Privacy Policy — HydroShine Jammu

📅 Last updated: June 2026 · Version 1.0

1. Who We Are

HydroShine Jammu is a doorstep vehicle cleaning and detailing service operating in Jammu, Jammu & Kashmir, India. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or services.

Contact: +91 94697 93349 · carwashing.pages.dev

2. What Data We Collect

Data Type	What We Collect	Why
Identity	Full name	To address you and confirm bookings
Contact	Phone number, email address	Booking confirmation, OTP verification, password reset
Location	Service address (entered by you)	To reach your vehicle for the service
Booking	Service type, date, time, notes	To fulfil your booking
Account	Encrypted password	Account security (never stored in plain text)

We do NOT collect payment card details. All payments are made directly in person after service.

3. How We Use Your Data

To confirm and manage your bookings
To send OTP verification emails during registration
To send password reset emails when requested
To contact you for booking confirmations via WhatsApp or call
To improve our service quality based on booking history
To detect and prevent fraud or abuse of our platform

We do NOT use your data for advertising. We do NOT sell or rent your data to any third party. Ever.

4. How We Store & Protect Your Data

Your data is stored in a secured Cloudflare D1 database hosted in Cloudflare's infrastructure.
Passwords are never stored in plain text — they are hashed using SHA-256 with a unique random salt per user.
All communication between your browser and our server is encrypted via HTTPS/TLS.
Admin access to your data is protected by a secret key and brute-force lockout protection.
Session tokens expire automatically and are invalidated on logout.

5. Third-Party Services

We use the following third-party services:

Cloudflare Workers & D1 — for hosting our backend and database. Cloudflare Privacy Policy
Cloudflare Pages — for hosting this website.
Resend — for sending OTP and password reset emails only. Resend Privacy Policy

These services have their own privacy policies. We only share the minimum data necessary for each service to function.

6. Your Rights

👁️

Access

View all data we hold about you

✏️

Correction

Update your name or email anytime in Account settings

🗑️

Deletion

Request complete account and data deletion

📦

Portability

Request a copy of your data in readable format

To exercise any of these rights, contact us on WhatsApp at +91 94697 93349. We will respond within 7 business days.

7. Data Retention

Account data is retained as long as your account is active.
Booking records are retained for up to 2 years for service history.
OTP records are deleted immediately after use or expiry (10 minutes).
Password reset tokens are deleted immediately after use or expiry (1 hour).
Upon account deletion, all personal data is permanently removed within 30 days.

8. Cookies

Our website does not use tracking cookies. We use browser localStorage and sessionStorage to store your login session locally on your device only. This data never leaves your device except when making API calls to our backend.

9. Children's Privacy

Our services are not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will update the "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

Questions about your privacy or data? We're transparent and happy to help. Contact us anytime.

💬 Chat on WhatsApp