Xelshard LLC ("DSD," "we," "us") operates the Driving School Desk platform. This Privacy Policy explains how we collect, use, and protect personal information for Subscribers (driving school owners), Authorized Users (staff and instructors), End-Customers (students booking through the platform), and visitors to our marketing site.
SMS / mobile information (required disclosure): We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes. Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates for any reason.
1. Information We Collect
From Subscribers at Sign-Up
- Business name, address, owner name, email, and phone
- EIN / Business Tax ID (optional at sign-up)
- Selected subscription plan and time zone
- IP address and device info (for security audit logging)
From Authorized Users (Staff & Instructors)
- Name, email address, role, login timestamps
- Schedule preferences and time-off requests
From End-Customers (via Booking Form)
- First name, last name, email address, phone number
- Service, date/time, instructor preference, booking notes
- SMS consent status (opt-in and opt-out timestamps)
What We Do NOT Collect
- Full payment card numbers (handled by Stripe — we store only last 4 digits)
- Government-issued ID numbers
- Biometric data or sensitive health information
2. How We Use Information
- Provide, operate, and improve the Service
- Process payments and manage subscriptions
- Send booking confirmations and appointment reminders
- Send onboarding emails and product tips (opt-out available)
- Security — fraud prevention, CAPTCHA, rate limiting
- Tax compliance and invoicing
- Respond to support requests
We do not sell personal information to third parties for advertising.
3. SMS & Text Messaging Program
Program: Driving School Desk (operated by Xelshard LLC) sends automated SMS text messages to students who book driving lessons through the Driving School Desk platform — including booking confirmations, lesson reminders, schedule changes, and post-lesson feedback requests. Message frequency varies based on your booking activity. Message and data rates may apply. You can reply STOP at any time to cancel, or HELP for assistance (or contact support@drivingschooldesk.com / (469) 405-4020).
How you opt in: You provide your mobile number on the Driving School Desk booking form (hosted on the drivingschooldesk.com domain and controlled by Driving School Desk) and affirmatively check an unchecked consent box agreeing to: “I agree to receive automated booking confirmations, reminders, and lesson follow-up texts from Driving School Desk (Xelshard LLC). Msg freq varies. Msg & data rates may apply. Reply STOP to cancel, HELP for help. Terms: drivingschooldesk.com/terms Privacy: drivingschooldesk.com/privacy.” Consent is never pre-checked and is not required to book. You can opt out at any time by replying STOP.
We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes. Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates for any reason.
4. Infrastructure & Service Providers
Text messaging originator opt-in data and consent (including your mobile phone number and SMS opt-in status collected for the Driving School Desk messaging program) will not be shared with any third parties or affiliates for any reason. We do not sell, rent, or provide that information to third parties or affiliates for marketing or promotional purposes.
We use contracted technical service providers to host and operate the platform (authentication, hosting, databases, payment processing, and message transmission). These providers process data only to perform services for Driving School Desk under our instructions. They are not marketing partners and are not authorized to use mobile numbers or SMS consent for their own marketing or promotional purposes. Message transmission uses contracted delivery infrastructure operating solely under our instructions — this is not a sale or marketing disclosure of your number or consent.
| Provider role | Purpose | Location |
|---|---|---|
| Authentication | User identity & login | United States |
| Database hosting | Data storage | United States |
| Application hosting | Run the Service | United States |
| Message transmission | Deliver consented booking-related SMS under our instructions only | United States |
| Transactional email | Send email notifications | United States |
| Payment processing | Process subscription payments | United States |
| CDN / security | CDN, DDoS protection, CAPTCHA | United States / Global |
We may disclose data as required by law or to protect the safety of DSD, Subscribers, or others.
5. Subscriber Responsibilities
Subscribers (driving school businesses) use Driving School Desk to manage bookings. For the Driving School Desk SMS program, Driving School Desk (Xelshard LLC) collects end-customer mobile numbers and SMS consent on the Driving School Desk booking form and is the sender of those texts. Subscribers remain responsible for their own school websites, privacy notices about their business operations, and responding to end-customer data requests that relate to the Subscriber’s own records. Subscribers must not use the Service to send SMS outside the consented Driving School Desk messaging program or to override STOP requests.
6. Data Retention
| Data Type | Retention |
|---|---|
| Subscriber account and booking data | Active subscription + 60 days post-termination |
| Security audit logs | 2 years |
| Payment records (Stripe) | 7 years (tax/legal) |
| Email delivery logs | 90 days rolling |
| Server access logs | 1 year rolling |
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your personal information. California residents have additional rights under CCPA/CPRA. Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA effective July 1, 2024).
To exercise any right, email privacy@xelshard.com. We respond within 30 days.
8. Security
We implement TLS 1.2+ encryption in transit, AES-256 encryption at rest, Firebase Authentication, input sanitization, CAPTCHA on public forms, and rate limiting on all endpoints. In the event of a data breach affecting personal information, we will notify affected Subscribers within 72 hours.
9. Children's Privacy
The Service is a B2B platform. We do not knowingly collect personal information from individuals under 13. Subscribers who schedule driving lessons for minors are responsible for obtaining appropriate parental consent.
10. Changes to This Policy
Material changes are communicated by email at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.
11. Contact
Xelshard LLC — Privacy
2435 N Central Expy, 12th Floor, Richardson, TX 75080
Email: privacy@xelshard.com
Support: support@drivingschooldesk.com