Privacy Policy
Last updated September 11, 2026
Who we are
BayFlow provides booking, lead-intake, and customer follow-up software for independent auto repair shops. When you send a service request through a shop's BayFlow booking page, BayFlow processes that request on the shop's behalf.
What we collect
From a service request: your name, phone number, optional email, vehicle year/make/model, a description of the problem, photos you attach, and any appointment time you request. We also store the shop's outcome records for that request (status such as new, time requested, showed, sold, or closed), the text thread, and the page source that brought you in (referrer, campaign tags, and Google click IDs when a shop's ads send them). A text that cannot be matched to one request is stored without attaching it to a lead. When the shop is known, that shop is alerted to review it. Opening a private request link sets an HttpOnly session cookie (bf_customer) for up to 7 days, or 24 hours for a reminder-link session.
Photos are reduced to JPEG files in your browser before upload and stored in that reduced form. A vehicle photo can include a license plate, a face, or a street. Do not attach documents you do not want the shop to keep.
Shop owners who request BayFlow setup give us a name, phone, and shop name so a founder can follow up. Stripe handles payment details on its hosted checkout when a shop starts a paid plan.
How we use it
To deliver your request to the shop you contacted and to send the messages you agreed to: a confirmation of your request, appointment reminders after the shop confirms a time, replies from the shop, and a review invitation after a completed visit. We do not sell your information. We do not run advertising to you from BayFlow. A shop may connect its own Google Ads conversion tag on its request page. That tag is the shop's advertising account, not BayFlow's.
Text messaging
Customer texts come from BayFlow's shared sender +1 (708) 670-9251 on an Android phone through SMSGateway. Every customer text names the shop. You receive those texts after checking the consent box. A shop may separately enable one automated reply to a missed call after that feature is connected and tested on its phone line. Message and data rates may apply. Consent is not a condition of purchase. Reply STOP to end BayFlow texts from that shared number, HELP for a help text, or START to resume after a STOP. STOP applies to the shared sender, not to only one shop.
The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Sharing
Your request is shared with the auto shop you contacted. That is the point of the service. Shop-alert texts go only to that shop's own operator phone. BayFlow does not send One Stop customer details to another shop's phone. One Stop shop-alert texts go to that shop's own operator phone, not the public BBB display number. One Stop's public BBB display number stays on the One Stop site only.
We use infrastructure providers to run the service: Netlify for hosting and photo storage, PostgreSQL for records, Google Fonts for page type, Stripe for shop billing, and SMSGateway plus the mobile carrier on the shared SIM for text delivery. Cloudflare proxies yaffoauto.com and may process technical request data for that site. If a shop turns on Text Assist, routine customer texts are sent to DeepSeek to draft a reply. BayFlow sends those texts only for a shop on the Text Assist plan with Active paid billing. We cannot delete copies DeepSeek may retain of texts already sent. We stop sending after a delete request.
Yaffo Auto Service currently also uses a separate conversation desk outside BayFlow. A BayFlow deletion does not reach that desk.
Deletion
You can ask the shop, or BayFlow, to delete your personal information from BayFlow at any time. We remove the live request, attached texts, review-invite link, and outbound message copies from BayFlow's records. Photos for a deleted request are queued and removed by the daily cleanup job. Outcome records can remain with personal fields cleared. STOP records stay as a hashed phone so we do not text you until you reply START. Carriers, device SMS history, and backups are outside that delete. To ask, contact the shop you requested or text PRIVACY and the shop name to +1 (708) 670-9251.
Contact
For privacy questions or a deletion request, contact the shop you requested or text PRIVACY and the shop name to +1 (708) 670-9251. If BayFlow cannot match the text to one request, it stays in the founder review queue instead of being sent to another shop. Reply HELP to any BayFlow text for the shared-number help message.
Plan prices, billing, the 30-day money-back guarantee, and cancellation are on the Terms page.