Privacy Notice

This Privacy Notice explains how Fractal Corp ("Fractal Corp", "we", "us") collects, uses, and shares personal data when you use DetailOS (the "Service"). Fractal Corp is the data controller for the personal data described in this notice.

1. Personal data we collect

• Account data: name, email, password (hashed), business name, role.
• Business data: customer records, vehicles/assets, jobs, quotes, invoices, messages, photos, and similar content you upload to operate your business.
• Usage & device data: log data, IP address, browser/device identifiers, pages viewed, and feature interactions, used for security, debugging, and product analytics.
• Support data: messages and attachments you send when contacting us.
• Payment data: handled by Stripe (see Sharing below). We do not store full card details on our systems.

2. Why we use it (purposes & legal basis)

• To create your account, authenticate you, and provide the Service — performance of contract.
• To process subscription payments and invoices via Stripe — performance of contract / legal obligation.
• To send service-related communications, including security and billing notices — legitimate interests / contract.
• To prevent fraud, abuse, and security incidents — legitimate interests / legal obligation.
• To improve the Service through aggregated analytics and to debug issues — legitimate interests.
• To provide customer support — legitimate interests / contract.
• To send marketing communications where permitted — consent or legitimate interests (you can opt out at any time).

3. Who we share it with

We share personal data only as needed to run the Service:

• Stripe — our Merchant of Record. Stripe processes payments, manages subscriptions, calculates tax, and issues invoices on our behalf. Stripe is an independent controller for the data it collects directly from payers.
• Infrastructure & hosting providers — used to host the Service and databases as our processors.
• Communication providers — including Twilio (SMS) and Resend (email), which deliver messages on your behalf using credentials you provide.
• AI model providers — used to power AI-assisted features; inputs are sent for processing under data processing agreements.
• Analytics & security providers — used to monitor performance, detect abuse, and improve the Service.
• Professional advisers — legal, accounting, and similar advisers under confidentiality.
• Authorities — where required by law, court order, or to protect rights, property, or safety.

We do not sell personal data.

4. International transfers

Some of our providers are located outside your country, including in the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

5. Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Billing and tax records are retained for the period required by applicable law. After the applicable retention period, data is deleted or anonymized.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, object to certain processing, and withdraw consent. You can also lodge a complaint with your local data protection authority. To exercise these rights, contact us at support@detail-os.com. We will respond within the timeframe required by applicable law (typically within one month under GDPR/UK GDPR).

7. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and logging. No method of transmission or storage is 100% secure; we encourage you to use a strong password and enable any available account security features.

8. Cookies

The Service uses cookies and similar technologies that are strictly necessary to keep you signed in and to operate the Service securely. Where we use analytics cookies, we use them in a privacy-preserving way; you can manage cookies through your browser settings.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

10. Changes

We may update this Privacy Notice from time to time. We will post the updated notice and revise the "Updated" date above. Material changes will be communicated through the Service.

11. Contact

Fractal Corp — privacy contact: support@detail-os.com.