Privacy Policy – NXT Wash LLC
Effective Date: August 17, 2026 | Last Reviewed: August 17, 2026
NXT Wash LLC (“NXT Wash,” “we,” “our,” or “us”) is committed to protecting personal data and respecting individual privacy rights. This Privacy Policy explains how personal data is collected, used, disclosed, stored, transferred, and protected when individuals interact with our AI-driven, cloud-based point-of-sale (POS) systems, kiosks, mobile applications, websites, and business analytics platforms (collectively, the “Services”).
This policy applies to end customers of car wash operators, business customers, and authorized personnel using our Services.
1. Platform Overview and Roles
NXT Wash provides technology solutions for the car wash industry, including cloud-based POS systems, self-service kiosks, mobile applications, loyalty and membership programs, payment integrations, analytics, and operational reporting tools.
Depending on the context, NXT Wash may act as a data processor on behalf of car wash operators or as a data controller when determining the purposes and means of processing, such as for our own websites, applications, or platform administration. Where NXT Wash acts as a processor, the car wash operator is the data controller and remains responsible for customer relationships and disclosures.
2. Personal Data We Collect
Personal data is collected directly from users, automatically through system interactions, or via integrated third-party services.
This may include identifying information such as names, phone numbers, email addresses, vehicle identifiers, account credentials, transaction details, membership or subscription status, and communications required to provide the Services. When users interact with kiosks, POS systems, or mobile applications, personal data may be collected to complete purchases, authenticate identity through one-time passcodes (OTPs), manage accounts, deliver receipts, or present terms and conditions.
We also collect technical and usage information automatically, including IP addresses, device identifiers, timestamps, system logs, browser or device characteristics, and interaction data. This information is used for system operation, security, analytics, troubleshooting, and performance optimization.
Payment information is processed through certified third-party payment processors. NXT Wash does not store full payment card numbers except where required for lawful transaction processing.
3. How We Use Personal Data
Personal data is used strictly to operate, maintain, secure, and improve the Services. This includes enabling account creation and authentication, delivering OTPs and essential account communications, processing transactions, managing memberships and loyalty programs, generating analytics and reports, and complying with legal obligations.
Aggregated and de-identified data may be used to improve platform functionality, analytics models, and operational insights. Personal data is not sold and is not used for unsolicited marketing unless explicit, documented consent has been obtained by the applicable data controller.
4. Legal Bases for Processing (GDPR)
Where GDPR applies, personal data is processed based on one or more lawful bases, including performance of a contract, compliance with legal obligations, legitimate interests such as fraud prevention and platform security, and user consent where required.
Consent is obtained through clear, affirmative actions such as entering a mobile number and requesting an OTP, accepting account creation terms, or otherwise initiating an action that requires messaging or authentication.
5. Data Sharing and Third Parties
Personal data may be shared with trusted third-party service providers that support our Services, including cloud hosting providers, communications platforms, analytics services, security vendors, and payment processors. All such providers are contractually restricted from using personal data for independent purposes and are required to implement appropriate safeguards.
Personal data may also be disclosed to car wash operators using the platform, as they control customer relationships and determine the purposes of processing. We may disclose personal data where required by law, legal process, or to protect the rights, safety, or integrity of NXT Wash, our customers, or others.
NXT Wash does not sell personal data and does not share personal data for cross-context behavioral advertising as defined under the California Privacy Rights Act.
6. International Data Transfers
NXT Wash operates globally, and personal data may be processed in jurisdictions outside an individual’s country of residence. International transfers are conducted using appropriate safeguards, including standard contractual clauses, data processing agreements, and technical measures consistent with applicable data protection laws such as GDPR and PIPEDA.
7. Data Security and Protection
NXT Wash implements administrative, technical, and physical safeguards designed to protect personal data. These include encryption of data in transit using industry-standard protocols such as TLS, encryption of sensitive data at rest where appropriate, access controls based on least-privilege principles, monitoring and logging, and regular security assessments.
Encryption keys are managed using industry-standard key management practices. Access to personal data is limited to authorized personnel with a legitimate business need.
8. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. Transactional and financial records are retained in accordance with applicable accounting and regulatory requirements, while authentication and verification data is retained only as long as required for security and audit purposes. When no longer required, data is securely deleted or anonymized.
9. User Rights
Individuals have rights regarding their personal data, subject to applicable laws. These rights may include access, correction, deletion, restriction, objection, and data portability. California residents have additional rights under CCPA/CPRA, and Canadian residents have rights under PIPEDA.
Requests to exercise privacy rights may be submitted using the contact details below. Identity verification may be required, and responses will be provided within legally mandated timeframes.
10. Automated Processing and Analytics
NXT Wash may use automated processing and analytics to generate operational insights and improve platform functionality. Such processing does not produce legal or similarly significant effects on individuals within the meaning of applicable data protection laws.
11. Children’s Privacy
The Services are not directed to children under the age of 13, and NXT Wash does not knowingly collect personal data from children. Where stricter age requirements apply, they are observed. If data from a minor is identified, it will be deleted promptly.
12. SMS, OTP, Marketing Communications, and Account Messaging
NXT Wash uses SMS messaging to provide transactional communications related to customer accounts and requested services, including one-time passcodes (OTPs), login authentication codes, account verification messages, security notifications, receipts, and other essential account-related communications. Where a user provides separate, explicit consent, NXT Wash and participating car wash operators may also send marketing or promotional SMS messages in accordance with the user’s preferences and applicable law.Users provide express consent to receive SMS communications by registering through the NXT Wash Customer Portal, mobile application, kiosk, or point-of-sale (POS) system. During registration or purchase, users voluntarily provide their mobile phone number, affirmatively accept the applicable Privacy Policy and Terms and Conditions, and, where applicable, separately consent to receive marketing communications. Transactional SMS messages, including one-time passcodes (OTPs), are sent only after a user-initiated request, such as selecting “Send Code” to verify their identity or access their account.Message frequency varies depending on the user’s account activity, requested services, and communication preferences. Message and data rates may apply according to the user’s wireless carrier and messaging plan.
NXT Wash collects and processes mobile phone numbers and related messaging information solely to provide the Services, facilitate account authentication, process transactions, provide customer support, deliver communications requested by the user, and, where separately authorized by the user, send marketing communications on behalf of participating car wash operators. Mobile phone numbers and personal information may be shared with authorized service providers and participating car wash operators only as necessary to provide the Services and deliver communications that the user has expressly requested or consented to receive.
Text messaging originator opt-in data and messaging consent will not be sold, transferred, shared, or disclosed to third parties or affiliates for their own marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing or promotional purposes.
Certain authentication and security-related SMS messages are required to provide the Services and cannot be disabled while SMS authentication remains enabled. Questions regarding SMS communications or this messaging program may be directed to support@nxtwash.com.
13. Policy Updates
This Privacy Policy may be updated periodically. Updates will be posted on our website and, where appropriate, communicated through the Services. Continued use of the Services constitutes acceptance of the updated policy.
14. Contact Information
NXT Wash LLC
Email: support@nxtwash.com
Website: https://www.nxtwash.com/
Address: Boston, MA 65185
