Privacy Policy

    Last updated: August 21, 2026

    1. Introduction

    CleaningInsytes ("we", "us", "our") operates the CleaningInsytes platform at cleaninginsytes.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

    2. Information We Collect

    Account Information

    • Name, email address, phone number
    • Company name and business details
    • Authentication credentials (passwords are hashed and never stored in plain text)

    Business Data

    • Customer and lead information you enter
    • Booking and service records
    • Financial transactions and revenue data
    • Provider/employee information

    Financial Data via Plaid

    If you choose to connect a financial account through Plaid, Inc., we may receive transaction data, account balances, and account holder information. We access this data only after you provide explicit consent and only for the purposes described in this policy. Plaid's own privacy policy is available at plaid.com/legal.

    Financial Data via Stripe

    If you choose to connect your business's Stripe account - either by installing the CleaningInsytes app from the Stripe App Marketplace or by providing a read-only restricted API key - we receive read-only access to your Stripe balance transactions, charges, refunds, payouts, customer names and email addresses, and connected-account business names. We use this data solely to build your profit & loss ledger and reports inside CleaningInsytes. We never initiate charges, refunds, payouts, or any other changes in your Stripe account, and you can revoke access at any time by disconnecting Stripe in CleaningInsytes or uninstalling the app from your Stripe Dashboard. Stripe's own privacy policy is available at stripe.com/privacy.

    Google Ads & Local Services Ads Data

    If you choose to connect your Google Ads account, CleaningInsytes accesses your Google Ads data through the Google Ads API, only after you grant permission via Google's OAuth consent screen. We access: your Local Services Ads leads (including the consumer's name and phone number, lead type, and lead status), lead conversation records (message text and phone call details such as duration and recording links), your Google Ads account identifiers, and daily Local Services campaign spend. We use this data solely to display your own leads, conversations, and advertising performance inside your CleaningInsytes account and to generate your business analytics. If you rate or flag a lead in CleaningInsytes, we submit that feedback to Google on your behalf at your direction; we make no other changes to your Google Ads account.

    CleaningInsytes' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties except as necessary to provide the features described above, to comply with law, or as part of a merger or acquisition with prior notice to you. Human access to this data is limited to what is necessary for security, support you request, or legal compliance. You can revoke our access at any time by disconnecting Google Ads on the Integrations page or via your Google Account permissions; upon disconnection we delete the stored credentials and the imported Google Ads lead and spend records.

    Automatically Collected Data

    • Browser type and version
    • Pages visited and usage patterns
    • IP address and approximate location

    3. How We Use Your Information

    • Provide, operate, and maintain the CleaningInsytes platform
    • Display business analytics dashboards and reports
    • Process financial data to generate profit/loss insights
    • Send transactional emails (e.g., viewer invitations, password resets)
    • Improve our services and develop new features
    • Detect and prevent fraud or abuse

    4. Third-Party Services

    We share your data only with the following third-party services as necessary to operate the platform:

    • Plaid, Inc.: Financial account connectivity and transaction data retrieval (only when you connect a financial account)
    • Stripe, Inc.: Subscription billing and payment processing; read-only financial data retrieval when you connect your own Stripe account for profit & loss reporting
    • Google LLC: Google Ads API access for importing your Local Services Ads leads and campaign spend, and Google OAuth for sign-in (only when you connect the corresponding Google service)
    • Lovable Cloud (Supabase): Database hosting, authentication, and backend infrastructure
    • Amazon Web Services (AWS): Email delivery via SES

    We do not sell, rent, or trade your personal information to any third party for marketing purposes.

    5. Data Security

    • Encryption in Transit: All data transmitted between your browser and our servers uses TLS 1.2 or higher
    • Encryption at Rest: All database data is encrypted using AES-256 encryption
    • Multi-Factor Authentication: TOTP-based MFA is enforced for all user accounts
    • Role-Based Access Control: Access to data is restricted based on user roles (owner, admin, staff, viewer)
    • Audit Logging: Administrative actions are logged for security monitoring

    6. Data Retention & Deletion

    We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and all associated data at any time through the Settings page. Upon deletion:

    • All company data (customers, bookings, financial records, providers) is permanently deleted
    • Deletion cascades to all related records automatically
    • Backups containing deleted data are purged within 30 days
    • We may retain anonymized, aggregated data that cannot identify you

    7. Your Rights

    Depending on your jurisdiction, you may have the right to:

    • Access: Request a copy of the personal data we hold about you
    • Correction: Request correction of inaccurate data
    • Deletion: Request deletion of your data (see Section 6)
    • Portability: Request your data in a structured, machine-readable format
    • Objection: Object to certain processing of your data
    • Withdrawal of Consent: Withdraw consent for financial or Google Ads data access at any time by disconnecting the account on the Integrations page

    To exercise any of these rights, contact us at support@cleaninginsytes.com.

    8. Cookies

    We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party advertising cookies.

    9. Children's Privacy

    CleaningInsytes is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

    11. Contact Us

    If you have questions about this Privacy Policy, please contact us at: support@cleaninginsytes.com