Privacy Policy

Last updated 4 October 2026 · Version 2026-10-04.2

1. Who we are

DetailersEye is operated by Veltro Labs Ltd (company number 17512136, registered office 67 Thor Drive, Bedford, MK41 0WN, United Kingdom). This policy explains how personal data is handled by DetailersEye ("we"), software that mobile car-detailing businesses use to take bookings and manage their customers. Privacy questions: privacy@detailerseye.com.

2. Who is responsible for your data

Your detailer is the data controller for the information about you as their customer: your name, contact details, address, vehicle and booking history. They decide why it is collected and how it is used. DetailersEye acts as their data processor and only processes that data on the detailer's instructions, to run the service.

DetailersEye is the controller for the detailer's own account data, described in the next section.

3. What we collect about detailers, and why

Account and business details. Your name, email, business name and profile, booking-link address, working hours, services, logo and colours, and profile photo. If you sign in with Google, we receive your name, email address, Google account ID and profile picture from Google. We use this to provide the service you signed up for. Legal basis: performance of a contract.
Sign-in security. Your password is stored only as a salted hash. We keep short-lived tokens for password resets and sessions. Legal basis: contract and our legitimate interest in keeping accounts secure.
Billing. Your plan, subscription status and renewal dates. Card details are collected and held by Stripe, not by us. Legal basis: contract and legal obligation (tax and accounting records).
Record of your agreement to our terms. Each time you accept our Terms of Service we record the version, the date and time, how you accepted, your IP address and your browser details, so we can show that you agreed if there is ever a dispute. Legal basis: legitimate interests (establishing and defending legal claims).
Service communications. Booking activity, billing, security and legal notices such as a change to our terms or to pricing. Legal basis: contract and legal obligation. These are not marketing, so they are not optional while you have an account.
Marketing and beta-feature invitations. Occasional product updates, offers and invitations to try a feature before general release. Legal basis: legitimate interests, based on our existing relationship with you. You can opt out of either, independently, at any time from Settings → Communication preferences. This never affects the service communications above.
Support, feedback and contact forms. What you send us and our replies. Legal basis: contract and legitimate interests.
Usage and activity. Last sign-in time, a record of key actions (such as bookings created, payments and cancellations) and, if you accept analytics cookies, how the product is used. Legal basis: legitimate interests (security, accountability, troubleshooting and improving the product); consent for analytics cookies.

4. What we process about a detailer's customers, and why

On the detailer's instructions, and for the purposes they decide:

Booking details. Name, email, phone, service address (including map coordinates), vehicle make, model and registration, chosen service and time. Used to arrange and deliver the booking. Typical legal basis: performance of a contract.
Payment information. Deposit and balance amounts and payment status. Card details are handled entirely by Stripe. We never see or store them. Typical legal basis: contract and legal obligation.
Messages. Booking confirmations, reminders, reschedule and cancellation notices, sent by email, and by text or WhatsApp where the detailer uses those channels.
Service history and follow-up. Past services, a prediction of when the next one may be due, and a cancellation-risk indicator, to help the detailer decide who to follow up with. Typical legal basis: legitimate interests of the detailer. You can ask the detailer to stop follow-up messages at any time.
Records of activity. A log of key actions on the booking, for accountability and troubleshooting.

5. Automated decisions

The next-service prediction and cancellation-risk indicator are a form of profiling, but they do not make decisions about you on their own. The detailer always decides what to do. If you want, you can ask your detailer not to have these applied to your record. We never cancel or move a confirmed booking automatically.

We use the following providers to run the service. Each is bound by a contract that requires it to protect the data and use it only for our purposes. We do not sell personal data.

