Skip to content

Privacy Policy

CLEANERHQ / LEGAL / PRIVACY
DOCUMENT · LEGAL · 001

Privacy Policy.

The full story of what CleanerHQ collects, why we collect it, where it goes, and what you can do about it. No dark patterns. No data sale. Plain language where the law allows it.

ENTITYCleanerHQ LLC JURISDICTIONUnited States VERSIONv2026.03 PAGES13 sections
POLICY ACTIVE · MARCH 9, 2026 READ TIME · 9 MIN 13 SECTIONS · 1 TABLE · 1 RETENTION SCHEDULE
SEC/01

Introduction

CleanerHQ LLC (“CleanerHQ,” “we,” “us,” or “our”) operates the business management platform at app.cleanerhq.com and the marketing website at cleanerhq.com. This policy explains how we collect, use, disclose, and protect your information when you use the Service.

USER TYPE01

Workspace Owners & Staff

Cleaning business operators who manage their business, jobs, crews, and books inside CleanerHQ.

USER TYPE02

Clients

End customers of those cleaning businesses, interacting via the client portal, payment pages, and SMS notifications.

SEC/02

Information we collect.

2.1Account information

When you register or are added as a contact, we collect:

  • Full name
  • Email address
  • Phone number
  • Business name and address (Workspace Owners)
  • Role within the workspace (Owner, Staff)

2.2Business operations data

Workspace Owners and Staff input the following into the platform:

  • Customer / client records (names, addresses, phone numbers, emails)
  • Job details (service type, scheduling, checklists, completion status)
  • Quotes and proposals
  • Invoices and payment records
  • Equipment and inventory records
  • Team member information, timesheets, and payroll data
  • Internal chat messages

2.3Location data

With consent, the mobile app and field crew features collect:

  • GPS coordinates — used for geofence-based clock-in/out validation, route optimization, and “On My Way” notifications.
  • Background location — used for real-time crew tracking during active jobs (field crew app only).
i

Location data is only collected when a crew member is actively clocked in or using navigation features. Outside of those moments, location services are off.

2.4Files and photos

Users may upload job-site photos (before/after), documents and attachments, and profile photos. Files are stored securely via Vercel Blob Storage.

2.5Communication data

  • SMS messages sent through the platform (appointment reminders, job updates, invoice notifications)
  • In-app chat messages between team members
  • Email notifications sent through the platform
  • Translated messages (for multilingual team communication)

2.6Payment information

  • CleanerHQ subscriptions: billing is handled by Polar. We store your Polar customer ID but do not store payment card details.
  • Client payments: processed through the Workspace Owner’s connected Stripe account (“Bring Your Own Stripe”). Stripe credentials are encrypted with AES-256-GCM. We do not access, store, or process your Clients’ credit card numbers.

2.7Automatically collected

  • IP address (rate limiting and security)
  • Browser type and device information
  • Pages visited and actions taken within the app (via Vercel Analytics)
  • Authentication session data (stored in secure, HTTP-only cookies)
SEC/03

How we use it.

We use collected information to:

  • Provide the Service — manage jobs, scheduling, invoicing, payments, and customer communications.
  • Send transactional SMS / text messages — appointment reminders, on-my-way alerts, job completion notices, invoice reminders, and review requests (see Section 6).
  • Process payments — facilitate subscription billing and customer-facing invoice payments.
  • Optimize operations — route optimization, scheduling conflict detection, crew load balancing, and profitability tracking.
  • AI-powered features — generate proposals and process natural language commands via the copilot assistant.
  • Translate messages — provide real-time translation for multilingual team communication.
  • Ensure security — detect unauthorized access, enforce multi-tenant data isolation, and prevent abuse.
  • Send service communications — account notifications, system updates, and security alerts via email.
SEC/04

How we share it.

NO
SALE

We do not sell, rent, or trade your personal information.

Data is shared only with the service providers below, solely to operate the platform. Each vendor receives the minimum data they need to do their job.

We share data only with the following categories of service providers, solely to operate the platform:

SUBPROCESSOR REGISTER · v2026.039 ENTRIES
PROVIDERPURPOSEDATA SHARED
SBSupabase
Database hosting & authentication
All platform data (encrypted at rest)
STStripe
Payment processing (Workspace Owner’s account)
Invoice amounts, customer billing details
SPSMS provider
SMS delivery
Phone numbers, message content
RSResend
Email delivery
Email addresses, notification content
GMGoogle Maps
Route optimization, geocoding
Job site addresses, GPS coordinates
VCVercel
Application hosting, file storage, analytics
Application data, uploaded files, page views
DLDeepL
Message translation
Chat message content (for translation only)
PLPolar
Subscription billing
Workspace Owner email, subscription status
INInngest
Background job processing
Job IDs, notification triggers (no PII in payloads)
FULL DPA AVAILABLE ON REQUEST9 SUBPROCESSORS · 0 RESELLERS

4.1AI processing

AI MODEL USAGE · CURRENT MAP

PROPOSALS
OpenAI (GPT-4o-mini) via Vercel AI Gateway — generates service proposals from quote data.
COPILOT
Anthropic (Claude) — processes natural language commands for job / schedule management.

