Privacy Policy

1. Two different relationships

Almost every question about privacy here depends on which of these you are.

If you run a detailing shop that uses Bayline, we hold your account details and we act for you. You decide what customer information to collect; we store and process it on your instructions.

If you booked a detail with a shop that uses Bayline, your relationship is with that shop. They chose the software and they decide what to do with your information. We hold it for them. To see, correct or delete your details, contact the shop directly — they can act on it immediately, and we will help them if asked.

2. What we hold

For shop owners and staff

• Name, email address and phone number
• Which shop you belong to and whether you own it or work there
• Your working hours and time-off requests
• A password, stored only as a cryptographic hash we cannot reverse

For a shop’s customers

• Name, phone number and email address
• The service address — which is often a home address
• Vehicle details: make, model, size, and VIN if the shop records it
• Bookings, notes, checklists, and invoice amounts
• Photographs of the vehicle taken before and after work
• Approximate coordinates for the service address, used to look up the weather forecast for that job

3. What we never do

• Sell your information, or a shop’s customers’ information, to anyone
• Market our own products to a shop’s customers
• Use one shop’s data to benefit another
• Store card numbers — see below
• Advertise, or run third-party advertising or tracking on our pages

4. Card details never reach us

Payments run through Stripe. When a customer pays a deposit they enter their card on Stripe’s own payment page, not ours. We receive confirmation that a payment succeeded and an identifier for it. We never see, receive or store a card number, expiry date or security code, and neither does the shop.

Each shop connects its own Stripe account, and money goes directly to that shop. We hold the shop’s Stripe credentials encrypted in a dedicated secrets store, separate from the ordinary database tables.

5. Who else is involved

Running Bayline means a small number of companies process data on our behalf. This is all of them:

We may also disclose information if the law requires it, or to protect someone’s safety. If that ever happens and we are permitted to say so, we will tell the affected shop.

6. Where it is kept

All of it is stored in the United States. The database is hosted in Oregon. If you are outside the United States, using Bayline means your information is processed there, under United States law.

7. How it is protected

• Separation between shops is enforced by the database itself, not only by the application. One shop cannot read another’s records even if something above the database asks it to.
• Everything travels over an encrypted connection.
• Passwords are stored as hashes and cannot be recovered, only reset.
• Backups are encrypted before they leave the machine that makes them, and can only be opened with a passphrase that is not stored alongside them.
• Payment credentials live in a separate encrypted store rather than an ordinary database column.

No system is perfectly secure. If a breach affects your information we will tell you and the affected shop promptly, and describe what happened rather than minimise it.

8. How long it is kept

A shop’s data is kept while its account is open. Close the account and ask us to delete it, and we will do so within 30 days, including from backups on their normal rotation.

Photographs and job records stay for as long as the shop keeps them — they are that shop’s business records, and deleting them is the shop’s decision to make.

9. Email you receive from a shop

Shops can email past customers through Bayline. Those messages come from the shop, carry the shop’s name, and replies go to the shop. If you would rather not receive them, tell the shop and they can stop — or use the unsubscribe link in the message.

Confirmations and invoices are not marketing; they are part of the service you booked, and you will receive them regardless.

10. Your choices

If you run a shop, you can see and change everything in your account from Settings, and ask us for a copy or a deletion at any time.

If you are a customer of a shop, ask the shop — they hold the relationship and can act on it directly. Depending on where you live you may have a legal right to see, correct, delete, or receive a copy of your information, and to object to certain uses. We will not treat you differently for exercising it.

11. Children

Bayline is for businesses. We do not knowingly collect information from anyone under 13. If you believe we have, contact us and we will delete it.

12. Changes

If this policy changes in a way that materially affects you, we will tell shops by email or in the app before it takes effect. The date at the top is when it last changed.

13. Contact

Questions, or a request about your information: privacy@baylineapp.com.