Privacy Policy

1. Information we collect

Account information: your name, email, and password (stored securely, hashed — we never see it in plain text) when you sign up.

Business data you provide: your business details, employee records, job and customer records (including your customers' names, contact details, addresses, and vehicle information), and invoices you create.

Billing information: subscription and payment details are handled directly by our payment processor, Stripe — we don't store your card details ourselves.

2. How we use it

We use this information to operate the Service: authenticate you, run the features you use (scheduling, invoicing, employee assignment, calendar), send emails you or your customers request (like invoice reminders or account invites), process billing, and improve the product. We don't sell your data or your customers' data.

3. Who we share it with

We rely on a small number of service providers to run DetailFlow:

• Supabase — database hosting and authentication.
• Stripe — subscription billing and payment processing.
• Resend — transactional email delivery (account, invite, invoice, and password reset emails).
• Twilio — SMS delivery, only if you choose to text an invoice to a customer.
• Vercel — application hosting.

These providers only receive the data needed to perform their function, and are bound by their own privacy and security terms. We don't share data with anyone else except when required by law.

4. Your customers' data

If you're a DetailFlow subscriber, you control the customer data you enter — you're the data controller, and DetailFlow acts as a processor on your behalf. It's your responsibility to have a lawful basis (e.g., your customer's consent or an existing business relationship) for storing their information.

5. Data security

Data is stored with row-level security so each business can only access its own records, encrypted in transit (HTTPS) and at rest by our infrastructure providers. No system is 100% secure, but we take reasonable steps to protect your data.

6. Data retention

We keep your data for as long as your account is active. If you close your account, we delete your data within a reasonable period, except records we're legally required to retain (e.g., billing history).

7. Your rights

You can access, correct, export, or delete your account data at any time from within the app, or by contacting us. If you're in a jurisdiction with statutory data rights (e.g., GDPR, CCPA), you can also exercise those rights by contacting us directly.

8. Cookies

We use essential cookies to keep you signed in and to keep the app working correctly. We don't use advertising or tracking cookies.

9. Children's privacy

DetailFlow isn't directed at children, and we don't knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll let you know before they take effect.

11. Contact

Questions about this policy, or want to exercise a data right? Reach us at rodriguezjaxon9@gmail.com. See also our Terms of Service.