Privacy Policy

CleanerFlow Pro is operated by CleanerFlow LLC, a California limited liability company based in San Diego, California. CleanerFlow LLC is the data controller for personal information handled on this platform. CleanerFlow is a software platform — not a cleaning company. We provide operational tools for cleaning businesses and professionals to run their operations.

For subscribers and managers: name, email, phone, business address, payment data (processed by Stripe), operational data (schedules, visits, clients, payments).

For cleaning professionals: name, phone, preferred language, location data (while the app is in use, and the arrival at the day's jobs described below), visit history, work notes and photos.

For end clients: name, phone, email, property address, service preferences, visit and payment history. If you request a quote on a company's page, we keep how you found that page with your request (see "How you found us"), and the company can see it. If you write to a company through the contact form on its page, we keep your name, e-mail and message so the company can reply to you; the company can see them.

If you save a card or bank account to pay a company, we keep only what identifies it for you: card brand, last 4 digits and expiration date, or bank name and last 4 digits. The full number stays with Stripe, which processes the payment on behalf of the company.

Visit rating. When you rate a cleaning, you can also say whether you would book the company again (yes, maybe or no). We keep that answer and its date with your rating, and the company sees it to improve its service. You can ask for a copy or for its deletion, like any other data of yours.

Sign in with Google or Apple. If you sign in with Google or Apple, we receive your name, your email and an identifier for your account with that provider, only to create and open your account. From Google we also receive your profile photo, which becomes your photo in the app. You can change or remove it at any time, and it is deleted along with your account. If you sign in with Apple and choose "Hide My Email", we receive a forwarding address created by Apple, not your real email. We do not receive your Google or Apple password. If you sign in with Apple, we also keep a technical code from Apple whose only use is to undo the link with Apple if you delete your account. We keep this data for as long as your account exists.

For site visitors: basic browsing data (Supabase Auth functional cookies and language preference cookie). We do not use third-party analytics or advertising cookies.

From everyone, on access: IP address, approximate country and region derived from the IP, your network operator number (a code such as 7018, which does not reveal your name or your plan), browser or device type, and app version. We use this for security, fraud prevention and abuse investigation, and to know where sign-ups come from. We do not store your postal code or coordinates. The access trail is kept for 180 days. The IP is also stored alongside terms acceptance, as proof of consent, for the life of that record.

How you found us. On your first visit, your browser notes where you came from, and we keep no more than this: the source, medium and campaign name the link itself carries (the "utm" tags — ChatGPT, for example, adds "chatgpt.com" on its own to the links it cites); only the name of the site you came from, such as google.com or chatgpt.com, never the full address or what you searched for; the page you landed on; and the date. If you typed our address yourself and there is no sign of where you came from, we keep nothing. We do not store ad-click identifiers. This record goes to your account when you sign up and to your request when you ask for a quote. On the app's introduction page we also count visits, clicks into the form and submissions, tied together by a random number that does not say who you are. It tells us which channels bring people to us. It is not advertising: we do not build a profile about you, we do not follow you across other sites, and we do not sell or share it.

Error reports. When the app fails, we receive a technical report: the screen, the type of error, the device model, the system version and the app version. The copy sent to Sentry, the service we use to find and fix errors, carries no screenshot, no name and no email, and Sentry deletes it within 90 days. The copy kept in our own system also notes which account was using the app, so we can help that person; we delete it after 90 days.

Notifications. If you allow notifications, we keep your device's push token, an identifier created by Apple or Google, so we can deliver them through Apple and Google Firebase. Signing out turns it off, and it is deleted with your account.

Arrival with the app closed (iPhone). If a cleaner allows "Always" location, the phone itself notices when the cleaner reaches the address of one of the day's jobs, even with the app closed, and shows a reminder to check in. The time of that arrival is shared with the cleaner's company when the app next runs. The app never checks in on its own, and we do not receive a continuous trail of anyone's movements.

Messages in the app. Messages exchanged inside the app between a company and its clients or team are kept so both sides can read them, for as long as the company's account exists.

Cleaning Assistant. When you ask the assistant something, your question, the last messages of the conversation and the account information needed to answer it (for example, the day's jobs) are sent to Anthropic, which generates the reply. The full conversation stays on your device. On our servers we keep the first 500 characters of each question, the size of the answer and a reduced form of your IP address, to prevent abuse; the reduced IP is erased after 180 days, and the questions are deleted with your profile.

W-9 forms. If a company asks you to fill out a W-9 through a CleanerFlow link, we keep your legal name, business name, tax classification, address, the type of your tax identification number (SSN or EIN) and only its last 4 digits, your typed signature and its date, and the IP address and browser used to sign, as proof of the attestation. We never keep the full number. The company that asked can see the form.

