@pricemywash.com reaches the same people and involves no chat provider at all.

5. Cookies and analytics

We don't use advertising, social-media or cross-site tracking cookies, and we don't use Google Analytics. That is why you don't see a cookie banner.

What we do use:

Analytics. We use Umami, hosted on our own server in Germany. It does not set cookies or store anything on your device. It records the page, referrer, browser, device type and country, and counts unique visitors using a hash of your IP address and browser details combined with a secret that changes regularly; the IP address itself is not stored. We cannot identify you from this data and we don't combine it with other data. Our analytics honours your browser's "Do Not Track" setting.

If we ever add non-essential cookies (for example advertising conversion tracking), we will ask for your consent first and update this section.

6. AI features

Some features send content to an AI provider (named on the Subprocessors page) to generate results, such as drafts or suggestions. We send only the content needed for the task. Under the provider's commercial terms, it does not use this content to train its models and keeps it only for a limited time for safety and abuse monitoring. We don't use your content to train any AI model. The product section below says which features use AI and what they send.

7. Who we share data with

We share personal data only:

• With service providers (subprocessors) who help us run the product, such as hosting, email delivery and AI. They may use the data only to provide their service to us. The full list, with locations, is on our Subprocessors page.
• With Paddle, our reseller and Merchant of Record, which processes your purchase as an independent controller under its own privacy notice.
• With Google, if you choose "Sign in with Google" (Google tells us your name, email address and account ID; Google's privacy policy applies to your Google account).
• With systems you connect. When you connect a third-party system, data flows between it and PriceMyWash because you asked for it.
• When the law requires it, or to protect our rights, users or the public (for example in response to a valid court order). Where allowed, we will tell you first.
• If the business is transferred, for example if the product is moved into a company the founder sets up or is sold. We will tell you, and this policy will continue to protect your data.

We do not sell personal data and we do not share it for cross-context behavioural advertising.

8. Where your data is stored and international transfers

Our application servers and database are hosted by Hetzner in Germany (EU). Encrypted backups are kept on our Hetzner server and in Cloudflare R2 storage restricted to the EU jurisdiction. Some subprocessors are in the United States (see the Subprocessors page); for those we rely on the EU–US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses (with the UK Addendum for UK data).

The founder works from Ukraine, which the EU and UK have not recognised as providing "adequate" protection. Access from Ukraine is remote, encrypted and limited to what is needed to run and support the service. Data is not copied to local devices except where needed to handle a support request, and then deleted.

9. How long we keep data

10. How we protect data

Data is encrypted in transit (TLS) and at rest. Secrets such as API keys are additionally encrypted in our database. Access is limited to the founder, uses strong authentication, and is logged. See our Security page for details. If a personal-data breach affects you, we will notify you (and, as your processor, your organisation) without undue delay.

11. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct it if it is wrong;
• delete it;
• restrict or object to our use of it, including objecting at any time to direct marketing;
• port it to another service in a machine-readable format;
• withdraw consent where we rely on consent (this doesn't affect what we did before); and
• complain to a data protection authority (see section 15).

To exercise these rights, email privacy@pricemywash.com from the address linked to your account, or use the account settings where available (export, delete account). We reply within 30 days. We may need to verify your identity. We don't charge for requests unless they are clearly unfounded or excessive.

If your request concerns data that an organisation put into PriceMyWash (section 2, "Processor"), we will forward it to that organisation and help it respond.

12. US state privacy notice

This section is for residents of US states with consumer privacy laws, including California.

• Categories of personal information we collect are described in section 3: identifiers (name, email, IP address), commercial information (subscription records), internet activity (product usage and analytics), and the content of your communications with us. Sources: you, your organisation, your device, Paddle, Google sign-in and public business listings.
• We do not sell or share personal information (as those terms are defined in California law), and we have not done so in the past 12 months. We do not knowingly sell or share personal information of people under 16.
• We don't use sensitive personal information for purposes that would give you a right to limit it.
• Your rights: to know, access, correct and delete your personal information, and not to be discriminated against for exercising these rights. You can use an authorised agent. Contact privacy@pricemywash.com.
• Global Privacy Control and Do Not Track. We honour GPC and "Do Not Track" signals by disabling analytics for that browser. We don't track you across third-party websites.

13. Children

PriceMyWash is a business tool and is not intended for anyone under 18. We don't knowingly collect personal data from children. If you believe a child has given us personal data, email privacy@pricemywash.com and we will delete it.

14. Changes to this policy

We will update this policy when our practices change. The version and effective date are at the top. If a change materially affects how we use your personal data, we will email account owners at least 30 days before it takes effect (or ask for your consent where the law requires it).

15. Contact and complaints

TBD — fill before launch (legal name as registered), TBD — fill before launch (registered address), TBD — fill before launch. Email: privacy@pricemywash.com.

If you are unhappy with how we handled your data, please contact us first. You can also complain to your local data protection authority, for example:

• in the EU, the supervisory authority of the country where you live or work (list);
• in the UK, the Information Commissioner's Office (ico.org.uk);
• in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.