AI-processed data is sent only to fulfill the specific request and is not used to train third-party AI models.

We may also disclose information if required by law, to protect our rights, or to prevent fraud or security threats.

SEC/05

Data isolation & security.

5.1Multi-tenant isolation

CleanerHQ is a multi-tenant platform. Every database query is scoped to your workspace. Row-Level Security (RLS) policies enforce that no workspace can access another workspace’s data.

5.2Security measures

TLS
Transit + restAll data encrypted in transit (TLS/HTTPS) and at rest.
AES
Stripe credentialsAES-256-GCM with PBKDF2 key derivation.
SES
SessionsSecure, HTTP-only auth cookies; no client-side tokens.
RL
Rate limitingLogin, API endpoints, and SMS sending throttled.
HDR
Security headersX-Frame-Options, X-Content-Type-Options, Referrer-Policy, HSTS, Permissions-Policy.
API
Mobile APIBearer token authentication.
MW
DeactivationDeactivated users blocked at the middleware level.
RLS
Row-level securityPostgres RLS enforced on every workspace-scoped table.

5.3Public token-based pages

Certain pages (payment tracking, job tracking, review submission, public proposals) are accessible via unique, unguessable URL tokens without authentication. These tokens do not expose data beyond the specific record they reference.

SEC/06

SMS / text privacy.

6.1What we collect

When you receive SMS messages from CleanerHQ, we collect and store:

  • Your phone number
  • SMS consent status and timestamp
  • Opt-out status
  • Message delivery status (queued, sent, delivered, failed)
  • SMS usage logs (message SID, direction, cost)

6.2SMS consent

SMS consent is collected through:

  • The CleanerHQ client portal (web form)
  • Embedded booking widgets on cleaning provider websites
  • Service agreements managed by your cleaning provider

You may opt out at any time by replying STOP to any message. See our Terms and Conditions for full SMS terms, or our SMS Consent & Opt-In Disclosure page for the full opt-in flow.

6.3TCPA compliance

Consent firstWe only send SMS to recipients who have provided consent.
Honor opt-outSTOP is honored immediately and permanently.
Quiet hoursSending restricted to 8:00 AM–9:00 PM recipient local time.
Pre-send checkOpt-out status verified before every message.
!
Emergency safety alerts (SOS)SOS alerts may be sent outside normal hours when safety requires it.

6.4 & 6.5SMS data sharing

NO
SHARE

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

Phone numbers and message content are shared only with our SMS delivery provider for the sole purpose of delivering messages. SMS opt-in data and consent records will not be sold or transferred to lead generators. All categories of personal information described elsewhere in this Privacy Policy exclude text-messaging originator opt-in data and consent.

6.6Brand entity

SMS messages under this program are sent by CleanerHQ LLC (the legal entity registered with The Campaign Registry for A2P 10DLC), operating the cleanerhq.com brand and the app.cleanerhq.com platform.

SEC/07

Cookies

CleanerHQ uses cookies strictly for:

  • Authentication — Supabase session cookies to maintain your login.
  • Analytics — Vercel Analytics for anonymous page-view tracking.

We do not use advertising cookies, tracking pixels, or third-party marketing cookies.

SEC/08

Data retention.

How long we keep each category of data:

RETENTION SCHEDULE · v2026.037 CATEGORIES
DATA TYPEPERIOD
Account & workspace data
Subscription + 30 days
Job & invoice records
Duration of subscription
SMS logs & delivery records
12 months
SMS opt-out records
Indefinite
Authentication tokens
Cleaned daily (cron)
Uploaded files & photos
Duration of subscription
Analytics data
Per Vercel policy
OPT-OUT RECORDS NEVER EXPIREBUSINESS RECORDS RETAINED FOR LEGAL COMPLIANCE
SEC/09

Your rights.

Depending on your jurisdiction, you may have the right to:

RIGHT · 01Access — request a copy of the personal data we hold about you.
RIGHT · 02Correction — request correction of inaccurate data.
RIGHT · 03Deletion — request deletion (subject to legal retention requirements).
RIGHT · 04Portability — request your data in a machine-readable format.
RIGHT · 05Opt out of SMS — reply STOP or update preferences in the client portal.
RIGHT · 06Withdraw consent — for location tracking or other consent-based processing.

Exercise a right.

Email support@cleanerhq.com — we respond within 30 days.

SEC/10

Children’s privacy

CleanerHQ is a business management platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

SEC/11

International data

CleanerHQ is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.

SEC/12

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The “Last Updated” date at the top reflects the most recent revision.

SEC/13

Contact us.

For privacy inquiries, data requests, or concerns:

CleanerHQ Privacy.

EMAIL · support@cleanerhq.com
WEB · cleanerhq.com

Have questions about your data?

WE’RE HAPPY TO ANSWER ANY QUESTIONS ABOUT HOW WE HANDLE YOUR INFORMATION.