Privacy Policy

Momentum ("we", "us", or "our") operates the Momentum scheduling platform for car detailing businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Information You Provide

• Account information: Name, email address, phone number, and business details when you register for a Momentum account.
• Business data: Services, pricing, team members, territories, and scheduling preferences you configure in the platform.
• Customer booking data: Names, email addresses, phone numbers, vehicle information, and service addresses submitted through the booking widget by your customers.
• Payment information: Payment details are collected and processed directly by Stripe. We do not store credit card numbers on our servers.

Information Collected Automatically

• Usage data: Pages visited, features used, and interactions within the platform.
• Device information: Browser type, operating system, device type, and screen resolution.
• Location data: Approximate location derived from IP addresses and addresses provided for service delivery and travel time calculations.

2. How We Use Your Information

• Provide, maintain, and improve the Momentum platform
• Process bookings and facilitate scheduling
• Calculate travel times between service locations
• Process payments and deposits through Stripe
• Send booking confirmations, reminders, and notifications via email and SMS
• Provide customer support
• Ensure platform security and prevent fraud

3. Third-Party Services

We share information with the following third-party service providers who assist in operating our platform:

• Stripe — Payment processing. Stripe collects and processes payment data under its own privacy policy.
• Supabase — Database hosting and authentication services.
• Twilio — SMS notifications for booking confirmations and reminders.
• Resend — Email delivery for booking confirmations, reminders, and account communications.
• Mapbox — Geocoding addresses and calculating travel times between service locations.
• Vercel — Application hosting and content delivery.

Each third-party provider processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

4. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Understand how you use our platform to improve the experience

Third-party services such as Stripe and Supabase may also set cookies as part of their functionality. You can control cookie settings through your browser preferences.

5. Data Retention

We retain your account data for as long as your account is active. Booking data is retained for the duration of your subscription plus 90 days after account closure to allow for dispute resolution. You may request deletion of your data at any time by contacting us.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive credentials (API keys, tokens)
• Row-level security in our database to isolate business data
• PCI-compliant payment processing through Stripe (no card data on our servers)
• Rate limiting on public endpoints to prevent abuse

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Opt-out: Opt out of marketing communications at any time.

California residents (CCPA): You have the right to know what personal information we collect and how it is used, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

European residents (GDPR): You have additional rights including the right to restrict processing and to lodge a complaint with a supervisory authority.

8. Children's Privacy

Momentum is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@getmomentum.app