Privacy Policy

This Privacy Policy describes how Detailerz ("Detailerz," "we," "us," or "our") collects, uses, and shares information through the Detailerz scheduling and business-management platform (the "Platform"). It applies to the businesses that sign up for an account ("Organizations"), the employees and admins Organizations invite to use the Platform, and the customers Organizations serve. It's a companion to our Terms of Service, not a replacement for it.

1. Information you provide directly. When you sign up, we collect your name, email address, and business name. Depending on the permissions requested during sign-in, signing in or signing up with Google may give us basic account information such as your name, email address, and profile picture. We do not request access to your Google Calendar, Drive, or any other Google service through this sign-in, and would only do so in the future for a specific feature that needs it, disclosed at the time. If you use a password instead, we store it in hashed form and never see or store the plain-text password itself. Once you're using the Platform, you and your team may enter customer names, addresses, phone numbers, and email addresses; job and service details; pricing and payment records; employee and payroll information; expense records and photos of receipts; and any other information your business chooses to store in the Platform.
2. Organization Data vs. account and technical data. It's worth separating two categories this Policy refers to throughout. "Organization Data" — customer names and contact information, job and service records, employee and payroll information, expenses, and similar records your business enters or generates through the Platform — is your business's data, described further in "Organization responsibility" and "Your choices and rights" below. "Account and technical data" is information Detailerz itself collects to run the Platform: sign-up and account information, subscription and billing records, device and log information, and security records. We process Organization Data on your Organization's behalf to provide the Platform; account and technical data is ours in the more ordinary sense of a service provider's own records about your account.
3. Location and mileage data. If your Organization enables mileage or trip tracking for an employee, the Platform records that employee's device location while a trip is actively being tracked — from when they start it to when they end it — to calculate distance and route; it does not track location in the background outside an active trip. A completed trip is stored as a historical record (origin, destination, route, distance, and date) tied to the employee who logged it, for as long as the underlying mileage data is retained. That record is visible to your Organization's admins, the same as any other business record on the Platform (expenses, job history, and the like) — it is not visible to other Organizations, and Detailerz does not use it for anything beyond providing the mileage-tracking feature itself. The Platform also uses a mapping provider to convert addresses (yours and your customers') into map coordinates so jobs and bookings can be shown on a map and matched to service areas.
4. Information collected automatically. Like most web applications, we automatically log some technical information when you use the Platform: IP address, browser and device type, pages visited, and timestamps. We use cookies and similar technology to keep you signed in, remember your preferences (such as light/dark theme), and keep the Platform secure. We do not use cookies to track you across other websites, and we do not run third-party advertising trackers on the Platform.
5. How we use information. We use the information described above to: operate, maintain, and improve the Platform; authenticate you and keep your account secure; provide the features your Organization uses, such as scheduling, invoicing, payroll calculations, mileage tracking, and automated customer texting; process payments through our payment partners; send you service-related communications (for example, a booking confirmation or a password reset); and, in aggregated or de-identified form that no longer identifies you or your customers, understand trends across Organizations so we can improve the product. We do not sell personal information, and we do not use your customer list to market to your customers on behalf of anyone other than you.
6. AI-powered features. Certain features, such as scanning a photo of a receipt to extract the amount, vendor, and date, use a third-party AI service to process the image or text you provide, which necessarily involves sending that content to the AI provider to generate the result shown back to you. You should still verify the accuracy of anything an AI feature produces before relying on it, as described in our Terms of Service, and should avoid uploading information beyond what a given AI feature actually needs (for example, a receipt photo rather than an unrelated document) to keep what's shared with the provider to what's necessary.
