Privacy Policy

1. Information We Collect

1.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email, phone number, password	Account creation, authentication, communication
Vehicle Information	Year, make, model, VIN, mileage	Service matching, diagnostics, repair history
Payment Information	Credit/debit card details (processed by Stripe)	Payment processing
Service Details	Issue descriptions, photos of vehicle issues	AI diagnostics, mechanic matching, service records
Communications	Chat messages, support inquiries	Service coordination, support, dispute resolution, fraud prevention, and policy enforcement
Referral & Promotional Data	Referral codes shared or used, promotional credits applied	Administering referrals and promotions, abuse prevention
Voice & Video Recordings	Short voice memos and video clips attached to chat messages	Describing vehicle issues to your mechanic
Mechanic Application Data	License numbers, driver's license photos, insurance info, certifications, experience	Mechanic identity verification and approval

1.2 Information Collected Automatically

Data Type	Examples	Purpose
Device Information	Device ID, operating system, app version	App compatibility, security, analytics
Location Data	GPS coordinates (with permission)	Mechanic matching, real-time tracking, service location
Usage Data	Pages visited, features used, timestamps	Service improvement, analytics
Network Information	IP address, connection type	Security, fraud prevention, audit trails
Risk & Fraud Signals	Device and network fingerprints, cancellation and dispute history, payment outcomes, behavioral patterns	Fraud and chargeback prevention, payment-risk and deposit decisions, account scoring
Push Notification Tokens	Device push tokens	Sending service notifications

1.3 Information from Third Parties

• Social Authentication: If you sign in with Apple or Google, we receive your name and email address from those services.
• Stripe: We receive transaction status, payment confirmations, and Connect account status from our payment processor.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Match you with available mechanics based on location and service needs.
• Process payments and manage billing.
• Provide real-time service tracking and status updates.
• Power AI-assisted diagnostics and customer support.
• Send push notifications about booking status, reminders, and updates.
• Prevent fraud, resolve disputes, and maintain platform security.
• Assess fraud, chargeback, and non-payment risk, including scoring accounts and determining deposit, prepayment, or pay-on-completion eligibility.
• Monitor and scan in-app communications for safety, fraud prevention, and to enforce our Terms (including prohibitions on taking transactions off-platform).
• Generate service reports and proof-of-service documentation.
• Improve our services and develop new features.
• Comply with legal obligations and respond to lawful requests.

3. How We Share Your Information

3.1 With Mechanics / Customers

When a Booking is active, we share relevant information between Customers and Mechanics, including:

• Customer's name, vehicle details, service location, and issue description (shared with Mechanic).
• Mechanic's name, rating, profile information, and real-time location during active service (shared with Customer).

3.2 With Service Providers

Provider	Purpose	Data Shared
Stripe, Inc.	Payment processing, mechanic payouts (Connect)	Payment details, transaction data, identity verification (for mechanics)
Twilio, Inc.	Transactional SMS: one-time passcodes, booking confirmations, reminders, and mechanic-arrival alerts	Phone number, message content
Resend	Transactional email delivery (receipts, password resets, booking notifications)	Email address, name, message content
OpenAI	AI diagnostics and support chat	Vehicle details, issue descriptions (anonymized where possible). OpenAI does not retain API inputs for training under our zero-retention agreement.
Nominatim (OpenStreetMap)	Geocoding / address lookup	Location coordinates, address queries
ipapi.co and ipwho.is	Approximate IP-based geolocation fallback when GPS is unavailable or denied (web only)	Public IP address
Expo (push notifications)	Notification delivery via Apple Push Notification service and Firebase Cloud Messaging	Anonymous device push tokens, notification content
Apple and Google	App distribution, push notification delivery, optional social sign-in	Push tokens; if you use Sign in with Apple or Google: name and email only

3.3 For Legal Purposes

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of WAVO, our users, or the public.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Payment Data and PCI Compliance

We retain only:

• The last four digits of your card (for display purposes).
• Card brand (Visa, Mastercard, etc.).
• Stripe customer and payment intent identifiers (tokens, not card data).
• Transaction amounts, dates, and status.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specific retention periods include:

• Account data: Retained while your account is active and for 3 years after deletion request.
• Transaction records: Retained for 7 years for tax, legal, and dispute resolution purposes.
• Audit logs: Retained for 3 years for security and compliance.
• Chat messages: Retained for 2 years after the related booking is completed.
• Location data: Retained for the duration of the active booking and for 90 days thereafter.

