Privacy Policy

1. Overview

GetRichDetailing LLC, a Texas limited liability company ("GRD", "we", "us", or "our") operates the GRD CRM platform at getrichdetailing.vip (the "Platform"). This Privacy Policy explains how we collect, use, and protect information when you use our Platform, including our integration with Meta (Facebook) advertising services.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and profile information provided during registration.
• Meta Ads Data: When you connect your Meta (Facebook) advertising account, we access campaign performance data, ad metrics, and account information through the Meta Marketing API. This data is used solely to display insights and manage campaigns on your behalf.
• Facebook and Instagram Messaging Data: If you connect a Facebook Page, we store an encrypted Page access token, your Page and linked Instagram business account identifiers, and the conversations customers send that Page — including sender name, profile picture and message contents. See section 6.
• Business Information: Client names, business names, and service request details submitted through our platform.
• Usage Data: Log data, IP addresses, browser type, and pages visited for security and performance purposes.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Platform
• Display Meta Ads performance data and campaign insights to authorized users
• Manage and automate Meta advertising campaigns on behalf of connected accounts
• Process and track service fulfillment requests
• Communicate important updates and notifications
• Ensure platform security and prevent unauthorized access

4. SMS Text Message Communications

By checking the SMS consent box, you expressly agree to receive the following types of SMS text messages from GetRichDetailing LLC (or the detailing business you are booking with, operating on our platform):

• Appointment Confirmation: Sent immediately after booking to confirm your scheduled date, time, and service address.
• Appointment Reminders: Sent approximately 24 hours before your scheduled appointment, and again approximately 1 hour before.
• On the way: Sent once when the business sets off for your appointment, with the time it expects to arrive.
• Invoice or Receipt: A link to your invoice or receipt for the service, or a link to pay it, if the business sends it by text — when it presses send, or automatically when the service is finished if it has switched that on.
• Service Follow-up: Sent after your appointment is completed to confirm service completion or ask for a review.
• Texts and replies from the business: If you text the business it can reply, and it can text you itself about your appointment, your invoice or a review — always about the service you booked, never marketing or promotions.
• Automatic reply: When you text the business first, it may send one automatic reply in words it has written, at most once every 12 hours — never in answer to STOP, HELP or another keyword.

Message frequency: Up to 6 messages per appointment (one confirmation, up to two reminders — 24 hours and 1 hour before — one on-the-way text when the business sets off, an invoice or receipt link if the business texts one, and one follow-up after the service). Message frequency may vary.

Message and data rates: Standard message and data rates may apply depending on your mobile carrier and plan.

How to opt out (STOP): Reply STOP to any message at any time. You will receive one final confirmation and no further messages will be sent. To re-subscribe, reply START.

How to get help (HELP): Reply HELP to any message, or email us at getrichdetailing@gmail.com.

Consent is not a condition of purchase: You are not required to consent to SMS messages to book or receive services.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

Text message opt-in data and consent are never shared with any third party.

Your phone number is used solely to communicate with you about your appointment. For full SMS program terms, see our Terms of Service § 4.

5. Meta Platform Data (Facebook Ads)

Our Platform integrates with the Meta Marketing API to access advertising data. By connecting your Meta account, you authorize us to:

• Read campaign, ad set, and ad performance data (ads_read)
• Manage campaigns, budgets, and ad statuses on your behalf (ads_management)
• Access business account information (business_management)

Meta data is accessed solely for the purpose of providing our services to you. We do not sell, share, or use Meta data for any purpose other than operating the Platform features you have authorized. You may disconnect your Meta account at any time through the Platform settings.

Measuring our own ads: GRD's marketing and sign-up pages use the Meta Pixel and the Meta Conversions API to measure our ads — for example, whether someone who saw one of our ads started a free trial. When you sign up, we send Meta your email address and phone number in hashed (scrambled) form so it can match the sign-up to the ad. The Meta Pixel and Conversions API are not used on businesses' pages or their customers' pages, such as booking pages, invoices or the business app.

6. Facebook and Instagram Messaging Data

The Platform includes a Conversations inbox that lets a detailing business read and reply to messages its own customers send to that business on Facebook Messenger and Instagram. Connecting a Facebook Page is optional and is done by the business through Facebook Login.

When a Page is connected, we request the following permissions:

• pages_show_list — list the Pages you manage so you can choose which one to connect
• pages_messaging — receive messages sent to your Page and send your replies
• pages_manage_metadata — subscribe your Page to message notifications
• pages_read_engagement — read your Page's name and profile details
• instagram_basic — identify the Instagram business account linked to your Page
• instagram_manage_messages — receive and reply to Instagram direct messages
• business_management — confirm the Page belongs to your business

Using those permissions, we store:

• A Page access token, encrypted at rest and never displayed to any user
• Your Facebook Page ID and name, and the linked Instagram business account ID and username where one exists
• Message conversations — the sender's name and profile picture as Meta provides them, their platform-assigned ID, and the contents and timestamps of messages exchanged with your business

This data is used for one purpose only: displaying your customer conversations to you and sending the replies you write. We do not sell it, use it for advertising or profiling, or use it to train machine-learning models. Conversations are isolated per business — no business on the Platform can see another's messages.

Disconnecting your Page from the Platform's Inbox settings takes effect immediately and stops all further collection.

To have this data deleted, follow our Data Deletion Instructions. We respond to every request within 30 days.

7. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Third-party vendors who assist in operating the Platform (hosting, database, analytics) under strict confidentiality agreements. Section 15 names them and what each receives.
• Legal Requirements: When required by law or to protect the rights and safety of our users.
• TikTok (only when you ask): The homepage at getrichdetailing.vip can embed a TikTok video when you choose to play one; nothing is loaded from TikTok until you click, and TikTok's own privacy policy governs what it receives after that.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure token storage, and access controls. Meta access tokens are encrypted at rest and never exposed to unauthorized parties.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us. Meta advertising data is retained for historical reporting purposes and may be deleted upon request. For Facebook and Instagram messaging data specifically, see our Data Deletion Instructions.

10. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data — see our Data Deletion Instructions
• Disconnect your Meta account or Facebook Page at any time
• Opt out of non-essential communications

11. Children's Privacy

The Platform is intended for business use by adults 18 years of age or older. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes by posting a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

14. The Phone App: Location, Photos, Voice Messages and Face ID

This section explains, in plain words, what the GRD CRM phone app (the iPhone app and the app you add to your home screen) uses on your phone, and why.

• Location, when you clock in or out. When you clock in or out, the app asks your phone for your location once, at that moment, and saves it with that clock-in or clock-out so your business can see where the shift started and ended. The app does not follow your location between clock-ins or while it is closed. If you say no, you can still clock in and out; the entry is saved without a location.
• Photos and video. The app opens your camera or photo library only when you choose to add a photo or video — for example to a job, a form, the team chat or your business's content library. What you add is stored securely for your business and can be seen by the people in your business who have access to it.
• Voice messages. The app uses your microphone only while you record a voice message in the team chat. The recording is stored for your team to play, and we may turn it into text with a speech-to-text service so it can also be read in the chat.
• Face ID. If you turn on "Unlock with Face ID", your iPhone checks your face or fingerprint itself. The app is only told whether the check passed; your face and fingerprint never leave your phone and we never see or store them. The app keeps one on/off setting on your phone, and you can turn it off in Settings at any time.

15. Our Service Providers and What Each Receives

We use the companies below to run the Platform. Here is what each one does and what it receives. Meta (Facebook and Instagram) is described in sections 5 and 6, and TikTok in section 7.

• Hosting, storage and network: Manus runs our servers, on Google Cloud, and stores the files you upload, such as photos, videos, voice messages and documents. Our database is TiDB Cloud. Cloudflare carries every visit to the website and every request from the app, so it sees your IP address and what is asked for.
• Text messages and phone calls: Twilio sends and receives the text messages and phone calls on the Platform. It receives the phone numbers and the words of each text, and it keeps the recording when a caller leaves a voicemail. To register a business's texting with the phone carriers, we send Twilio the business's legal name, address and contact details, and its tax number (EIN) when it has one.
• Email: Resend sends our emails, and the emails a business sends its customers through the Platform, such as invoices. It receives each email's addresses and contents.
• Payments: Stripe handles GRD's own subscription billing, and card payments to a business that has connected its own Stripe account. Square handles card payments to a business that has connected its own Square account. Card details are typed on Stripe's or Square's own payment page, not into GRD CRM. Commas (formerly Fanbasis) takes payments for GRD's own memberships and programs; we read its customer, subscription and payment records into our client records.
• AI: Manus's Forge service writes out voice messages and answers our own team's questions about our clients. Section 16 says which features use it and what each one sends.
• Maps, addresses and weather: Maps are drawn from OpenStreetMap: your device loads the map pictures straight from OpenStreetMap, which sees your IP address and the area shown. To put a business's customers on its map, we send each customer's address to OpenStreetMap's address service (Nominatim). If we switch on address suggestions, what you type into an address field is sent to Geoapify. Weather forecasts come from Open-Meteo, which receives the map position of the business's weather location and the place name typed to find it. When you tap for directions, the address opens in Apple Maps or Google Maps.
• Website visit counts: We may use Umami to count visits to our website. The iPhone app never loads it. Our own ad measurement with Meta is described in section 5.
• Notifications: Push notifications reach your browser through its own push service: Google's, Apple's, Mozilla's or Microsoft's, depending on the browser.
• Videos: A video in a knowledge base lesson plays from YouTube, Vimeo or Loom, and its player loads from that service when you open the lesson; a YouTube video's cover picture loads from YouTube. Those services see your IP address. On our own marketing pages, a video's cover picture loads from YouTube, and the video plays only when you click it.
• Our own client records: When someone pays to join GRD's Skool community, Skool sends us details such as their name and email address through Zapier.

What deleting does not reach. Deleting your account, or a business's records, in GRD CRM (see "Deleting your GRD CRM account" in section 14) does not remove what these companies have already received, such as a payment at Stripe or a text message or voicemail at Twilio.

If you are a customer of a business that uses GRD CRM, ask that business: it can delete your customer record from GRD CRM.

16. AI Features

Some features send information to an AI service run by Manus (its Forge service), which sends text back. Apart from features that use Facebook and Instagram data (sections 5 and 6), these are the features, and what each one sends:

• Voice messages. When you send a voice message in a team chat, we send the recording to the AI service to be written out as text, so the message can also be read. While you record, your phone's or browser's own speech recognition (Apple's, in the iPhone app) also listens and can write out the message too.
• Our team's client assistant. When someone on GRD's team asks the assistant about our clients (the businesses we work with), we send the question, the conversation so far, and these details from our records: a client's name and contact details, the services we provide it, our notes, its Skool membership, and its subscriptions and payments with GRD.