Stinky Cactus Dog Wash

Privacy Policy

Effective Date: May 4, 2026

Privacy Policy

Stinky Cactus Dog Wash via MonsoonOS Platform — Car Wash & Dog Wash Services

Last Updated: 2026-06-01

Introduction

Stinky Cactus Dog Wash ("we," "us," or "our") operates wash service locations using the MonsoonOS subscription management platform provided by Cactus Wash Systems LLC ("Platform Provider"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our services, visit our locations, or interact with our website or mobile application.

By enrolling in a subscription or using our services, you agree to the collection and use of information as described in this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms & Conditions.

1. Information We Collect

1.1 Information You Provide

  • Account Information. When you create an account or enroll in a subscription, we collect: your name, email address, phone number, mailing address (if provided), and payment information (processed and stored by our payment processor, Stripe — we do not store full credit card numbers).
  • Third-Party Sign-In Data. If you choose to sign in with Apple or Google, we receive your name (only when first authorized — Apple does not re-share it on subsequent sign-ins), email address (which may be a private relay address that forwards to your real inbox), and a unique account identifier from the provider. We do not receive your Apple/Google password. You can manage or revoke this connection at any time from your account settings.
  • Pet and Household Information. We collect information about the pets associated with your subscription, which may include: pet name, breed, size/weight, and vaccination status as represented by you.

1.2 Information Collected Automatically

  • Service Usage Data. We automatically collect information about your use of the Service, including: wash dates and times, wash duration, location visited, plan usage (washes remaining), and subscription status changes (enrollment, plan change, cancellation).
  • Device and Technical Data. When you use our mobile application or website, we may collect: IP address, device type, operating system, browser type, app version, and general location data (city/region level, not precise GPS unless you grant location permission).
  • Bluetooth and Precise Location for Wash-Bay Proximity Confirmation (Mobile App). When you tap "Start a Wash" in our mobile app, the app uses Bluetooth Low Energy (BLE) scanning together with the precise-location permission (required by Android and iOS to receive BLE proximity advertisements) to detect a small Bluetooth beacon mounted at the wash bay. This confirms your phone is physically at the correct bay before the wash starts. Bluetooth scan results and precise-location data are processed only on your device for this single purpose; they are not stored on our servers, transmitted off-device, or used to track your movement or location at any other time. The app does not perform background scanning. You may decline the Bluetooth or location permissions, in which case you can still start a wash by other supported means (e.g., the in-bay control panel) where available.
  • Crash Reports and Diagnostic Data. Our mobile application uses Sentry to collect anonymized crash reports, error logs, and basic device diagnostics (operating system version, app version, device model) when the app encounters an error. This data is used solely to identify and fix software bugs. Sentry's privacy policy governs its handling of this data. See: https://sentry.io/privacy/.
  • Device Attestation for Fraud Prevention. To prevent fraud and abuse of wash-control endpoints, our mobile app generates a cryptographic device attestation token using Apple App Attest (on iOS) or Google Play Integrity (on Android) when contacting our servers. The token confirms the request originated from a genuine, unmodified installation of our app. We store an opaque key reference associated with your account and use this data only for security, fraud prevention, and abuse detection.

1.3 Information from Third Parties

We may receive information from our payment processor (Stripe) regarding payment status, failed transactions, and fraud screening results. We do not receive your full payment card number from Stripe.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing the Service: Processing your subscription, managing your account, granting access to wash facilities, tracking wash usage, and processing payments.
  • Communications: Sending transactional emails and messages related to your account (renewal confirmations, cancellation confirmations, payment failure notices, plan change notifications, and receipts).
  • Service Improvement: Analyzing usage patterns to improve service quality, equipment maintenance scheduling, and operational efficiency.
  • Legal Compliance: Complying with applicable laws, regulations, and legal processes, including responding to lawful requests from public authorities.
  • Safety and Security: Detecting and preventing fraud, unauthorized access, and other harmful activities.
  • Dispute Resolution: Maintaining records necessary to resolve disputes, enforce our Terms & Conditions, and support arbitration proceedings.

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

  • Platform Provider (Cactus Wash Systems LLC). As the provider of the MonsoonOS platform, Cactus Wash Systems LLC processes your data on our behalf to operate the subscription management system, access controls, and communications. Cactus Wash Systems LLC acts as a data processor and is contractually obligated to use your data only as necessary to provide the platform services.
  • Payment Processor (Stripe). Your payment information is transmitted directly to and processed by Stripe, Inc. Stripe's privacy policy governs its handling of your payment data. See: https://stripe.com/privacy.
  • Service Providers. We may share information with third-party service providers who assist us in operating the Service, such as email delivery providers, SMS providers, analytics services, error-reporting and diagnostics services (Sentry), device-attestation services (Apple App Attest, Google Play Integrity), and customer support tools. These providers are contractually obligated to use your data only for the services they provide to us.
  • Identity Providers (Apple, Google). If you sign in with Apple or Google, your sign-in request is processed directly by Apple or Google, who provide us with the limited account information described in Section 1.1. Their privacy policies govern their handling of your sign-in. See: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy.
  • Legal Requirements. We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice before your information becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After you cancel your subscription or close your account, we retain your data as follows:

  • Account and subscription records: 6 years from cancellation (to support potential legal claims within applicable statutes of limitation).
  • Consent and acceptance logs (T&C acceptance, arbitration opt-out records): 6 years from the date of the event (these are legal compliance records and are not subject to deletion requests).
  • Payment transaction records: As required by applicable tax and financial regulations (typically 7 years).
  • Usage data (wash history, access logs): 3 years from the date of the activity.
  • Crash and diagnostic logs: Up to 90 days from collection.
  • Device attestation key references: For the lifetime of your account; deleted on account closure.
  • Bluetooth scan results and precise-location data used for the proximity gate: Not retained — processed in-memory on your device only.

5. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

  • Right to Know/Access. You may request a copy of the personal information we hold about you.
  • Right to Delete. You may request deletion of your personal information, subject to certain exceptions (such as data we are required to retain for legal compliance, including consent and acceptance logs).
  • Right to Correct. You may request correction of inaccurate personal information.
  • Right to Opt Out of Sale/Sharing. We do not sell your personal information. If we engage in "sharing" as defined by the CCPA/CPRA (e.g., for cross-context behavioral advertising), you may opt out.
  • Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at hello@stinkycactusaz.com or 4815 E. Carefree Highway, Suite 105, Cave Creek, AZ, 85331. We will respond within 45 days (or as required by applicable law). We may need to verify your identity before processing your request.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, access controls, regular security assessments, and secure coding practices in the MonsoonOS platform. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us at hello@stinkycactusaz.com.

8. Third-Party Links and Services

The Service may contain links to third-party websites or services (such as Stripe's payment portal). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access through the Service.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address on your account and, where required by applicable law, will be subject to the notice periods described in our Terms & Conditions. The "Last Updated" date at the top of this policy indicates the date of the most recent revision. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

  • Email: hello@stinkycactusaz.com
  • Mail: 4815 E. Carefree Highway, Suite 105, Cave Creek, AZ, 85331

For questions specifically about the MonsoonOS platform and how it processes your data, you may also contact the Platform Provider:

  • Cactus Wash Systems LLC
  • Email: support@cactuswashsystems.com
  • Mail: Cactus Wash Systems LLC, Arizona, United States