1. Overview
CampusWash, Inc. ("CampusWash," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we share it, and the rights you have under California law. We comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) requirements.
2. Information We Collect
We collect Personal Information that identifies or is linked to you, including:
- Identifiers: Your .edu email, first name and last initial, and account ID. We do not use passwords; you sign in with a one-time code sent to your email.
- Location Data: Your school, building name, and floor, used for matching, plus a room number if you choose to add one to a Job. We never collect GPS coordinates.
- Preferences: Gender (optional, used only for matching), laundry preferences (detergent type, water temperature, etc.).
- Communication Data: Messages between Users and Washers on the Platform, support inquiries and feedback (including any screenshot you attach), incident reports, and reviews/ratings you provide.
- Delivery Photos: Photos the Washer takes when returning your laundry. A Job cannot be marked complete without one.
- Transactional Data: Job history, service details, any notes you add to a Job, payment confirmations, and refunds.
- Washer Payout Data: If you are a Washer, the payout details you enter (a Venmo username, PayPal email, Zelle email or phone number, or bank account details), an optional account name, and your earnings balance and withdrawal history.
- Device Data: IP address and basic device and browser information that our hosting providers record when you connect to the Platform. We do not use analytics or advertising tools.
Apart from the payout details a Washer enters to get paid (a Venmo, PayPal or Zelle handle, or bank account or routing numbers), which we collect only to send Washer payouts, we do not collect sensitive personal information (like SSN, health, or precise geolocation). We do not store your payment card details (payments are processed through Stripe). Stripe may receive limited information (amount, email, order details) as needed to process payment.
3. How We Use Your Information
We use your information for the following purposes:
- Provide and improve the Platform: Matching Users with Washers by location and preferences; processing Job requests; delivering customer support; and enhancing features.
- Payment processing: Completing transactions via Stripe, tracking payments, and paying Washer withdrawals.
- Communications: Sending you sign-in codes, confirmations, notifications (email, in-app and, on iPhone if you allow them, push), and updates about your Jobs. You can turn order updates off in your settings or in Account in the iOS app; sign-in codes are always sent.
- Safety and fraud prevention: Verifying accounts, monitoring suspicious activity, and preventing abuse.
- Legal compliance: Fulfilling legal obligations (e.g. tax records, responding to subpoenas) and enforcing our Terms.
We will not use your personal information for any purpose beyond those disclosed here without your consent.
4. Data Sharing and Disclosure
With Other Users
When you book a Job, Washers at your school who can take it see your first name and last initial, building, floor, pickup time, and laundry settings. The Washer who accepts it also sees your room number and notes, if you added them. Users see their Washer's first name and last initial. Delivery photos are visible to the User and Washer on that Job. We never share your full name or email with other Users. This is necessary for the laundry transaction.
When a Job is paid, we also post it to a CampusWash Telegram group of Washers so one of them can take it. The post has the service tier, number of loads, building, floor, pickup time, and the Washer payout and tip. It has no name or email.
With Service Providers
We share data with third-party vendors who assist in operating the Platform, such as:
- Stripe: to handle payments. Stripe receives your email, the order amount, tip, and processing fee, and order details (job and account IDs, service tier, number of loads, and wash settings). You enter your card details on Stripe's checkout page; we never see them (they are contractually bound to limit use).
- Convex: hosts our database, file storage (including delivery photos and feedback screenshots), and server code, so it stores all the information described in this Policy.
- Netlify: hosts our website.
- Apple Push Notification service: delivers iPhone notifications if you allow them. It receives your device's push token and the notification text (for example "A washer accepted your laundry order"), never your name or email. We store the token with your account and delete it when you sign out or delete your account.
- Resend: sends our emails. It receives your email address and the message: your sign-in codes and, if you have email notifications on, updates about your Jobs. It also carries CampusWash's own alerts to our inbox, with the same details as the private Telegram chat below.
- Telegram: carries the Washer group posts described above, and a private CampusWash chat. The private chat receives each paid Job's details plus the User's first name, last initial, email, add-ons, amount paid, and order ID, along with alerts about payment and refund problems that include order IDs and amounts.
These providers are "service providers" under the CCPA and may not use the data for other purposes.
Apple App Review
Apple's App Review team signs in with CampusWash test accounts, which see only test data, not yours.
Legal Requirements
We may disclose your data if required by law (e.g., to respond to a subpoena, court order, or government request) or to protect CampusWash's rights and safety.