7. Payment and billing information. Detailerz does not itself receive or store full payment-card numbers. There are two separate payment relationships on the Platform, and it's worth being clear about which is which. Detailerz's own subscription billing — the fee your Organization pays Detailerz for its plan — is handled through our payment processor, Stripe, under Stripe's own privacy policy. Separately, your Organization's own customers pay your Organization for detailing services through whichever processor you've connected (currently Square or Stripe) — Detailerz is not a party to that payment and does not control how your processor handles your customers' payment data, though card details generally reach the processor directly rather than passing through or being stored on the Platform.
8. SMS and text messaging. Where the Platform sends text messages — automated appointment reminders, or messages an admin sends through the in-app inbox — customer and employee phone numbers and the content of those messages are processed by our messaging provider, Twilio, solely to deliver them. A recipient can opt out of automated messages at any time (typically by replying STOP), and doing so is honored going forward. As explained in our Terms of Service, your Organization — not Detailerz — is responsible for having a lawful basis and any required consent to text a given recipient; this section is about how the message data itself is processed, not about who's responsible for deciding to send it.
9. How we share information. We share information with the third-party service providers that make the Platform work, each of which processes data under its own privacy policy: Supabase (database and authentication), Netlify (application hosting), Google (sign-in, and mapping/geocoding for addresses), Square and Stripe (payment processing), Twilio (SMS text messaging), and an AI provider used for receipt-scanning and similar assistive features. Sharing information with these providers is how the Platform operates, not a sale of personal information — we do not sell personal information, and giving a service provider what it needs to do its job on our behalf isn't what that phrase refers to. We do not share your Organization's data with other Organizations on the Platform. We may also disclose information if required by law, to protect the rights, property, or safety of Detailerz or others, or in connection with a merger, acquisition, or sale of assets — in which case this Privacy Policy would continue to apply to your information under the new ownership.
10. Organization responsibility. Organizations are responsible for having the appropriate rights, permissions, notices, and legal basis needed to collect and provide personal information to Detailerz for processing through the Platform — customer and employee information a business enters is information the business chose to collect, and Detailerz's role is to process it on that business's behalf to provide the Platform's features. Where you're an employee or a customer of an Organization using the Platform rather than the Organization itself, the Organization is the one that controls the data it entered about you.
11. Data retention. We retain an Organization's data for as long as the account is active. If an Organization cancels its subscription or its free trial lapses, that data is retained for the 30-day Retention Window described in our Terms of Service, during which the Organization can resubscribe or request an export. After the Retention Window, we may delete the data, and we may also retain limited information beyond it as necessary to comply with legal obligations, resolve disputes, enforce our agreements, prevent fraud, or maintain legitimate business records — the same grounds described in the Terms. If you'd like your Organization's data deleted sooner than that, contact us using the information below and we'll address the request.
12. Data security. We use reasonable administrative, technical, and physical safeguards designed to protect the information stored on the Platform. No system is completely secure, however, and we can't guarantee that unauthorized access, loss, or disclosure will never occur. See the "Data security" and "Limitation of liability" sections of our Terms of Service for how this applies contractually. If we determine that a security incident requires notification under applicable law, we will provide notice as required by that law.
13. Your choices and rights. If you're an employee or customer of an Organization using the Platform rather than the Organization itself, the Organization controls the data it has entered about you and is the right first point of contact for a request to access, correct, or delete it. You can also contact us directly using the information below, and we'll route your request appropriately. If you signed up using Google, you can revoke the Platform's access to your Google account at any time from your Google Account's security settings; doing so will prevent you from signing in with Google going forward.
14. Children's privacy. The Platform is intended for use by businesses and by adults acting on behalf of a business. Detailerz does not knowingly collect personal information directly from children; this doesn't limit an Organization's own ability to enter information about a minor (for example, as a customer's dependent or vehicle passenger) in the ordinary course of running its business.
15. Changes to this policy. We may update this Privacy Policy from time to time. If we make material changes, we'll notify account holders by email. Continued use of the Platform after such notice constitutes acceptance of the updated policy.
16. Contact us. Questions about this Privacy Policy, or a request regarding your information, can be sent to whynotdetailco@gmail.com.

— End of Privacy Policy —