Supabase: database hosting (EU region).
Vercel: application hosting and delivery.
Stripe: payments, subscriptions and invoicing. Stripe is an independent controller for some of its own processing, such as fraud prevention and regulatory checks.
Resend: sending notification emails.
Twilio: sending text and WhatsApp messages, where a detailer uses them.
Anthropic: drafting rebooking message text, when a detailer uses that feature. A customer's first name and service facts (not their full contact details) are sent to Anthropic in the United States.
Mapbox, OpenStreetMap (Nominatim), what3words, Open-Meteo: turning an address or what3words reference into map coordinates, estimating travel time, and checking the weather for outdoor services.
Cloudflare: Turnstile bot protection on sign-up, sign-in, contact and booking forms, and encrypted off-site copies of our database kept for disaster recovery (deleted after 30 days; Cloudflare cannot read them).
Google: sign-in with Google, and Google Calendar sync if a detailer connects it. Calendly: calendar import, if a detailer connects it. DetailersEye's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. If a detailer connects Google Calendar, we use that access only for two things: writing their DetailersEye bookings to their calendar as events, and reading the times and titles of events already in it so those times are blocked on their booking page and shown in their own DetailersEye calendar. We do not use it for advertising, we do not sell it, and our staff do not read it except where the detailer asks us to for support, to investigate abuse, or where the law requires.
PostHog and Google Analytics: product analytics, only if you accept the cookie banner (see Cookies below).

We may also share data where the law requires it, to protect our rights or users, or as part of a sale or reorganisation of the business, with the same protections continuing to apply.

7. Transfers outside the UK

Some of the providers above are based in, or process data in, the United States or other countries outside the UK and EEA. Where they do, we rely on a lawful transfer mechanism: an adequacy decision or data-bridge arrangement where one applies, or the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses.

8. How long we keep it

Detailer account data: while your account is open, then deleted after a 30-day export window, except as below.
Billing and tax records: as long as the law requires, normally 6 years.
Record of acceptance of our terms (version, time, IP address, browser): kept for 6 years after your account closes, to defend or bring legal claims.
Customer and booking records: for as long as the detailer has an active account, then deleted or returned. Detailers set their own retention periods for their customers' records. Typical periods are 6 to 7 years for records with a tax or legal purpose, and shorter for everything else.
Security and activity logs: a limited period, then deleted.

9. Your rights

You can ask for a copy of your data, ask for it to be corrected or deleted, object to certain processing, ask us to restrict it, ask for it in a portable format, and withdraw any consent you gave (without affecting what happened before). Because a detailer is the controller of their customers' data, contact the detailer first. If you cannot reach them, contact us at privacy@detailerseye.com and we will help. We aim to reply within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

10. Security

We protect data with encryption in transit, hashed passwords, per-business separation of data, access controls, bot and abuse protection, and audit logging. No system is perfectly secure. If a breach affects your data we will tell the people the law requires us to tell, without undue delay.

11. Children

DetailersEye is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

12. Cookies

DetailersEye sets two strictly-necessary cookies that do not require your consent: one to keep detailers signed in, and one to remember the choice you make in the cookie banner.

On the DetailersEye marketing site and inside the detailer-facing app, we use PostHog and Google Analytics to understand how the product is used. Both only run if you accept the cookie banner. If you reject it, or have not answered yet, neither is loaded and nothing is tracked. Neither is ever loaded on pages your customers use, such as booking, your customer portal, or signing a contract. There is nothing to consent to there. PostHog does not set cookies or use local storage itself (memory-only for your visit). Google Analytics does set its own cookies (for example _ga) to recognise repeat visits. See Google's Privacy Policy for how Google handles that data. You can withdraw consent at any time by clearing your browser's cookies for this site, which brings the banner back.

On the pages where a customer pays a deposit or balance, Stripe sets its own cookies (for example __stripe_mid and __stripe_sid) to detect and prevent fraud. These are needed for the payment to work securely. See Stripe's cookie notice for detail.

13. Changes to this policy

We may update this policy. We will change the date and version above, and for material changes we will tell detailers in the app. Earlier versions are available on request.

14. Contact

Privacy questions and data-subject requests: privacy@detailerseye.com. Our full postal and company details are on our contact page.