Privacy Policy

1. Introduction

Dalitek Consulting Services LLC ("Company," "we," "us," or "our"), operating as DetailFlow, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DetailFlow platform ("Platform"), including our website at detailflowpro.com and all associated subdomains.

By using the Platform, you consent to the data practices described in this Policy. If you do not agree, please do not use the Platform. This Policy is incorporated into our Terms of Service.

2. Information We Collect

2.1 Information you provide

• Detailers: business name, owner name, email address, password (stored as a cryptographic hash — we never store plaintext passwords), phone number, ZIP code, billing information, identity verification data (processed by Stripe), and SMS notification preferences.
• Customers: name, email address, mobile phone number, service address and location, vehicle information, booking preferences, and optional photos or notes submitted with a booking.

2.2 Information collected automatically

• Log and device data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and device identifiers.
• Usage data: booking activity, feature interactions, login sessions, and navigation patterns within the Platform.
• Error and performance data: application errors, performance metrics, and diagnostic information collected through our error monitoring service (Sentry) to identify and fix technical issues.

2.3 Information from third parties

We may receive limited information from third-party services we integrate with, such as payment confirmation status from Stripe or delivery status from our messaging providers. We do not purchase personal data from data brokers.

3. How We Use Your Information

We use your information to:

• Operate, maintain, and improve the DetailFlow platform
• Process payments securely via Stripe Connect
• Send booking confirmations, reminders, and account notifications by email
• Send transactional SMS through our DetailFlow Transactional Messaging program (see Section 6)
• Verify Detailer identity as required for platform activation
• Provide customer support and respond to inquiries
• Monitor and analyze usage trends to improve user experience
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with legal obligations, enforce our Terms, and protect our rights

We do not use your information for automated decision-making or profiling that produces legal effects or similarly significant effects on you.

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security (RLS) policies enforced at the database layer to ensure strict tenant isolation — each Detailer's data is logically separated and inaccessible to other Detailers. We use industry-standard encryption in transit (TLS 1.2+) and encryption at rest for stored data.

Payment card data is handled exclusively by Stripe, a PCI DSS Level 1 certified payment processor. We never receive, transmit, or store full payment card numbers.

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Customer Data and Data Controllership

Detailers on the Platform act as the data controller for their customer booking information. DetailFlow acts as a data processor on behalf of the Detailer. Detailers are responsible for:

• Ensuring their customers are informed about how their data is used
• Obtaining any required consents for data collection
• Responding to customer data access or deletion requests related to their business
• Using customer data only for purposes consistent with our Terms of Service

DetailFlow provides customer-facing disclosures on the booking flow and these policies to support Detailers in meeting their obligations.

6. SMS and Mobile Numbers

When you provide a mobile number (as a Customer at booking or as a Detailer in Settings), we may use it to send transactional text messages as described in our Terms of Service (Section 11).

Message frequency varies by booking and account activity. Message and data rates may apply. Carriers are not responsible for delayed or undelivered messages.

7. Third-Party Services

We use the following third-party services to operate the Platform:

Each provider receives only the minimum data necessary to perform its function. Their use of data is governed by their respective privacy policies. We do not authorize any provider to use your data for purposes unrelated to our Platform.

8. Data Retention

We retain your information according to the following schedule:

• Active accounts: Data is retained while your subscription is active or as needed to provide services.
• After account termination: Personal data is deleted or anonymized within 90 days, except where longer retention is required.
• Financial records: Transaction and billing data may be retained for up to 7 years as required for tax compliance and financial record-keeping.
• Legal holds: Data subject to a legal hold, investigation, or dispute resolution is retained until the matter is resolved.
• Log data: Server logs and error reports are retained for up to 90 days for security monitoring and debugging purposes.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Opt-out of sale: We do not sell your personal information. If you believe your data has been shared in a way that constitutes a "sale" under applicable law, contact us.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact Support@dalitek.us. We will respond to verified requests within 45 days. We may request additional information to verify your identity before processing your request.

9.1 California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.

9.2 Other state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Contact us to learn how these laws apply to your data.

10. Cookies and Tracking Technologies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Specifically:

• Authentication cookies: Maintain your logged-in session. These are strictly necessary and cannot be disabled without losing access to authenticated features.
• Security cookies: Used by Cloudflare Turnstile for bot protection during specific interactions (e.g., form submissions).

We do not honor "Do Not Track" (DNT) browser signals because we do not engage in cross-site tracking. Our cookie practices are the same regardless of DNT settings.

11. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at Support@dalitek.us, and we will promptly delete such information.

12. International Data

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfer and processing.

13. Security Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users via email and/or in-app notification as promptly as practicable and in accordance with applicable state and federal breach notification laws. We will also notify relevant authorities as required by law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance via email to the address associated with your account and/or through a notice on the Platform. The "Last updated" date at the top of this page indicates the most recent revision.

Continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Policy.

15. Contact

For privacy-related questions, data requests, or concerns, contact: