Revised for an individual owner operating WashCore as a sole proprietorship. The operator is Dylan Ragsdale, an Illinois sole proprietor. App implementation details and final billing terms still require verification. This is not yet an effective policy or agreement.
1. Operator and scope
WashCore is operated by Dylan Ragsdale, an individual sole proprietor doing business as WashCore in Illinois, United States. No LLC has been formed. A future LLC would be a change of operator requiring updated notices and agreements as applicable. “WashCore,” “we,” and “us” mean the individual operator, not a separate incorporated company. A business mailing address and any legally required additional contact details must be confirmed before publication. Contact: [email protected].
This revised draft covers the website, app, company and worker accounts, support, and enabled integrations. It distinguishes verified website behavior from app practices requiring confirmation. It is not yet an effective privacy notice.
2. Company accounts and workers
Company accounts may contain business and administrator contact details, identifiers, worker profiles, access roles, and business records supplied by authorized users. Actual fields and permissions require verification. Company administrators may be able to view their business’s worker records; workers should not assume their entries are private from their employer.
Businesses supplying worker or customer information must have authority and provide required notices. For company-controlled records, the business generally determines the business purpose; WashCore’s contractual processing role must be confirmed in an appropriate agreement. WashCore separately handles its own account administration, billing, security, and support activities. Workers can contact their administrator or WashCore about requests; applicable individual rights remain available.
3. Photos, receipts, OCR, and payroll
Where enabled, photos and receipts may contain faces, customer details, addresses, payment details, timestamps, and embedded location metadata. OCR may extract text from images. Submit only information needed for the business task. Avoid full card numbers, bank credentials, government identifiers, and unnecessary sensitive information. Review extracted text for errors.
WashCore tracks employee hours and calculates estimated gross pay. It does not currently issue payroll payments or file payroll taxes. Hours and estimated pay are employment and financial records. Exact stored fields, access permissions, calculations, and recipients still require project verification.
The OCR provider, cloud versus on-device processing, metadata handling, provider secondary use, and retention are unverified. No on-device-only, no-training, or automatic-redaction promise is made.
4. GPS and location
The supplied marketing website has no location-request code, and its included hosting headers disable browser geolocation on that website. These headers do not control or describe the mobile app. Hosting providers may infer approximate location from IP addresses.
WashCore stores customer and job locations. Stored addresses or job locations are distinct from collecting a worker’s device GPS. Device GPS collection is unverified. Before enabling a location feature, confirm precise versus approximate location, collection events such as clock-in or job records, foreground and background behavior, purpose, who can view it, and retention. This draft claims neither continuous tracking nor absence of tracking.
Device permissions can control access to device location; denying permission may affect a feature that needs it. Changing permission does not itself erase previously stored records. Businesses must provide required worker notices and obtain any legally required permissions before using location information.
5. Website, support, and technical information
The reviewed static website package uses local images, styles, and navigation scripts. It contains no analytics tags, advertising pixels, app login, checkout, or contact-form backend. Emailing support sends your address, message, and attachments through the email services involved. Live hosting settings have not been verified.
Hosting, network, email, and enabled app providers may process IP addresses, device or request information, timestamps, diagnostics, and security logs. Actual logs, cookies, local storage, analytics, crash reporting, and retention require review. The absence of tracking scripts in this package does not establish the behavior of app SDKs or hosting features.
6. Purposes and disclosures
Subject to verification of implemented features, information supports accounts and business workflows, storage and retrieval of records, authorized integrations, support, purchases, and service security. Before publication, map actual categories to purposes and any legally required legal bases.
Company records may be disclosed to authorized company users, necessary service providers, and third parties the business authorizes. Information may also need to be disclosed for legal obligations, fraud prevention, security, or legal claims, subject to applicable law. Any business-transfer provision requires legal review.
Sale, targeted advertising, cross-context sharing, and provider secondary use have not been audited. This draft makes no “we never sell or share data” claim. Implement and describe any required consent or opt-out mechanisms before launch.
7. Firebase and service providers
WashCore uses Firebase for authentication, cloud data storage, synchronization, and photos, as confirmed by the owner. No app project files were available for verification; the exact Firebase services remain unverified. If Authentication, Firestore or Realtime Database, Cloud Storage, Functions, Analytics, or Crashlytics are enabled, document their actual data flows, purposes, regions, settings, access rules, and deletion processes. These services are not interchangeable.
Google’s Firebase privacy and security documentation describes provider practices, not WashCore’s configuration or compliance. Do not assume deleting a login deletes database records, images, diagnostics, or backups. Hosting, email, billing, OCR, and other providers also need a verified inventory.
8. QuickBooks connections
The existing website labels QuickBooks integration in development. QuickBooks Online is intended to remain authoritative for accounting records. Production availability, permissions, and sync behavior are unconfirmed. This draft does not represent a current transfer to Intuit.
Before offering a connection, disclose exact accounting, customer, receipt, invoice, or payroll-related data exchanged, transfer direction and frequency, authorization scopes, token handling, recipients, and disconnection controls. Only an authorized company representative should connect a business account.
Intuit provides instructions for disconnecting third-party apps. Do not treat disconnection as deletion of records already copied into either system. Contact the relevant service about retained copies. Intuit’s own terms and privacy notices apply to its services.
9. Subscriptions and payment data
Monthly in-app subscriptions with a 30-day free trial and cancellation options are planned. Billing is not finalized. The billing channel, payment provider, cancellation implementation, and trial conversion rules are unverified; no active billing flow is asserted here. The final policy must distinguish payment details collected by a provider or store from transaction identifiers, subscription status, invoices, and receipts available to WashCore. This draft asserts neither that WashCore stores card details nor that it never receives them. Do not email payment credentials.
10. Retention, access, and deletion
Retention periods and automated deletion features are unverified. The final notice must give periods or meaningful criteria for company records, photos, receipts, location events, payroll and time records, accounts, support, billing, logs, and backups. Criteria should reflect service purpose, account lifecycle, legal recordkeeping, and justified security or dispute needs.
Request access, correction, a copy, or deletion at [email protected]. Identify the relevant account or business without unnecessary sensitive details. Identity or company-authority verification may be needed. Company-managed records may require administrator coordination; statutory rights remain available. No unverified export button, response deadline, or immediate-erasure promise is made.
Removing worker access, canceling billing, deleting an account, disconnecting QuickBooks, and deleting company records are distinct actions. Copies held by an employer, accounting provider, or other recipient may need separate requests. Document lawful retention exceptions and backup delays; limit retained records to the justified purpose.
11. Security, transfers, and your rights
No system guarantees absolute security. Verify actual safeguards, access controls, processing countries, and required international-transfer arrangements before publication. No encryption specification, certification, data-residency guarantee, or GDPR, CCPA, HIPAA, or other compliance claim is made here.
Depending on applicable law, rights may include access, correction, deletion, a copy, objection or restriction, withdrawal of consent, opt-outs for specified uses, an appeal, or a regulatory complaint. Contact [email protected]. The final policy must identify applicable rights, channels, response periods, appeals, and regulators for the markets served.
12. Children, changes, and contact
WashCore is intended for business use and is not directed to children. Confirm eligibility and rules for younger workers before launch. Report concerns about improperly submitted children’s information to [email protected].
Add an effective date after resolving review items. Future revisions should show their effective date and receive legally required notice and renewed consent for material changes. Privacy questions: [email protected].