InstantWashQuoteStart free trial

Privacy Policy

Two groups of people are covered: businesses that use InstantWashQuote (we decide how their data is used) and homeowners who request a quote from a business (the business decides; we process the data for it).

1. What we collect from businesses (owners)

  • Account: email, business name, city and state, phone, logo, rate card, service area, deposit and booking links, allowed websites.
  • Use: requests and your actions on them, the price you confirm, notification settings, and, if you turn phone alerts on, the push address and browser name of each device.
  • Billing: subscription status and Polar identifiers. Card details stay with Polar.
  • Sign-in: a session cookie that is required to keep you signed in (HttpOnly, 30 days). While a session lasts we keep the browser name and IP address of that device so you can see and sign out your devices. We do not use passwords.

2. What we collect from homeowners

Only what the quote form asks for, and only when the homeowner sends the request:

  • Name, phone, email, address, a note, up to two photos (location data in photos is removed), a preferred date.
  • The area drawn on the aerial photo and the place chosen on the map. Precise location is sensitive, so we never sell or share it. It is used only to serve the business.
  • The time they agreed that the business may contact them.
  • A salted, daily-changing hash of their IP address, used to stop repeat submissions. We do not store the IP address itself.

3. What we do not do

  • The widget and the public pages set no cookies.
  • No third-party analytics, advertising pixels or session replay anywhere.
  • We keep our own counters (for example how many times a widget was opened). They hold a name and a business, never contact details or addresses.
  • We do not sell homeowner or owner data, share it for advertising or use leads for our own marketing.

4. Why we use it

  • To run the quote widget, show a range from the business's rate card and deliver the request to the business.
  • To email the business and the homeowner about the request (a received notice, the confirmed quote, reminders).
  • To bill the business, prevent abuse, keep the service secure and answer support questions.

5. Who processes it

These providers handle data for us (the same list is in the Data Processing Addendum):

  • Resend: email delivery.
  • Polar: billing for businesses. It never receives homeowner data.
  • Cloudflare Turnstile: spam check on the request form.
  • Contabo: server hosting.
  • Browser push services (Google, Apple, Mozilla): they carry encrypted phone alerts to a business that turned them on.
  • Public data services: the US Census Geocoder receives the address text from our server to find the place on the map (no name, email or phone). USGS provides the aerial photos; our server fetches photo tiles by map position and caches them.

6. How long we keep it

  • Homeowner contact details, address, drawn area, location, notes and photos: 12 months after the request, then removed. The ZIP code, square footage, prices, status and the salted IP hash stay so the business keeps its history.
  • A business can delete any request immediately.
  • A deleted account is kept for 30 days so you can restore it, then removed for good.
  • Our own counters: 25 months. Payment notifications from Polar: 90 days. Rate-limit counters: 7 days, and they hold hashes only.
  • Unclaimed demo pages we build for businesses: 90 days.
  • Database backups can hold removed data for up to 14 days.

7. Your choices and rights

  • Homeowners: ask the business you contacted to see or delete your request. If you contact us, we pass it on and help the business answer within 10 days.
  • Businesses: export all your data as JSON, delete requests, change notifications, or delete your account in Settings.
  • Residents of states with privacy laws (for example California, Texas, Florida, Arizona) can ask to access or delete their data. For homeowners the business is responsible for answering; for businesses write to us.

8. Security

Traffic uses HTTPS. Each business sees only its own requests. Sign-in is by emailed link with no password. The request form has a spam check and per-visitor limits. Embedded widgets run in a sandboxed frame and only on websites the business lists.

9. Children

The service is for businesses and for adults asking for a quote. It is not directed to children.

10. Changes and contact

We will update this page and the date above when this changes, and email businesses about changes that matter. Questions: hello@instantwashquote.com.

Questions? Email hello@instantwashquote.com.