Privacy policy

Draft prepared 2026-10-17. Not yet reviewed by a lawyer.

This policy covers the Membership Review website and customer accounts: the car wash owners and staff who sign in. It does not cover wash members. See "Member data" below.

Who we are

[Entity name pending] operates Membership Review. Contact us at hello@washattest.com.

What we collect

• Your name and email address.
• A password hash, or your Google account identifier if you sign in with Google.
• Authenticator setup, if you turn on two-step sign-in.
• The name of your wash, and the team roles people hold in it.
• A log of account actions, with IP address and browser type.
• Messages you send through the contact form.

Why we use it

To run your accounts, keep them secure, send account emails, answer your messages, and bill you when billing starts.

Cookies

We use only strictly necessary cookies for sign-in and form security. We do not use analytics, advertising or tracking cookies.

Sign in with Google

If you choose to sign in with Google, we receive only your email address, your name and your Google account identifier (the scopes openid, email and profile).

Sharing

We share account data only with the subprocessors listed at /subprocessors. We never sell it.

Member data

The data a wash puts into the service about its members belongs to that wash. It is covered by the Terms of service and the Data processing addendum, not by this policy.

How long we keep it

• Account data: while the account exists.
• Account action logs: 24 months.
• Contact messages: 24 months.

Your choices

You can ask to access, correct or delete your account data by emailing hello@washattest.com.

Security

See /security for how we protect the service.

Changes

We will post changes to this policy here, with the date.