Privacy Notice

This notice explains what personal information DetailHub collects, why we have it, who else sees it, how long we keep it, and what you can ask us to do with it. It covers the DetailHub website and service.

The data controller — the organisation responsible for the information — is DetailHub, N/A. For anything in this notice, including a request about your own data, write to neilnainani@gmail.com.

1. What we collect

Everyone with an account

• Name, email address, and an optional phone number.
• A password, stored only as a bcrypt hash. We cannot read your password and cannot tell you what it is.
• Whether you signed up as a customer or a detailer, and when you verified your email.
• A record of which version of the Terms and this notice you accepted, and when.
• Notifications we have generated for you, and whether you have read them.

Customers

• Your vehicles: year, make, model, size and colour.
• The service address for each request — street, city, state and postal code — and the map coordinates we derive from it.
• The time window you choose, and any notes you write.
• Photos you upload of your vehicle.
• Requests, quotes received, bookings, prices and payment status.
• Messages you exchange with a detailer, and reviews you write.

Detailers

• Business name, biography, years of experience.
• Your base address and the coordinates derived from it, and your service radius.
• The Instagram handle you submit for verification, and the outcome of that review.
• An identifier for your Stripe payout account, and whether Stripe has enabled payouts. Your bank details are held by Stripe, not by us.
• Quotes, jobs, completion photos, messages, and the ratings customers give you.

What we do not collect

• Card numbers. Card details are entered directly into Stripe's payment form and never reach our servers.
• Location data from photos. GPS coordinates and other metadata are stripped from every image before it is stored — the original file is never persisted.
• Analytics, advertising or tracking data. There are no analytics tools, advertising tags, social plugins or third-party trackers on this site. See the Cookie Notice.
• Special category data. We do not ask for health, biometric, political, religious or similar information, and you should not put it in a note, message or review.

2. Why we have it, and our lawful basis

We do not send marketing email. If we ever do, it will be with your separate, opt-in consent, which you can withdraw at any time without affecting anything else.

3. What other users can see

This is the part that matters most in a marketplace, so it is set out precisely.

• Before you accept a quote, detailers whose service area covers you can see your request's city and postal code, an approximate, rounded distance from their base, your vehicle, the services requested, your time window, your notes and your photos. They cannot see your street address, your email address or your phone number.
• Once you accept a quote, the detailer you booked receives your name and full service address, because they have to drive to it, and the in-job message thread opens between you.
• Customers see a detailer's business name, biography, years of experience, Instagram handle, verification status, approximate distance, and their ratings and reviews. After booking, they also see the detailer's name, email and phone number so the two of you can coordinate.
• Reviews are public within the service. A review you write is shown on the detailer's profile to other customers, with your rating and comment.
• Photos are served from unlisted public URLs. The addresses are long and effectively unguessable, and they are not indexed or linked anywhere outside the app, but anyone who has the exact URL can open the image without signing in. Treat an uploaded photo as something you would not mind a link to being forwarded.
• Administrators at DetailHub can see account and job records where it is necessary to review a detailer, investigate a report, or resolve a problem.

4. Who else we share it with

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not disclose it to data brokers. We use the following service providers, each of which handles only what its job requires:

We may also disclose information where we are legally required to, to establish or defend legal claims, or to protect someone's safety. If the business is sold or merged, account data may transfer to the buyer, who would remain bound by this notice until they give you notice of a change.

5. International transfers

Our providers are based in, or operate from, the United States and other countries. Where personal information is transferred out of the UK or European Economic Area, it is protected by an approved transfer mechanism — normally the European Commission's Standard Contractual Clauses, together with the UK Addendum. You can ask us for details of the mechanism used for a specific provider.

6. How long we keep it

7. How we protect it

• Passwords are stored as bcrypt hashes, never in a readable form.
• Email verification links are stored only as SHA-256 hashes, so a copy of the database cannot be used to verify accounts.
• All traffic is encrypted in transit, and the database is encrypted at rest.
• Access to a record is checked against your session on the server for every action, not only hidden in the interface.
• Photo metadata is stripped on upload, before the file is stored.

No service can promise perfect security. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant regulator within 72 hours and tell you where the law requires it.

8. Your rights

Depending on where you live, you have some or all of the following rights. They are free to exercise, and we will respond within one month (UK/EU) or 45 days (California), and will tell you if we need longer.

• Access — a copy of the personal information we hold about you.
• Correction — have inaccurate information fixed.
• Deletion — have your information erased, except what we must keep for tax, accounting or legal-claim reasons.
• Portability — receive your data in a machine-readable format.
• Objection and restriction — object to processing based on our legitimate interests, or ask us to pause processing while a dispute is resolved.
• Withdraw consent — where we rely on consent, withdraw it at any time. This does not affect processing that already happened.
• California residents also have the right to know the categories collected, disclosed and sold or shared; to delete; to correct; to opt out of sale or sharing; to limit use of sensitive personal information; and not to be discriminated against for exercising a right. We do not sell or share personal information, and we do not use sensitive personal information for inferring characteristics — so there is nothing to opt out of, but the right exists and we will honour a request.

To exercise any of these, email neilnainani@gmail.com from the address on your account, or tell us enough to let us verify you securely. You may use an authorised agent where the law allows it.

If you are unhappy with our answer you can complain to your data protection authority — in the UK the Information Commissioner's Office, in the EU the supervisory authority where you live.

9. Automated decisions

We match requests to detailers automatically, using the distance between the service address and a detailer's base, their service radius, and whether they already quoted. It is a geographic filter, not a profile of you, and it does not produce a legal or similarly significant effect. Decisions that do matter — accepting a quote, approving a detailer, suspending an account — are made by a person.

10. Children

DetailHub is for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.

11. Changes to this notice

The version and effective date at the top of this page identify the text in force. If we make a material change we will give notice by email or in the app before it takes effect.

12. Contact

DetailHub
N/A
neilnainani@gmail.com