Privacy Policy

1. Who we are

DetailCRM (“we”, “us”) is operated by La'anui Nihipali. Contact us at imlaanui@gmail.com.

DetailCRM is software for mobile car-detailing businesses. There are two groups of people whose information we handle:

• Business owners who create an account and run their business in DetailCRM.
• Customers of those businesses who book a service, or receive or answer a quote, through a business’s booking page or quote link.

For a business’s customer information, the business decides why and how it is used (it is the “controller” or “business” under privacy laws) and we process it on the business’s behalf (as a “processor” or “service provider”). If you are a customer and want to see, correct or delete your information, please contact the business you booked with first. You can also contact us and we will help pass your request along.

2. Information we collect

From business owners:

• Account details: email address and password (the password is handled by our authentication provider and is not readable by us).
• Business profile: business name, your name, phone number, service area, working hours, booking link name, optional review link, optional social media links, optional logo and colors, and any cancellation policy you write.
• Customer and job records you enter: customer names, phone numbers, email addresses, addresses, notes, vehicle details (year, make, model, color, license plate), services and prices, appointment times, quotes, payment method preferences and notes, follow-up status, and before/after photos of vehicles.

From customers using a booking page or quote link: name, phone number, email address (optional), service address, vehicle details, the service and time you choose, and any notes you type. If you accept or decline a quote, we record that response.

Technical data. Our hosting and database providers may automatically log basic technical data such as IP address, browser type and request time for security and reliability. We do not run advertising or analytics trackers (see our Cookie Policy).

Please do not enter full payment card numbers, government ID numbers, or other sensitive information into notes fields. DetailCRM is not built to store them.

Demo mode. If the app is running without an account (“demo mode”), everything you enter stays in your own browser storage. It is not sent to us.

3. How we use information

• To provide the service: sign you in, show your calendar and customers, take bookings, and send quote links.
• To keep the service secure, prevent abuse, and fix problems.
• To answer support and privacy requests.
• To meet legal obligations.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it to train AI models. We do not send marketing email unless you ask for it.

Text messages and calls. DetailCRM does not send text messages for you. When a business texts or calls a customer, it does so from its own phone or messaging app. Businesses are responsible for having permission to contact their customers.

4. Legal bases (for people in the EEA, UK and Switzerland)

• Contract: to provide the service to business owners.
• Legitimate interests: security, fraud prevention and improving reliability, balanced against your rights.
• Consent: where a booking form asks for it, for example to be contacted about a booking. You can withdraw consent at any time by contacting the business or us.
• Legal obligation: where the law requires us to keep or disclose information.

5. Who we share information with

• The business you book with. Your booking details go to that business.
• Service providers that host or run the service for us: our database, authentication and file storage provider (Supabase), and our website hosting provider (Vercel Inc.). They may only use the data to provide their services to us.
• Legal and safety. If required by law, or to protect rights, safety and security.
• Business changes. If we are involved in a merger, sale or similar transaction, information may transfer, and we will tell you if this changes how it is handled.

When you use links to Instagram, Facebook, TikTok, Google or Apple Maps that a business shows, you leave DetailCRM and those companies’ own privacy policies apply.

6. How long we keep information

Business owners can delete records they create at any time. We keep account and business data while the account is open. After an account is closed, we delete or anonymize its data within a reasonable period, except where we must keep it for legal reasons or it remains in routine backups until they expire.

7. Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy (business owners can also download their data from Settings);
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, and withdraw consent;
• data portability; and
• not be discriminated against for exercising these rights.

California. In the last 12 months we have not sold or “shared” (as defined by the CCPA/CPRA) personal information, and we do not use or disclose sensitive personal information for purposes that require a right to limit. California residents can exercise the rights above by contacting us or the business they booked with. We will respond within 45 days.

EEA, UK and Switzerland. You also have the right to complain to your local data protection authority.

To make a request, email imlaanui@gmail.com. We may need to verify your identity first. If you use an authorized agent, we may ask for proof of authority.

8. Security

We use reasonable technical and organizational measures, including the security features of our hosting and database providers, to protect information. No online service can guarantee absolute security. If a breach affects your information, we will notify you and regulators as the law requires.

9. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

10. Children

DetailCRM is for businesses and is not directed to children. You must be at least 18 to create an account. We do not knowingly collect personal information from children under 13 (or under 16 where local law sets that age). If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. If we make a material change we will post the new version here with a new effective date, and give more notice where the law requires.

12. Contact

La'anui Nihipali · imlaanui@gmail.com