Privacy Policy

Vroosh ("we", "us") is a car-wash management platform operated by Lucci. This policy explains what personal information we process, why, and your rights under South Africa's POPIA. By using Vroosh you agree to this policy.

Who is responsible for your data

• Your account & the platform: Vroosh is the responsible party for the account information of car-wash businesses that sign up.
• Customer data a wash captures: when a car-wash business records its own customers (name, phone, vehicle), that business is the responsible party and Vroosh acts as its operator (processor). The business is responsible for having a lawful basis and consent to message those customers.

What we collect

• Account: business name, owner email, contact/WhatsApp number, password (hashed).
• Operational: services, prices, jobs, payments recorded, staff hours, cash-up figures.
• Customer records entered by the business: customer name, phone, vehicle make/model/registration and licence-disc expiry, and marketing opt-in status.
• Billing: handled by PayFast; we store a subscription token and status, not your card details.
• Technical: standard logs and a device cookie that keeps a paired floor device signed in.

How we use it

• To provide the service — the floor app, finance, staff, reports and your mini-website.
• To send WhatsApp messages on a business's behalf, only to customers who opted in.
• To bill your subscription and send service and day-end emails.
• To keep the platform secure and improve it.

Who we share it with

We use trusted processors strictly to run the service: PayFast (payments), Resend (email), Meta WhatsApp Business Platform (messaging), and our hosting/database provider. We do not sell your data.

Security

Each business's data is isolated at the database level (row-level security), traffic is encrypted in transit, passwords are hashed and sensitive values encrypted at rest.

Retention

We keep account and operational data for as long as your account is active and as required to meet legal and tax obligations, then delete or anonymise it.

Your POPIA rights

You may request access to, correction of, or deletion of your personal information, and object to processing. Email support@vroosh.co.za and we'll respond within a reasonable period. Customers of a car wash should direct such requests to that business.

Marketing opt-out

Customers can opt out of WhatsApp marketing at any time by replying STOP — they are removed automatically.

Contact

Questions: info@vroosh.co.za · Support: support@vroosh.co.za.