Privacy policy

1. If you're a detailer's customer

When you use a detailer's booking page, you're contacting that detailing business, not DetailFlow. The business decides what to do with your request and your details; DetailFlow stores and processes them on the business's behalf so it can answer you.

What we collect from the booking page: your name, mobile number, the address where the car will be, and, if you choose to give them, your email, vehicle and notes. We also record the service and time you asked for.

What the business may add later: quotes, appointments, job notes, invoices and payments it records about the work it does for you.

What we don't collect: we don't take payment card numbers, we don't use advertising or tracking cookies on booking pages, and we don't store your internet (IP) address with your request. To stop floods of fake requests, we turn your internet address into a scrambled code that can't be turned back into the address, and keep only that code and whether the request was accepted, for 30 days.

Who sees it: the detailing business you contacted and its team. The business owner receives an email alert with your name, the service and the time you asked for.

Your choices: to see, correct or delete your details, contact the detailing business directly. Its phone number is on its booking page. If you can't reach it, email us at privacy@detailflowbook.ing and we'll pass your request on and help the business answer it.

2. If you're a business user

What we collect:

• Your account: your name, email address and password. Passwords are stored only in a scrambled one-way form that nobody, including us, can read.
• Your business: its name, contact details, hours, services and prices, and everything you and your team enter: customers, vehicles, leads, quotes, appointments, jobs, invoices and payments.
• Activity history: who changed which record and when, so owners can see what happened.
• AI feature usage: how many AI drafts were made and their cost. We don't keep the text of AI drafts.

How we use it: to run DetailFlow for you, keep your account secure, send you sign-in emails and booking alerts, prevent abuse, and fix problems. We don't sell your data or your customers' data, and we don't share it for advertising.

Who on your team sees what: only active members of your business can see its records. Owners see everything; members can't see owner-only settings or AI costs.

3. Companies that help us run DetailFlow

We use these service providers. Each receives only what it needs to do its job:

• Supabase

  Database and sign-in (United States, Oregon)

  Receives: All the data described above

• Vercel

  Hosts the app (United States)

  Receives: Requests passing through the app; short-lived technical logs, which may include internet addresses

• Resend

  Sends emails

  Receives: Recipients' email addresses and the email content

• Anthropic

  Writes AI drafts when a business user asks for one

  Receives: Only the facts needed for that draft (for example a customer's first name, a service, a date and an amount), never notes, full names, phone numbers or email addresses

We may also share information if the law requires it, to protect people's safety, or as part of a sale or transfer of DetailFlow, in which case this policy would continue to apply to it.

4. Cookies

DetailFlow uses only the cookies needed to keep business users signed in. We don't use analytics, advertising or tracking cookies. Because we don't track you across websites, we don't change anything in response to a browser's “Do Not Track” signal.

5. How long we keep data

• While a business uses DetailFlow, its records are kept until the business changes or archives them.
• When a business closes its account, everything is hidden at once and permanently deleted after 30 days (it can be reopened during those 30 days).
• Booking-page abuse notes and email-alert records are deleted after 30 days.
• Backups may hold deleted data for up to 7 more days.
• A personal account can be deleted on request (see section 7).

6. Security

Each business's records are walled off from every other business by the database itself, and that separation is checked by automated tests. All connections use encryption (HTTPS). No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

7. Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, or to have it deleted. Business users can download all their business's records at any time (Settings → Your data). To make any other request, email privacy@detailflowbook.ing from the address on your account. We'll confirm it's you and answer within 45 days. We won't treat you differently for making a request.

Customers of a detailing business: see section 1.

8. Children

DetailFlow is for businesses and isn't meant for anyone under 16. We don't knowingly collect information from children.

9. Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell business users by email or in the app before it takes effect.

10. Contact