Privacy Policy

1. Who We Are

detailmasters CRM operates the platform at detailmasters.pro — a CRM and scheduling platform built for professional car detailing businesses. This policy explains what personal data we collect, why we collect it, and your rights under applicable data protection law. By using the Service you acknowledge this policy.

2. Data We Collect

We collect the following categories of personal data:

• Account data — name, email address, phone number, password (hashed), profile picture, and country.
• Booking data — vehicle details, service selections, scheduling preferences, notes, booking history, and communications with businesses.
• Payment and billing data — payment method tokens (held by Stripe; we do not store card numbers), transaction amounts, currency, reservation fee receipts, subscription billing records, and invoice data (invoice number, amounts, VAT details, payer name and email).
• Business customer data — detailing businesses that use our CRM tools may record their own customer records within the platform for service management purposes. Those businesses are independent data controllers for their own customer data.
• Technical data — IP address, browser and device identifiers, usage logs, and session cookies necessary to operate the Service.

3. How We Use It

We use your data to:

• Operate, maintain, and improve the platform and its features.
• Process payments and issue invoices for reservation fees and subscriptions.
• Fulfil and manage bookings between customers and detailing businesses.
• Send transactional communications: booking confirmations, reminders, status updates, invoices, and receipts.
• Enforce these Terms, prevent fraud, and comply with legal obligations.
• With your explicit consent: send promotional communications. You may withdraw consent at any time in your account settings.

4. Data Sharing

We share personal data only as strictly necessary:

• With the business you book with — booking and contact details required to fulfil the service.
• Stripe — payment processing. Stripe is the merchant of record for all card transactions and stores payment method data on our behalf.
• Cloudinary — cloud storage for profile images, service photos, and invoice PDF documents.
• Resend — transactional email delivery (booking notifications, invoices, password resets).
• Push notification services — browser push notifications where you have granted permission.

We do not sell, rent, or trade personal data. We will disclose data to legal authorities when required by law or a valid legal process.

5. Retention

Account data is retained while your account is active. You may request deletion at any time; residual records required by law will be anonymised and retained for the required period.

Invoice and accounting records are subject to mandatory retention under Czech accounting law (Act No. 563/1991 Coll.) and related tax legislation. Invoice documents are retained for a minimum of 10 years from the end of the tax period in which they were issued. This obligation applies regardless of account deletion requests.

Booking records are retained for a minimum of 3 years for dispute resolution and legal compliance purposes.

6. Your Rights

Under applicable data protection law (including the GDPR where it applies) you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention obligations above).
• Receive your data in a portable, machine-readable format.
• Object to or restrict certain processing activities.

To exercise any right, contact us at info@detailmasters.pro. We will respond within 30 days.

7. Cookies

We use strictly necessary session cookies to authenticate users and maintain login state. We also set a locale preference cookie (NEXT_LOCALE) to remember your language choice. No third-party advertising or tracking cookies are set without your consent.

8. Security

We apply industry-standard technical and organisational measures to protect personal data, including encrypted data transmission (TLS), hashed password storage, and access controls. No internet transmission is entirely secure; you use the Service at your own risk.

9. Changes

We may update this policy at any time. Material changes will be notified by email to registered users at least 14 days before the effective date. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries or to exercise your rights, contact: info@detailmasters.pro