CleanerFlow Academy badge. If you, as the business owner, enter the code of your CleanerFlow Academy certificate, we keep it in your account and check it against the Academy's public verification page to show a badge on your quotes and invoices with your shortened name, the name of the certificate and its expiration date. If the certificate expires or is renewed with a new code, the badge disappears until you enter the new code. You can delete the code at any time.

We do not sell personal data. We do not share data with advertisers. We do not use one subscriber's data to benefit another.

CleanerFlow Pro does not sell, rent, share, disclose, or transfer SMS consent, phone numbers, or SMS opt-in data to third parties or affiliates for marketing or promotional purposes. SMS opt-in data is used only to provide CleanerFlow Pro account access, login verification, service notifications, scheduling updates, reminders, receipts, and customer support.

SMS confirmation. When you confirm, through the link we send you, that you agree to receive text messages from your cleaning company, we keep the date and time, the version of the text you saw, and the IP address of the device you used. This is the proof of consent U.S. law (TCPA) requires. We keep this record while your consent is active and for 4 years after it ends.

We send CleanerFlow news and offers emails only if you ask for them, by checking a box made for this, which comes unchecked and is separate from accepting the terms. Not asking changes nothing about your access. Every email of this kind has a one-click unsubscribe link that works without signing in. When you opt in or out, we keep the date, where you made the choice and the version of the text you saw, as a record of your choice.

These emails are sent by Mailmundo, CleanerFlow LLC's own email platform — the same company, not a third party — which runs on Amazon SES. Mailmundo receives only your email address, your name and your language. It records whether each email was delivered, whether you opened it and which links you clicked; when you open or click, it also records a reduced form of the IP address (without its last part), the type of device or browser, and the approximate country and state. We use this only to send these emails, know they arrived and learn what readers care about. We do not sell this data, we do not build advertising profiles, and we do not use it outside CleanerFlow.

The clients a company adds to CleanerFlow belong to that company and never go on these lists. System emails (sign-in, security, billing, quotes and receipts) still go out through Amazon Web Services and reach you even if you don't ask for news.

Your account and app data is stored in the United States (AWS us-east-2 via Supabase). If you are outside the US, your data is transferred to the US for processing. We ensure appropriate protections under applicable laws.

Active account data: retained while the account is active. Data after cancellation: retained for 90 days for possible reactivation, then deleted or anonymized. Payment data: retained as required by tax and accounting obligations (typically 7 years). SMS logs: retained for 12 months. Site visitor data: session cookies expire when the browser closes; language cookie expires in 1 year. How you found us, on an account: follows the account data period. How you found us, on a quote request: follows the request's period. Contact messages: follow the period of the company's account data. Visit counts on the app introduction page: 180 days. Error reports: 90 days. Cleaning Assistant questions: deleted with your profile; the reduced IP, after 180 days. Push token: turned off when you sign out, deleted with your account. In-app messages: follow the period of the company's account data. W-9 forms: follow the period of payment data. Record of the system's emails (address, type of email and whether it was delivered): 90 days. News and offers emails (delivery, opens, clicks, reduced IP and device): 12 months; after that only totals remain, with no one's data. The record that you opted in or out: while your account exists. An unsubscribe is kept for as long as needed to keep honoring it.

To exercise any of these rights, email support@cleanerflowpro.com. We respond within 30 days.

Partner program: if you arrive through a partner link, we use the cookies described at cleanerflowpro.com/partners/cookies (up to 90 days).

We do not load third-party analytics or advertising cookies (Google, Meta or anyone else), so there is nothing to accept or decline.

CleanerFlow Social is our internal publishing tool. It uses YouTube API Services to publish our own videos to YouTube channels owned by CleanerFlow LLC, and to reply to comments left on those videos.

By interacting with our YouTube channels you are also bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's Privacy Policy (http://www.google.com/policies/privacy) explains how Google handles data in these services.

What we receive and store: when you comment on one of our videos, the YouTube API gives us your public comment, its identifier, and your public display name. We store those three things, and we send the text of your comment to Anthropic to determine whether you are asking for a resource we offered in the video or whether the comment is abusive. We do not receive or store your email address, and we do not build advertising profiles. We keep this data for 180 days and then delete it.

What we do with it: if you comment the keyword we asked for, we reply with the material we promised. If a comment is abusive we hide it — hiding is reversible, and we never delete anyone's comment.

Only CleanerFlow LLC staff authorize this tool, and only against channels the company owns. There is no public sign-up and there are no third-party users.

You can revoke CleanerFlow's access to your Google account at any time at https://security.google.com/settings/security/permissions. To request deletion of a comment we stored, email support@cleanerflowpro.com.

CleanerFlow is not directed at anyone under 18. We do not knowingly collect data from minors.

Operational data entered by the subscriber (clients, properties, schedules, notes, payments) belongs to the subscriber. CleanerFlow is the processor, not the owner of that data. Upon cancellation, the subscriber may request a full data export before deletion.

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification. Continued use after notification constitutes acceptance.