This Privacy Policy explains what information DetailFresh collects, why we use it, when it may be shared, and the choices available to you when you visit our site or request mobile detailing service.
Effective September 1, 2026
01
Information you provide
We may collect your name, email address, phone number, service address, vehicle year, make and model, requested services, preferred appointment, access notes, utility availability, and information you provide about the vehicle’s condition.
Please do not enter card numbers, bank information, passwords, government identification numbers, or other sensitive information into the booking concierge or ordinary message fields.
02
Booking & service records
We may keep booking selections, catalog quotes, appointment status, service notes, communications, receipts, cancellation timestamps, and records of concerns or follow-up. These records help us perform and support the requested service, maintain accurate business records, and resolve questions.
03
Booking concierge messages
If you use the optional booking concierge, your message and a limited snapshot of your current booking choices may be sent to our service provider to generate a response. The booking application—not the concierge—controls prices, availability, eligibility, and changes to your selections. Do not use the concierge for sensitive personal or payment information.
04
Payments
Stripe provides secure card and wallet entry. Card details are submitted directly to Stripe and are governed by its privacy terms. DetailFresh does not receive or store full card numbers, security codes, or wallet credentials. We retain limited Stripe customer and payment-method references, payment status and amount, and the authorization record needed to process a remaining customer-approved balance after service completion.
If DetailFresh proposes a price increase, we retain the catalog change, original and proposed totals, your approval or decline, the wording and version you reviewed, and the time of your response. This creates an auditable record and does not expose your payment credentials to DetailFresh.
05
Device & website information
Our systems may automatically receive standard technical information such as IP address, browser type, device type, requested pages, timestamps, referrer information, and security events. This information may appear in ordinary hosting and server logs.
To understand how eligible public visits reach the booking flow, the production site keeps a minimized first- and last-touch record in browser storage for up to 30 days. That record may contain a clean page path, length-limited campaign tags, a referrer hostname, and the type of an advertising click identifier. It does not keep a full referrer URL, landing-page query string, advertising click-identifier value, or booking-form and customer contact information.
The booking experience also uses browser storage to keep a short-lived draft and session storage to keep a temporary concierge session. Booking selections can remain on your device until you clear them, the draft expires, the application resets it, or your browser removes it. Contact details, service addresses, and access instructions are sent to the booking server only when needed to verify or create the appointment.
06
How we use information
We use information to provide catalog prices and booking steps; check service area and site setup; communicate about a request; perform and document services; send transactional email confirmations and receipts; if separately activated, measure whether a Google or Microsoft ad click produced a paid deposit; respond to questions or concerns; prevent fraud and misuse; maintain, secure, and improve the site; and comply with legal obligations.
The optional marketing opt-in is not currently shown. Information provided for a booking or service request is not treated as consent to optional marketing.
07
Google and Microsoft Ads measurement
Paid-booking advertising measurement is staged but currently off. This release does not request the Google Ads or Microsoft UET tags, store an advertising-measurement choice, send advertising page-load events, or report paid-deposit conversions. Global Privacy Control therefore remains respected because no advertising measurement runs.
If the owner later deploys a separately reviewed Ads activation, this section will describe the active setting and choices before Google or Microsoft receives events. The staged integration is designed to report a revenue conversion only after the booking server confirms that the appointment deposit was paid. That conversion is limited to a random booking transaction identifier, the deposit amount, and U.S. dollars as the currency; it excludes booking-form, name, email, phone, service-address, vehicle, note, concierge-message, and card details. The staged implementation keeps advertising user data, advertising personalization, analytics storage, enhanced conversions, Microsoft Clarity, automatic Google page views, automatic Microsoft SPA tracking, and customer-data fields off.
Google Analytics diagnostic measurement is not currently configured. If the owner later supplies and explicitly enables a web-stream ID, only secondary server-accepted booking-stage events without customer details may be sent. Those diagnostic events are not revenue conversions.
Advertising measurement is currently off.
08
When information is shared
We may share only the information needed with vendors that help us operate the service: Google for address verification, road routing, and calendar events; Google Ads and Microsoft Advertising for the staged measurement described above only if separately activated; the U.S. Census Bureau and Komoot’s Photon service, which uses OpenStreetMap data, as configured fallback providers for address suggestions and verification; Stripe for payments; SendGrid for transactional email; our hosting and database providers; and the optional booking-concierge provider when you use that feature. Automated transactional SMS is currently disabled, so booking information is not sent to Twilio for text delivery. A customer may still choose to send a manual text to the public support number. If automated SMS is separately enabled in the future, this Policy and the customer-facing communication choices must be updated before Twilio receives information for that purpose. When an address fallback is used, the service address you enter may be sent to that provider. We may also share information with personnel who need it to perform or review the requested service, when you direct us to share it, or when required for law, rights, safety, misuse investigations, or a business transaction.
If the advertising tags are later activated, their technical limits must remain consistent with the description above. Applicable law may assign specific legal classifications or obligations to vendor data transfers.
09
Photos & media
We may create vehicle-condition notes and before-and-after photos to document service, support quality review, and address concerns. Identifiable vehicle photos will not be used for advertising or social media without permission. If permission is granted, you may contact us to ask that future promotional use stop.
10
Retention
Gate codes, unit details, and arrival instructions are removed seven days after an eligible booking closes. Unconverted estimate requests are retained for 90 days. Eligible customer, vehicle, address, communication, payment-reference, and operational booking records are retained for up to 730 days, unless a longer accounting, dispute, or legal obligation applies. Raw session, attribution, and website-event data is retained for up to 180 days; non-identifying daily business totals may be kept for the life of the business. Eligible closed records are anonymized while limited non-personal transaction and operational facts may remain for accounting, security, audit, or legal obligations.
The minimized browser acquisition record expires after 30 days and is not extended merely because you return directly to the site. Browser-stored booking progress remains on your device until you clear it, the application resets it, or your browser removes it. The application ordinarily expires an unfinished booking draft after 24 hours. The current release does not store an advertising-measurement choice. If advertising measurement is later activated, any saved choice must remain a non-identifying browser setting and must not be sent to the booking server.
11
Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. No website, network, or storage system can be guaranteed completely secure, so please use care when sending information online.
12
Your choices & California rights
You may ask to access, correct, or delete personal information associated with you, subject to verification and legal exceptions. California residents may have additional rights under applicable law, including the right not to receive discriminatory treatment for exercising a privacy right.
Paid-booking advertising measurement is currently off. If it is later activated, this page must provide the applicable choice and honor Global Privacy Control before either advertising tag runs. You can also block or clear advertising cookies and clear saved booking progress through your browser’s site-data controls. Use the verified contact options on this page for privacy requests.
13
Children, changes & contact
Our services are intended for adults and are not directed to children under 13. We may update this Policy by posting a revised version with a new effective date.
Questions or requests may be sent using the verified contact options on this page.
Purpose limitedWe use information to support your request and our operations.
No ad personalizationThe paid-deposit tag is not configured to personalize advertising.
Your choicesYou can ask about, correct, or delete eligible information.
Protected checkoutWhen enabled, card entry stays with the payment provider.
Privacy question or request?Contact us and we’ll help with the next step.