Privacy Policy

Our Two Roles: Businesses and Their Customers

DetailAIO handles personal information in two distinct capacities:

• For account holders and their teams (the detailing businesses that sign up for DetailAIO), we act as the data controller of the information described in this policy.
• For the customers of those businesses (for example, a vehicle owner who books an appointment with a detailing shop that uses DetailAIO), we act as a service provider or processor. The business you interacted with controls that information. If you are a customer of a business that uses DetailAIO and want to access, correct, or delete records about you, please contact that business directly; we support businesses in fulfilling those requests.

Information We Collect

The information we collect depends on how the Services are used:

• Account and business information. Name, email address, phone number, password (stored only in hashed form), business name and profile, locations, team member roles and permissions, and subscription plan details.
• Authentication information. Sign-in credentials, single sign-on identifiers (such as your Google account identifier when you sign in with Google), one-time sign-in and verification tokens, two-factor authentication enrollment (authenticator secrets are stored encrypted), passkey public keys, and recovery codes (stored only in hashed form). Passkey biometric checks (such as fingerprint or face verification) happen entirely on your device — biometric data never reaches DetailAIO.
• Customer records managed by businesses. Contact details, vehicle information (make, model, year, license plate, VIN), service addresses, appointment and service history, notes, photos, and feedback that businesses store in their workspace.
• Scheduling and operational data. Appointments, staff assignments, work timers, timesheets and leave records, catalog items (services, products, subscriptions), and inventory records.
• Payment information. Payments are processed by our payment partners (such as Stripe). DetailAIO does not store full payment card numbers; we retain payment metadata such as amounts, payment status, tips, refunds, and receipt references.
• Communications. Messages sent and received through the Services, including email, text (SMS) messages, in-app messages, call logs, and — where a business enables voice features — call recordings, voicemails, and transcriptions. Support communications with DetailAIO are also retained.
• Location information. Business locations and customer service addresses, which we convert to map coordinates through our mapping partners to power scheduling, routing, and maps.
• Usage and device information. IP address, browser and device identifiers, session information, pages and features used, and security and audit logs recording actions taken in a workspace.

Text Messages and Telephone Services

The Services allow businesses to send and receive text messages and calls with their customers, and allow DetailAIO to send service-related messages to account holders.

• Transactional messages. Text messages sent through the Services are transactional and service-related — for example appointment confirmations, reminders, schedule changes, booking links, receipts, and sign-in or verification messages. By providing a mobile number to DetailAIO or to a business that uses DetailAIO, you consent to receive these transactional messages at that number.
• Message frequency and rates. Message frequency varies based on your activity (for example, the number of appointments you book). Message and data rates may apply according to your mobile carrier plan. Carriers are not liable for delayed or undelivered messages.
• Opting out. You can opt out of text messages at any time by replying STOP to any message. Reply HELP for assistance. Opting out of texts from a business does not cancel appointments or other obligations you have with that business — contact the business directly for those.
• No third-party marketing use. Mobile phone numbers and text-messaging originator opt-in data and consent are not shared with, sold to, or transferred to any third parties or affiliates for marketing or promotional purposes. We share this information only with the telecommunications providers required to deliver the messages, and as required by law.
• Calls, recordings, and voicemail. Where a business enables telephone features, calls placed or received through the Services generate call logs, and may generate recordings, voicemails, and transcriptions that are stored in the business’s workspace. Businesses are responsible for complying with call-recording notice and consent laws that apply to them.

How We Use Information

• Provide, operate, maintain, and improve the Services;
• Authenticate users and enforce account, business, location, and role-based permissions;
• Schedule and manage appointments, staff, inventory, and business operations;
• Process payments, subscriptions, refunds, and payouts through our payment partners;
• Deliver communications — including the transactional email, text, and voice services described above;
• Power AI-assisted features (such as the Flow assistant), which process workspace data to answer questions and perform actions a user requests. Workspace data is not used to train third-party foundation models;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Comply with legal obligations and enforce our agreements.

How We Share Information

We do not sell personal information. We share information only:

• With service providers that help us run the Services under contractual confidentiality obligations — including cloud hosting and storage (Amazon Web Services), payment processing (Stripe), email delivery, telecommunications and text-messaging carriers, mapping and geocoding, and AI model providers used to power assistant features;
• Within a workspace — information in a business’s workspace is visible to that business’s team members according to the roles and permissions the business configures;
• For legal reasons — to comply with law, legal process, or enforceable government requests, or to protect the rights, safety, and property of DetailAIO, our users, or others;
• In a business transfer — if DetailAIO is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; this policy will continue to apply and we will provide notice of material changes.

Cookies and Similar Technologies

We use strictly necessary cookies and browser storage to keep you signed in, protect against cross-site request forgery, remember your device, and store preferences such as your theme. We do not use third-party advertising cookies or cross-site tracking. Blocking these cookies through your browser will prevent signing in to the Services.

Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, hashed passwords and recovery codes, encrypted two-factor authentication secrets, role-based access controls, and audit logging. We also offer two-factor authentication and passkeys, and we encourage every account to enable them. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain information for as long as needed to provide the Services, and afterwards as necessary to comply with legal obligations (for example, payment and tax records), resolve disputes, enforce agreements, and maintain security. Business workspace records are retained while the business’s account is active and are deleted or anonymized within a reasonable period after account closure, except where retention is legally required. Expired security tokens (sign-in links, verification codes, session records) are purged automatically on short schedules.

Your Choices and Rights

• Access and correction. Account holders can review and update account and business information in Settings. Team members should contact their workspace owner for changes to business records.
• Deletion. You may request deletion of your account and associated personal information by contacting us at admin@detailaio.com. Customers of a business should direct requests to that business, which controls their records.
• Communications. Opt out of text messages by replying STOP (see the text messaging section above). Transactional emails necessary to operate your account (such as security notices) cannot be opted out of while your account is active.
• Regional rights. Depending on where you live (for example, California or the European Economic Area/United Kingdom), you may have additional rights, including the right to access, correct, delete, or receive a portable copy of your personal information, and the right to lodge a complaint with your local data protection authority. We honor these requests as required by applicable law; because we do not sell or share personal information for cross-context behavioral advertising, no opt-out of sale or sharing is needed.

Children’s Privacy

The Services are intended for businesses and are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will promptly delete it.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will provide reasonable notice — such as by email or an in-app notice — before the changes take effect, and we will update the effective date above. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

Contact Us

For privacy questions or requests, contact us at admin@detailaio.com.