Privacy Policy

1. Information We Collect

1.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email, phone number, password	Account creation, authentication, communication
Vehicle Information	Year, make, model, VIN, mileage	Service matching, diagnostics, repair history
Payment Information	Credit/debit card details (processed by Stripe)	Payment processing
Service Details	Issue descriptions, photos of vehicle issues	AI diagnostics, mechanic matching, service records
Communications	Chat messages, support inquiries	Service coordination, support, dispute resolution
Voice & Video Recordings	Short voice memos and video clips attached to chat messages	Describing vehicle issues to your mechanic
Mechanic Application Data	License numbers, driver's license photos, insurance info, certifications, experience	Mechanic identity verification and approval

1.2 Information Collected Automatically

Data Type	Examples	Purpose
Device Information	Device ID, operating system, app version	App compatibility, security, analytics
Location Data	GPS coordinates (with permission)	Mechanic matching, real-time tracking, service location
Usage Data	Pages visited, features used, timestamps	Service improvement, analytics
Network Information	IP address, connection type	Security, fraud prevention, audit trails
Push Notification Tokens	Device push tokens	Sending service notifications

1.3 Information from Third Parties

• Social Authentication: If you sign in with Apple or Google, we receive your name and email address from those services.
• Stripe: We receive transaction status, payment confirmations, and Connect account status from our payment processor.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Match you with available mechanics based on location and service needs.
• Process payments and manage billing.
• Provide real-time service tracking and status updates.
• Power AI-assisted diagnostics and customer support.
• Send push notifications about booking status, reminders, and updates.
• Prevent fraud, resolve disputes, and maintain platform security.
• Generate service reports and proof-of-service documentation.
• Improve our services and develop new features.
• Comply with legal obligations and respond to lawful requests.

3. How We Share Your Information

3.1 With Mechanics / Customers

When a Booking is active, we share relevant information between Customers and Mechanics, including:

• Customer's name, vehicle details, service location, and issue description (shared with Mechanic).
• Mechanic's name, rating, profile information, and real-time location during active service (shared with Customer).

3.2 With Service Providers

Provider	Purpose	Data Shared
Stripe, Inc.	Payment processing, mechanic payouts (Connect)	Payment details, transaction data, identity verification (for mechanics)
Twilio, Inc.	SMS one-time passcodes for sign-in and verification	Phone number, OTP code
Resend	Transactional email delivery (receipts, password resets, booking notifications)	Email address, name, message content
OpenAI	AI diagnostics and support chat	Vehicle details, issue descriptions (anonymized where possible). OpenAI does not retain API inputs for training under our zero-retention agreement.
Nominatim (OpenStreetMap)	Geocoding / address lookup	Location coordinates, address queries
ipapi.co and ipwho.is	Approximate IP-based geolocation fallback when GPS is unavailable or denied (web only)	Public IP address
Expo (push notifications)	Notification delivery via Apple Push Notification service and Firebase Cloud Messaging	Anonymous device push tokens, notification content
Apple and Google	App distribution, push notification delivery, optional social sign-in	Push tokens; if you use Sign in with Apple or Google: name and email only

3.3 For Legal Purposes

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of WAVO, our users, or the public.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Payment Data and PCI Compliance

We retain only:

• The last four digits of your card (for display purposes).
• Card brand (Visa, Mastercard, etc.).
• Stripe customer and payment intent identifiers (tokens, not card data).
• Transaction amounts, dates, and status.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specific retention periods include:

• Account data: Retained while your account is active and for 3 years after deletion request.
• Transaction records: Retained for 7 years for tax, legal, and dispute resolution purposes.
• Audit logs: Retained for 3 years for security and compliance.
• Chat messages: Retained for 2 years after the related booking is completed.
• Location data: Retained for the duration of the active booking and for 90 days thereafter.

6. Your Rights and Choices

6.1 Access and Portability

You may request a copy of your personal data by contacting us at support@gowavo.com.

6.2 Correction

You can update most of your account information directly through the app. For other corrections, contact support.

6.3 Account Deletion

You can permanently delete your WAVO account at any time, directly inside the app:

• In the app: open the Profile tab, choose Settings, then tap Delete Account and confirm.
• From the web: sign in at gowavo.com, open your account page, and choose Delete Account.
• By email: send a deletion request from your account email address to support@gowavo.com.

When you delete your account, your profile, vehicles, saved addresses, payment methods on file, chat history, and push tokens are removed from active systems within 30 days. We may retain a limited subset of records — completed-transaction history, tax records, fraud-prevention logs, and any data we are legally required to keep — for the retention periods listed in Section 5. We do not retain a usable copy of your active profile after deletion.

6.4 Location Permissions

You can enable or disable location sharing through your device settings. Note that disabling location may limit the functionality of certain features (e.g., mechanic matching, live tracking).

6.5 Push Notifications

You can manage push notification preferences in the app settings or through your device settings.

6.6 Marketing Communications

You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting support.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• TLS/SSL encryption for all data in transit.
• Encrypted database storage for sensitive information.
• Bcrypt password hashing (we never store plaintext passwords).
• Session-based authentication with secure, HTTP-only cookies.
• Rate limiting on authentication and critical API endpoints.
• Regular security audits and monitoring.

While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

WAVO is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You may opt out of the "sale" of your personal information. WAVO does not sell personal information as defined by the CCPA.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@gowavo.com.

10. International Users

WAVO is operated from the United States. If you access the Platform from outside the United States, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction.

11. AI and Automated Decision-Making

WAVO uses AI-powered features including:

• Vehicle Diagnostics: AI analysis of vehicle symptoms to provide preliminary assessments. These are informational only and do not replace professional diagnosis.
• Customer Support: AI-powered chat assistance for common questions.
• Photo Analysis: AI-assisted review of vehicle photos for diagnostic purposes.

AI inputs are sanitized to prevent misuse. No fully automated decisions are made that would have significant legal effects on users without human review.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app, by email, or by posting the updated policy with a new effective date. Your continued use of the Platform after changes constitutes acceptance.

13. Contact Us

For privacy-related questions, data requests, or concerns:

• Email: support@gowavo.com
• Company: Pitstop Technologies Inc.
• Website: gowavo.com