Privacy Policy

Your data is yours. We collect only what we need to run the service, never sell it, and protect it like our own. Here is exactly what we keep, why we keep it, and the rights you have over it.

Information We Gather

Identity & contact: your name, phone number, email, profile photo (if you sign in with Google), and your service addresses.

Vehicle & booking history: make, model, year, color, plate, and the history of bookings you have made on the platform.

Payment details: processed and tokenized by our third-party payment processor (Stripe). RabbitWash never stores full card numbers — payment references and card details such as the last four digits returned by Stripe.

Device information: device type, browser, and operational logs used to run and protect the service. If you enable app notifications, we store a push-notification token linked to your account so booking updates reach your device.

Location for dispatching: the service address and its map coordinates, and location information you choose to include in support messages. We use these to check coverage and arrange your wash. The customer app does not track your device location in the background.

Job records: before your wash the Rabbit photographs the vehicle, and after it photographs the finished work. The job also records the completion checklist, your sign-off signature (or the reason there is none), and the Rabbit's notes for staff. These are saved to your booking so you, the assigned Rabbit and staff can review them, including when you report a problem.

Ratings: the rating and review you give a completed job. Your Rabbit may also rate the booking privately; only that Rabbit and RabbitWash staff can see it.

Text messages: your mobile number and your text-message settings. See Text messages below.

How We Use Your Data

Schedule bookings — dispatch the right Rabbit to the right address with the right vehicle.

Process payments — through our payment processor, with the appropriate authorizations and captures.

Improve dispatch — analyse anonymized routing and timing patterns so jobs land faster.

Prevent fraud — detect duplicate accounts, charge-back abuse, and platform misuse.

Customer support — use your booking and message history to resolve issues. When you use the automated assistant, your conversation and relevant account or booking context may be processed by our AI providers. You can also contact our team directly.

Marketing — send promotional emails about new services or offers, with a clear opt-out in every message and in your profile settings.

We Do Not Sell Personal Data

RabbitWash does not sell, rent, or trade your personal data to third parties. Period.

We may publish aggregated, anonymized statistics (e.g. "average wash time across the fleet") that cannot be linked back to any individual.

Who Sees Your Data

Payment processor — Stripe processes payments and manages payment methods and recurring billing.

Rabbits — Rabbits who are offered your booking see your name, vehicle, service address, booked services and any booking notes. Once a Rabbit accepts it, they also see your phone number and can message you in the app. While your Rabbit is on the way, their live location is shared with you until they arrive; that location trail is deleted within 24 hours after the job ends. Rabbits do not see your payment details or unrelated history.

Service providers — Auth0 provides sign-in and sends phone sign-in codes by text; Twilio sends booking text messages and the verification codes for Rabbit applications (through Twilio Verify where configured); Supabase hosts account, booking, message and storage data; Vercel hosts the website and API; Resend delivers email; Google Maps provides address and map services; Expo, Apple Push Notification service and Firebase Cloud Messaging deliver app notifications. Anthropic and, when used as a fallback, OpenRouter process automated-support conversations. Providers receive the information needed for these functions. Push alerts use generic text; account-specific booking details are opened inside the app after sign-in.

Legal compliance — we may disclose data when required by valid legal process (subpoena, court order) or to protect the safety of our users, Rabbits, or the public.

Text Messages

When you give us your mobile number, a notice shows what you are agreeing to. We text you sign-in codes and booking updates (confirmation, Rabbit assigned, on the way, completed, rescheduled, cancelled, refunded, weather holds) and monthly plan notices. Rabbits and applicants get application codes and job texts. Message frequency varies. Msg & data rates may apply. Reply STOP to opt out or HELP for help, or turn off SMS reminders in your profile. We do not send marketing texts, and we do not share mobile numbers or text-message consent with third parties for their marketing.

Customer Rights

Depending on where you live (including California under the CCPA/CPRA, and other US states with similar laws), you have the right to:

Access — request a copy of the personal data we hold about you. Deletion — ask us to delete your account and associated data. Correction — fix anything that is inaccurate. Opt-out — decline marketing communications, and where applicable opt out of sharing for cross-context behavioural advertising (we do not engage in that).

To exercise any of these rights, email support@rabbitwash.com or contact support from your account. We honor verified requests within 30 days.

Opt Out Of Marketing

You can opt out of marketing emails from your profile settings or by tapping the unsubscribe link in any marketing message.

Manage wash-update and marketing preferences in your account. App push notifications also depend on your device notification settings. Verification codes and payment communications may still be needed to sign in or complete a transaction.

How We Protect Your Data

The app uses HTTPS to communicate with its service providers. Account and booking access is restricted to the relevant customer, assigned Rabbit and authorized staff. Stripe handles full payment-card details; RabbitWash does not store full card numbers.

We maintain access controls and service-provider security settings and investigate reported security issues. We will notify affected users of a data breach as required by applicable law.

Rabbit Applicants

When you apply to become a Rabbit, we collect:

• your name, email, phone number (verified with a text code), home address and map pin, optional second address, languages and availability;
• your experience and the services you offer;
• a photo of your driver's license and a profile photo;
• your Social Security number, which is stored encrypted. Staff who review applications see it masked, and each time one of them reveals the full number it is recorded. It is not used to run any background screening without your separate written authorization;
• if you have a vehicle for work, its year, make and model, a photo of your auto insurance card and, if you add it, your vehicle registration;
• optional equipment photos;
• any notes you add, and the date, time and version of the Rabbit Partner Terms you accepted.

We use these details to verify your identity, review your application and contact you. They are stored privately and only RabbitWash staff who review applications can view them. We delete the photos (license, profile, insurance card, vehicle registration and equipment) within 90 days of a decision on your application, or sooner on request if your application is declined. The rest of the application record, including interview scheduling details (time and video link), is kept with your application.

Account Deletion And Retention

In the RabbitWash app, open Profile → Delete account and confirm. You can also request account or personal-data deletion without the app at our account-deletion page, or email support@rabbitwash.com. We may verify that the request comes from the account owner.

Deletion removes saved vehicles and addresses, messages, notification tokens and other account information. Upcoming washes and active recurring billing are cancelled as part of the process. Booking, payment and contractor-earnings records needed for accounting, disputes or legal obligations may be retained with customer-identifying details removed where possible. Information needed to complete an in-progress wash may remain until that service is finished. If a deletion step fails, contact support so we can complete it.