No Sale of Personal Information
We do not sell or rent your personal information to third parties. (For example, CampusWash will not join any marketing "cooperative" or data broker networks.) If we ever change this policy, we will comply with CCPA's notice and opt-out requirements.
5. California Privacy Rights
If you are a California resident, you have the following rights under CCPA/CPRA:
- Right to Know: You can request a list of personal information we have collected about you, categories of sources, purpose of collection, and categories of third parties with whom it is shared.
- Right to Access: You can request a copy of the specific personal data we hold about you (we will provide it free of charge in a portable format).
- Right to Delete: You can request deletion of your personal information, or delete your account yourself from Settings on the website or from Account > Delete account in the iOS app. You cannot delete your account while you have an active paid Job or while your account is restricted; unpaid orders are removed with the account. To delete a restricted account, email getcampuswash@gmail.com. Deleting your account removes your profile and sign-in records, Jobs you booked with their messages and delivery photos, messages and photos you added to other Jobs, ratings you gave or received, notifications and push tokens, feedback, incident reports you filed, and your payout details and withdrawal history. We keep incident reports other Users filed about you, Jobs you completed as a Washer for other Users (so their history stays intact), a hashed form of your email that records whether you used the first-wash promo or a referral (so these cannot be reused), any Do Not Sell request, and, if a CampusWash admin deleted your account, a record of that deletion (your email, first name and last initial, the reason, and the date). Stripe keeps its own records of payments you made.
- Right to Correct: You can request correction of inaccurate personal information (e.g. name, address). We will update your information upon verification.
- Right to Limit: You can opt to limit use of any sensitive personal information we may hold. (We collect almost no sensitive categories, but if any were present, you could restrict them to only necessary uses.)
- Right to Opt-Out of Sale/Sharing: We do not sell your data. However, if we ever did, you could opt out via a notice or the Global Privacy Control.
- Right to Non-Discrimination: We will not discriminate against you for exercising these rights (e.g., by charging different prices or denying service).
To exercise any California privacy right, please email getcampuswash@gmail.com. We will verify your identity (we may ask for account info) and respond within 45 days of a verifiable request (with one 45-day extension allowed if needed, as California law permits). You may also designate an authorized agent to submit requests on your behalf by providing written permission.
Beginning July 2023, you may also lodge complaints with the California Privacy Protection Agency about our compliance.
6. Data Retention
We keep your information while your account is open. When you delete your account, or a CampusWash admin deletes it, we delete right away everything listed under Right to Delete in Section 5, including Jobs you booked, your payout details, and your withdrawal history. We keep only these, each for the reason given: incident reports other Users filed about you (so deleting an account cannot erase a safety report), Jobs you completed as a Washer for other Users (so their order history stays intact), a hashed form of your email (so the first-wash promo and referrals cannot be reused), any Do Not Sell request (our record that you asked), and, if an admin deleted your account, a record of the deletion with your email, first name and last initial, the reason, and the date (so we can show what was deleted and why). Stripe keeps its own records of payments you made, under Stripe's own privacy policy.
7. Security
We use industry-standard security measures (encryption at rest and in transit, secure cloud storage, access controls) to protect your data. However, no security is perfect. In the event of a data breach, we will notify affected California residents as required by California's breach notification law.
8. Children's Privacy
CampusWash is intended for users 18 or older (college students). We do not knowingly collect information from children under 16. If we learn we have inadvertently collected data from a minor under 16, we will delete it.
9. Do Not Track
California law requires us to disclose how we respond to browser "Do Not Track" signals. At this time, CampusWash does not recognize or respond to Do Not Track signals. We encourage users to adjust browser privacy settings or cookies if they wish to limit tracking.
10. International Transfers
CampusWash is based in the USA. Your data may be stored and processed in the U.S., but may also be transferred to other countries if our service providers operate internationally. In any case, we will protect your information in accordance with this Policy.
11. Changes to Privacy Policy
We may update this Privacy Policy as laws or practices change. The "Last updated" date above will indicate when changes are made. We encourage you to review this page periodically. Continued use of the Platform after changes are posted means you accept the updated policy.
12. Contact for Privacy Inquiries
For privacy questions or to submit CCPA/CPRA requests, please email getcampuswash@gmail.com. On the website, you can also use "Download my data" and "Delete my account" in Settings. In the iOS app, go to Account > Delete account.