Privacy Policy

Effective and last updated: September 1, 2026

This Privacy Policy explains how Jamella Smith, a Delaware sole proprietor doing business as DetentionDesk ("DetentionDesk," "we," "us," or "our"), collects, uses, discloses, retains, and protects information when you use DetentionDesk, visit our website, make a purchase, or contact us.

1. Scope and operator

This policy applies to detentiondesk.com, the DetentionDesk web application, account and billing features, and support communications controlled by DetentionDesk. It does not govern a broker, customer, facility, payment processor, or other third party's independent use of information after you send it to that party.

2. Information we collect

Depending on how you use DetentionDesk, we may collect:

• Account information: email address, authentication identifiers, account status, and security-related session data.
• Carrier and business information: legal or trade name, business address, MC or USDOT number, contact name, email, phone number, and payment instructions entered for an invoice.
• Claim information: load and broker details, facility information, dates and timestamps, selected calculation rules, billing terms, calculated amounts, notes, claim status, follow-up activity, amount claimed, amount paid, outstanding balance, timer records, and evidence-checklist selections.
• User-provided and generated files: claim packets and supporting evidence uploaded to a claim, which may include shipping documents, rate confirmations, bills of lading, proof of delivery, receipts, screenshots, photos, facility records, and correspondence, plus the account and claim identifiers used to store and retrieve them.
• Payment and subscription information: for paid purchases and subscriptions, Stripe customer and checkout identifiers, selected plan, payment or subscription status, receipt and refund details, and limited card information Stripe makes available, such as card brand and last four digits. DetentionDesk does not receive or store full payment-card numbers or card security codes.
• Support and communications: messages and other information you send when requesting help or contacting us.
• Technical and usage information: IP address, browser or device type, operating system, requested pages, timestamps, security events, and error or diagnostic information collected by us or our hosting and infrastructure providers.
• Browser drafts: an unfinished claim draft may be kept in local browser storage for the signed-in account on that browser.

The evidence checklist records included, missing, or not-applicable selections separately from uploaded evidence. DetentionDesk stores and organizes supported files but does not inspect, authenticate, certify, or determine the legal sufficiency of the content.

3. Sources of information

We collect information directly from you; automatically when you use the website or application; and from providers that support authentication, hosting, payments, fraud prevention, email, and security. We may also receive information from a person authorized to administer an account or submit a claim for a carrier.

4. How we use information

We use information to:

• create, authenticate, support, and secure accounts;
• calculate detention using the inputs and rules selected by the user;
• save owner-scoped claim records, timer data, checklist statuses, uploaded evidence, generated packets, receivables fields, and follow-up activity;
• process purchases, subscriptions, cancellations, receipts, disputes, and refunds;
• respond to support and privacy requests;
• operate, maintain, troubleshoot, and improve the service;
• detect fraud, abuse, security incidents, and violations of our Terms;
• comply with legal, tax, accounting, regulatory, and recordkeeping obligations; and
• send service communications and, where permitted, marketing messages that include an available opt-out method.

We do not use customer claim information or submitted business data to train public or general-purpose artificial intelligence models.

5. How we disclose information

We may disclose information to these categories of recipients:

• Supabase for authentication, database, and private generated-file storage services;
• Stripe for checkout, billing, receipts, refunds, subscription management, and fraud prevention;
• Vercel for application hosting, delivery, operational logs, and platform security;
• Email, support, and monitoring providers used to operate and maintain the service;
• Professional advisers such as attorneys, accountants, insurers, or auditors when reasonably necessary;
• Authorities and protective parties when required by law or reasonably necessary to protect rights, safety, property, and service security; and
• A successor organization in connection with a merger, financing, acquisition, reorganization, or transfer of all or part of the business.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising. We will update this policy before using personal information in a materially different way where notice is required.

6. Your sharing of claim content

You decide whether to download, print, email, or otherwise share a generated packet, invoice, or claim message. If you provide information to a broker, customer, facility, lawyer, insurer, or other recipient, that recipient's handling of the information is governed by its own practices. Review claim content before sharing it and avoid including unnecessary sensitive personal information.

7. Cookies, local storage, and tracking choices

DetentionDesk and its providers use cookies, browser storage, and similar technologies needed for authentication, session security, account preferences, browser drafts, fraud prevention, service delivery, and diagnostics. Blocking required cookies or storage may prevent account and claim features from working.

DetentionDesk does not currently use third-party advertising cookies or collect browsing activity across unrelated websites for behavioral advertising. Because we do not perform that cross-site advertising activity, the service does not change its behavior in response to a browser "Do Not Track" signal. Infrastructure providers may receive limited technical information when their services deliver or secure DetentionDesk, but they are not authorized by us to use claim data for cross-context behavioral advertising.

8. Retention and deletion

We retain information for as long as reasonably necessary to provide the service, maintain transaction and business records, resolve disputes, enforce agreements, protect users and the service, and meet legal obligations. Account and claim information is generally retained while an account is active and for a reasonable period afterward. Uploaded evidence and generated claim packets generally follow the retention and deletion treatment of the related account and claim. Billing, tax, security, and fraud-prevention records may be retained longer when law or legitimate business needs require it.

Browser drafts remain on a device until replaced, cleared through the service or browser, or removed by the user. Deleted information may remain temporarily in provider backups, security logs, or records that must be preserved. We may retain aggregated or deidentified information that no longer reasonably identifies a person or customer.

9. Security

We use administrative, technical, and organizational safeguards designed for the nature of the service. Current measures include authenticated access, owner-scoped database row-level access policies, private generated-file and uploaded-evidence storage, HTTPS connections, server-side secret handling, verified Stripe webhook signatures, and restricted administrative access. No online service can guarantee absolute security.

Read our Security & Data Practices page for a plain-language description of these controls, user responsibilities, and how to report a suspected issue.

10. Your choices and privacy requests

You may ask to access, correct, export, or delete personal information associated with your account by emailing hello@detentiondesk.com. Include "Privacy Request" in the subject line and describe your request. We may verify your identity, account access, state of residence, and authority to act for another person before responding. We may deny or limit a request when permitted by law and will explain the applicable reason.

Marketing emails will include an unsubscribe method. You may still receive transactional or service communications, including security, receipt, billing, and account notices.

11. U.S. state privacy rights and appeals

Residents of certain U.S. states may have additional rights to access, correct, delete, or obtain a portable copy of personal information; to opt out of certain sales, sharing, targeted advertising, or profiling; and to appeal a denied request. These rights depend on the applicable law, legal thresholds, and exceptions. DetentionDesk does not currently sell personal information or use it for cross-context behavioral advertising.

Submit a request using the contact information below and identify your state of residence. To appeal a decision, reply to our response with "Privacy Appeal" in the subject line. We will not discriminate against you for exercising an applicable privacy right.

12. Children's privacy

DetentionDesk is a business-use service for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children through the service. Contact us if you believe a child has provided information.

13. International processing

DetentionDesk is operated from the United States. Information may be processed and stored in the United States and other locations where our service providers operate, subject to applicable law. Where a law requires a legal basis for processing, we rely as applicable on performance of a contract, legitimate interests in operating and securing the service, compliance with law, and consent.

14. Changes to this policy

We may update this Privacy Policy as the service and legal requirements change. We will post the revised policy on this page, update the date at the top, and provide additional notice of material changes when required by law. Earlier versions may be requested using the contact information below.

15. Business and privacy contact