Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Detailers: business name, email, password (hashed), phone number, ZIP code, billing and identity verification data, and SMS notification preferences.
• Customers: name, email, mobile phone number, service address, booking details, and optional photos or videos uploaded with a booking request.
• Usage data: booking activity, login sessions, and platform interactions.

2. How We Use Your Information

We use your information to:

• Operate and improve the DetailFlow platform
• Process payments securely via Stripe
• Send booking confirmations, reminders, and account notifications by email
• Send transactional SMS through our DetailFlow Transactional Messaging program (see Section 5)
• Verify Detailer identity as required for platform activation
• Comply with legal obligations and prevent fraud or abuse

3. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security enforced on tenant data. We use industry-standard encryption in transit (TLS) and at rest. Payment data is handled exclusively by Stripe — we never store full card numbers.

4. Customer Data

As a Detailer on the platform, you are the data controller for your customer booking information. You are responsible for ensuring your customers are informed about how their data is used. DetailFlow provides customer-facing disclosures on the booking flow and these policies to support that obligation.

5. SMS and Mobile Numbers

When you provide a mobile number (as a customer at booking or as a Detailer in Settings), we may use it to send transactional text messages described in our Terms of Service (Section 7). We do not sell or rent mobile numbers to third parties for their marketing purposes.

Opt-out: Reply STOP to any SMS to unsubscribe from future texts from that sender number. Reply HELP for assistance, or email legal@dalitek.com.

Sharing for delivery: To deliver SMS, we share the recipient phone number and message content with Twilio, our messaging provider. Twilio processes data according to its own privacy policy and applicable law. We do not authorize Twilio to use your number for unrelated marketing.

Message frequency varies by booking and account activity. Message and data rates may apply.

6. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing and identity verification
• Supabase — Database and authentication
• Vercel — Application hosting and edge delivery
• Resend — Transactional email delivery
• Twilio — Transactional SMS delivery
• Cloudflare — Bot protection (Turnstile)

Each provider receives only the data necessary to perform its function. Their use of data is governed by their respective privacy policies.

7. Data Retention

We retain account data while your subscription is active or as needed to provide services. Upon account termination, we delete or anonymize personal data within 30 days, except where retention is required by law or for legitimate purposes such as financial record-keeping or dispute resolution.

8. Your Rights

You may access, correct, or request deletion of your personal data. To exercise these rights, contact legal@dalitek.com. California and other state privacy laws may provide additional rights; contact us to learn more.

9. Cookies

We use essential session cookies required for authentication. We do not use advertising or tracking cookies. Disabling cookies may affect platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance of the updated Policy.

11. Contact

Dalitek Consulting Services LLC · DetailFlow
Privacy inquiries: legal@dalitek.com