Privacy Policy – NXT Wash LLC
Effective Date: February 4, 2026 | Last Reviewed: February 4, 2026
NXT Wash LLC (“NXT Wash,” “we,” “our,” or “us”) is committed to protecting personal data and respecting individual privacy rights. This Privacy Policy explains how personal data is collected, used, disclosed, stored, transferred, and protected when individuals interact with our AI-driven, cloud-based point-of-sale (POS) systems, kiosks, mobile applications, websites, and business analytics platforms (collectively, the “Services”).
This policy applies to end customers of car wash operators, business customers, and authorized personnel using our Services.
1. Platform Overview and Roles
NXT Wash provides technology solutions for the car wash industry, including cloud-based POS systems, self-service kiosks, mobile applications, loyalty and membership programs, payment integrations, analytics, and operational reporting tools.
Depending on the context, NXT Wash may act as a data processor on behalf of car wash operators or as a data controller when determining the purposes and means of processing, such as for our own websites, applications, or platform administration. Where NXT Wash acts as a processor, the car wash operator is the data controller and remains responsible for customer relationships and disclosures.
2. Personal Data We Collect
Personal data is collected directly from users, automatically through system interactions, or via integrated third-party services.
This may include identifying information such as names, phone numbers, email addresses, vehicle identifiers, account credentials, transaction details, membership or subscription status, and communications required to provide the Services. When users interact with kiosks, POS systems, or mobile applications, personal data may be collected to complete purchases, authenticate identity through one-time passcodes (OTPs), manage accounts, deliver receipts, or present terms and conditions.
We also collect technical and usage information automatically, including IP addresses, device identifiers, timestamps, system logs, browser or device characteristics, and interaction data. This information is used for system operation, security, analytics, troubleshooting, and performance optimization.
Payment information is processed through certified third-party payment processors. NXT Wash does not store full payment card numbers except where required for lawful transaction processing.
3. How We Use Personal Data
Personal data is used strictly to operate, maintain, secure, and improve the Services. This includes enabling account creation and authentication, delivering OTPs and essential account communications, processing transactions, managing memberships and loyalty programs, generating analytics and reports, and complying with legal obligations.
Aggregated and de-identified data may be used to improve platform functionality, analytics models, and operational insights. Personal data is not sold and is not used for unsolicited marketing unless explicit, documented consent has been obtained by the applicable data controller.
4. Legal Bases for Processing (GDPR)
Where GDPR applies, personal data is processed based on one or more lawful bases, including performance of a contract, compliance with legal obligations, legitimate interests such as fraud prevention and platform security, and user consent where required.
Consent is obtained through clear, affirmative actions such as entering a mobile number and requesting an OTP, accepting account creation terms, or otherwise initiating an action that requires messaging or authentication.
5. Data Sharing and Third Parties
Personal data may be shared with trusted third-party service providers that support our Services, including cloud hosting providers, communications platforms, analytics services, security vendors, and payment processors. All such providers are contractually restricted from using personal data for independent purposes and are required to implement appropriate safeguards.
Personal data may also be disclosed to car wash operators using the platform, as they control customer relationships and determine the purposes of processing. We may disclose personal data where required by law, legal process, or to protect the rights, safety, or integrity of NXT Wash, our customers, or others.
NXT Wash does not sell personal data and does not share personal data for cross-context behavioral advertising as defined under the California Privacy Rights Act.
6. International Data Transfers
NXT Wash operates globally, and personal data may be processed in jurisdictions outside an individual’s country of residence. International transfers are conducted using appropriate safeguards, including standard contractual clauses, data processing agreements, and technical measures consistent with applicable data protection laws such as GDPR and PIPEDA.
7. Data Security and Protection
NXT Wash implements administrative, technical, and physical safeguards designed to protect personal data. These include encryption of data in transit using industry-standard protocols such as TLS, encryption of sensitive data at rest where appropriate, access controls based on least-privilege principles, monitoring and logging, and regular security assessments.
Encryption keys are managed using industry-standard key management practices. Access to personal data is limited to authorized personnel with a legitimate business need.
8. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. Transactional and financial records are retained in accordance with applicable accounting and regulatory requirements, while authentication and verification data is retained only as long as required for security and audit purposes. When no longer required, data is securely deleted or anonymized.
9. User Rights
Individuals have rights regarding their personal data, subject to applicable laws. These rights may include access, correction, deletion, restriction, objection, and data portability. California residents have additional rights under CCPA/CPRA, and Canadian residents have rights under PIPEDA.
Requests to exercise privacy rights may be submitted using the contact details below. Identity verification may be required, and responses will be provided within legally mandated timeframes.
10. Automated Processing and Analytics
NXT Wash may use automated processing and analytics to generate operational insights and improve platform functionality. Such processing does not produce legal or similarly significant effects on individuals within the meaning of applicable data protection laws.
11. Children’s Privacy
The Services are not directed to children under the age of 13, and NXT Wash does not knowingly collect personal data from children. Where stricter age requirements apply, they are observed. If data from a minor is identified, it will be deleted promptly.
12. SMS, OTP, and Account Messaging
SMS messages, including OTPs, terms and conditions, and essential account information, are sent only in response to user-initiated actions. Transactional and security messages may be required to provide the Services. Messaging is delivered through trusted providers that comply with data protection and telecommunications regulations.
13. Policy Updates
This Privacy Policy may be updated periodically. Updates will be posted on our website and, where appropriate, communicated through the Services. Continued use of the Services constitutes acceptance of the updated policy.
14. Contact Information
NXT Wash LLC
Email: support@nxtwash.com
Website: https://www.nxtwash.com/
Address: Boston, MA 65185