6. Your Rights and Choices

6.1 Access and Portability

You may request a copy of your personal data by contacting us at support@gowavo.com.

6.2 Correction

You can update most of your account information directly through the app. For other corrections, contact support.

6.3 Account Deletion

You can permanently delete your WAVO account at any time, directly inside the app:

• In the app: open the Profile tab, choose Settings, then tap Delete Account and confirm.
• From the web: sign in at gowavo.com, open your account page, and choose Delete Account.
• By email: send a deletion request from your account email address to support@gowavo.com.

When you delete your account, your profile, vehicles, saved addresses, payment methods on file, chat history, and push tokens are removed from active systems within 30 days. We may retain a limited subset of records — completed-transaction history, tax records, fraud-prevention logs, and any data we are legally required to keep — for the retention periods listed in Section 5. We do not retain a usable copy of your active profile after deletion.

6.4 Location Permissions

You can enable or disable location sharing through your device settings. Note that disabling location may limit the functionality of certain features (e.g., mechanic matching, live tracking).

6.5 SMS / Text Messaging

When you provide a mobile phone number and opt in — either during sign-up after verifying your number or from your notification settings — you consent to receive transactional (non-marketing) text messages from WAVO at that number. Verification and account-security messages (such as one-time passcodes) may be sent as needed to operate and secure your account. These messages may include:

• Verification: one-time passcodes for sign-in and phone verification.
• Booking confirmations: notices when a booking is created, accepted, rescheduled, or cancelled.
• Reminders: upcoming appointment reminders.
• Mechanic-arrival alerts: updates when your mechanic is dispatched, en route, or arriving.

Message frequency varies based on your account activity and bookings. Message and data rates may apply, depending on your mobile carrier and plan. Consent to receive text messages is not a condition of purchasing any goods or services.

We never sell or share your mobile phone number or your SMS consent with third parties or affiliates for their own marketing or promotional purposes. Mobile information is shared only with the service providers (such as Twilio) that help us deliver these messages, and only for that purpose.

You can opt out at any time by replying STOP to any WAVO text message; we will send a single confirmation and stop sending texts. Reply START to opt back in, or HELP for help. Carriers are not liable for delayed or undelivered messages.

6.6 Push Notifications

You can manage push notification preferences in the app settings or through your device settings.

6.7 Marketing Communications

You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting support.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• TLS/SSL encryption for all data in transit.
• Encrypted database storage for sensitive information.
• Bcrypt password hashing (we never store plaintext passwords).
• Session-based authentication with secure, HTTP-only cookies.
• Rate limiting on authentication and critical API endpoints.
• Regular security audits and monitoring.

While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

WAVO is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You may opt out of the "sale" of your personal information. WAVO does not sell personal information as defined by the CCPA.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@gowavo.com.

10. International Users

WAVO is operated from the United States. If you access the Platform from outside the United States, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction.

11. AI and Automated Decision-Making

WAVO uses AI-powered features including:

• Vehicle Diagnostics: AI analysis of vehicle symptoms to provide preliminary assessments. These are informational only and do not replace professional diagnosis.
• Customer Support: AI-powered chat assistance for common questions.
• Photo Analysis: AI-assisted review of vehicle photos for diagnostic purposes.
• Risk and Eligibility Scoring: We use automated signals to assess fraud and payment risk and to determine payment terms such as deposit amount, prepayment, or pay-on-completion eligibility. We also scan in-app communications to detect fraud, safety issues, and attempts to take transactions off-platform.

AI inputs are sanitized to prevent misuse. Automated risk and eligibility determinations (such as deposit or prepayment requirements) may affect the payment terms offered to you; you may contact us at support@gowavo.com to request human review of any such determination. We do not make fully automated decisions that produce legal or similarly significant effects without the ability to obtain human review.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app, by email, or by posting the updated policy with a new effective date. Your continued use of the Platform after changes constitutes acceptance.

13. Contact Us

For privacy-related questions, data requests, or concerns:

• Email: support@gowavo.com
• Company: Pitstop Technologies Inc.
• Mailing Address: 2810 N Church St, No. 582736, Wilmington, DE 19802, United States
• Website: gowavo.com