Privacy Policy

1. Introduction

Dalitek Consulting Services LLC ("Company," "we," "us," or "our"), operating as DetailFlowPro, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DetailFlowPro platform ("Platform"), including our website at detailflowpro.com and all associated subdomains.

By using the Platform, you consent to the data practices described in this Policy. If you do not agree, please do not use the Platform. This Policy is incorporated into our Terms of Service.

2. Information We Collect

2.1 Information you provide

• Detailers: business name, owner name, email address, password (stored as a cryptographic hash — we never store plaintext passwords), phone number, ZIP code, billing information, and SMS notification preferences.
• Customers: name, email address, mobile phone number, service address and location, vehicle information, booking preferences, and optional photos or notes submitted with a booking.
• Chat messages: if you use optional AI chat on a marketing or booking page, the text you type in that conversation.

2.2 Information collected automatically

• Log and device data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and device identifiers.
• Usage data: booking activity, feature interactions, login sessions, and navigation patterns within the Platform.
• Error and performance data: application errors, performance metrics, and diagnostic information collected through our error monitoring service to identify and fix technical issues.

2.3 Information from third parties

We may receive limited information from third-party services we integrate with, such as payment confirmation status from Stripe or delivery status from our messaging providers. We do not purchase personal data from data brokers.

3. How We Use Your Information

We use your information to:

• Operate, maintain, and improve the DetailFlowPro platform
• Process payments securely via Stripe Connect
• Send booking confirmations, appointment reminders, and account notifications by email
• Send transactional SMS through our DetailFlowPro Transactional Messaging program when SMS is enabled (see Section 7)
• Provide optional AI chat answers about published services, pricing, and the Platform (see Section 4)
• Activate Detailer accounts and provision platform access
• Provide customer support and respond to inquiries
• Monitor and analyze usage trends to improve user experience
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with legal obligations, enforce our Terms, and protect our rights

We do not use your information for automated decision-making or profiling that produces legal effects or similarly significant effects on you. Optional AI chat does not create, cancel, or charge bookings, and it does not replace a Detailer or a human platform operator.

4. Artificial Intelligence

DetailFlowPro may offer optional AI-assisted chat: a platform assistant on marketing pages, and a storefront assistant on a Detailer's booking page when that Detailer's plan includes the feature. In-app help articles for signed-in Detailers are written documentation, not AI-generated answers.

AI chat may help you:

• Understand published services, packages, add-ons, and prices
• Learn how booking, payments, or the Platform generally works
• Find signup, demo, or support paths

AI chat does not:

• Book, confirm, cancel, or reschedule an appointment
• Charge a card, issue a refund, or change a subscription
• Change account settings, staff access, or security settings
• Replace the Detailer who performs the service, or the human operators who run the Platform
• Guarantee that answers are complete or error-free

To generate a reply, we may send the conversation text and limited published business information (such as the business name and service catalog) to our AI service provider. We do not sell chat contents, and we do not use them for unrelated advertising. Do not enter payment card numbers, passwords, or government ID numbers in chat. We do not use customer booking records as hidden training input beyond this stated product purpose.

5. Data Storage and Security

Your data is stored securely using a managed cloud database with row-level security (RLS) policies enforced at the database layer to ensure strict tenant isolation — each Detailer's data is logically separated and inaccessible to other Detailers. We use industry-standard encryption in transit (TLS 1.2+) and encryption at rest for stored data.

Payment card data is handled exclusively by Stripe, a PCI DSS Level 1 certified payment processor. We never receive, transmit, or store full payment card numbers. Customer payments for bookings are processed through Stripe Checkout and, for Detailers, Stripe Connect connected accounts. Public bookings remain pending until card payment succeeds.

Detailer and platform-operator accounts may enable two-factor authentication (TOTP). When a factor is enrolled, that extra step is required to sign in. Super Admin pages, including Reminder Recovery, are internal operator tools for authorized platform staff — they are not a public Detailer feature.

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Customer Data and Data Controllership

Detailers on the Platform act as the data controller for their customer booking information. DetailFlowPro acts as a data processor on behalf of the Detailer. Detailers are responsible for:

• Ensuring their customers are informed about how their data is used
• Obtaining any required consents for data collection
• Responding to customer data access or deletion requests related to their business
• Using customer data only for purposes consistent with our Terms of Service

DetailFlowPro provides customer-facing disclosures on the booking flow and these policies to support Detailers in meeting their obligations.

7. Reminders, SMS, and Mobile Numbers

We may send appointment reminders by email, and by SMS when a valid mobile number is provided and SMS is enabled for that business. The Platform aims to send one reminder about a day before the appointment. There is no guaranteed same-day second reminder. A booking created less than about 24 hours before the appointment may not receive a reminder.

When you provide a mobile number (as a Customer at booking or as a Detailer in Settings), we may use it to send transactional text messages as described in our Terms of Service (Section 11).

A messaging provider may report that it accepted a message. That is not the same as confirmed delivery to your device. Carriers, devices, and networks can delay or drop messages. If a reminder is held after a failed or uncertain send, authorized platform operators may inspect the record and, in limited cases, authorize a controlled retry. Reminder Recovery is an internal operator tool, not a public Detailer dashboard feature.

Message frequency varies by booking and account activity. Message and data rates may apply. Carriers are not responsible for delayed or undelivered messages.

8. Service Providers

To operate and deliver the Platform, we work with carefully selected third-party service providers in the areas of payment processing, cloud infrastructure, database storage, transactional email, transactional SMS, optional AI chat, bot and abuse protection, and application monitoring.

Each service provider receives only the minimum data necessary to perform its function and is contractually prohibited from using your data for purposes unrelated to the services they provide to us. We do not sell or share your data with service providers for their own marketing or advertising purposes.

9. Data Retention

We retain your information according to the following schedule:

• Active accounts: Data is retained while your subscription is active or as needed to provide services.
• After account termination: Personal data is deleted or anonymized within 90 days, except where longer retention is required.
• Financial records: Transaction and billing data may be retained for up to 7 years as required for tax compliance and financial record-keeping.
• Legal holds: Data subject to a legal hold, investigation, or dispute resolution is retained until the matter is resolved.
• Log data: Server logs and error reports are retained for up to 90 days for security monitoring and debugging purposes.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Opt-out of sale: We do not sell your personal information. If you believe your data has been shared in a way that constitutes a "sale" under applicable law, contact us.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact support@dalitek.us. We will respond to verified requests within 45 days. We may request additional information to verify your identity before processing your request.

10.1 California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.

10.2 Other state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Contact us to learn how these laws apply to your data.

11. Cookies and Tracking Technologies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Specifically:

• Authentication cookies: Maintain your logged-in session. These are strictly necessary and cannot be disabled without losing access to authenticated features.
• Security cookies: Used by our bot protection service during specific interactions (e.g., form submissions) to distinguish human users from automated bots.

We do not honor "Do Not Track" (DNT) browser signals because we do not engage in cross-site tracking. Our cookie practices are the same regardless of DNT settings.

12. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@dalitek.us, and we will promptly delete such information.

13. International Data

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfer and processing.

14. Security Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users via email and/or in-app notification as promptly as practicable and in accordance with applicable state and federal breach notification laws. We will also notify relevant authorities as required by law.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance via email to the address associated with your account and/or through a notice on the Platform. The "Last updated" date at the top of this page indicates the most recent revision.

Continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Policy.

16. Contact

For privacy-related questions, data requests, or concerns, contact: