Privacy Policy

You provide:

• Account: name, email, password (stored hashed by our auth provider), role (host or cleaner), language preference, optional profile photo.
• Business data you enter: properties (name, optional address, and optional entry or access information such as an access method or entry code), cleaning rates, invoices and line items, notes, your host–cleaner working relationships, and a contacts directory (names and optional contact details of the homeowners and clients you work with, including people who may not have a CleanSlate account).
• Calendar connections (short-term rentals): the iCal link(s) you connect (stored encrypted) and the booking entries we read (read-only) from your Airbnb, VRBO, Booking.com, or other calendars. We use the check-in and checkout dates to build your invoice drafts, and invoices identify the property and date, never the guest. Some calendars also include guest details: a first name from VRBO, and from Airbnb a link to your own reservation. We store these so you and your cleaner can see who is arriving. You can also add a guest’s name, the number of guests, and whether they have pets yourself. That Airbnb link is only ever shown on the host side, never to a cleaner.
• Manually entered cleanings (regular or residential): for non-STR cleaning there is no calendar — you enter each cleaning’s date yourself, and we build invoice drafts from those entries.

Usage analytics and session replay (via PostHog) — input fields are masked in your browser or app before anything is sent, and we use it only to test, debug, and improve the product (never for advertising or profiling). Plus crash and error diagnostics (via Sentry), basic device/log/IP data, and push-notification tokens (if you enable notifications).

To provide the service (sync calendars, generate, submit, and approve invoices, process payments), send the notifications you opt into, provide support, keep the service secure and prevent abuse, improve the product, and meet legal and financial-record obligations.

CleanSlate connects a cleaner and a host, so each side sees the shared information needed to work together: a cleaner enters — and the linked host sees — property, schedule, and invoice details; a host’s approval and payment status is visible to the cleaner.

In other words, you are entering and viewing information about the other party you work with. Only the people in your account (and any teammates you invite) can see that account’s data — no other account can.

Service providers (sub-processors) that run the product on our behalf. We name them and keep this list current:

• Supabase — database, authentication, file storage
• Vercel — application hosting
• Stripe — payment processing and cleaner payouts
• Resend — transactional email
• PostHog — product analytics and session replay
• Sentry — error monitoring
• Google Firebase Cloud Messaging — push notifications
• Upstash — rate limiting / abuse prevention
• Intuit (QuickBooks) — only if you connect it, to sync your invoices to your accounting, at your direction
• Xero — only if you connect it, to sync your invoices to your accounting, at your direction
• We may also share information for legal reasons (to comply with law or protect rights and safety) and in a business transfer (merger or acquisition). We do not sell your personal information, and we do not use it for third-party advertising or retargeting.

Payments are processed by Stripe. We do not store full card or bank numbers. We retain payment records (amount, method, date, status) and, for cleaners who connect Stripe, payout-account status.

If you opt in, we send push notifications via Firebase Cloud Messaging (mobile app) or web push (browser). You can turn them off anytime in the app or your device settings.

We keep your data while your account is active. When you delete your account (in the app, or by emailing us), we permanently remove your login and personal profile — name, phone, address, avatar, preferences, push tokens, connected-calendar URLs, and the properties and bookings you set up. This is permanent and immediate; there is no recovery.

What we keep, and why:

• Issued invoices and payment records (amounts, dates, status, and the names of the parties on the invoice) are kept as financial records we’re required to retain for tax purposes — for up to seven (7) years — after which they are purged. A valid invoice must identify the parties, so the other party’s name remains on invoices you were part of. We keep the invoice record and the receipt or photo attachments you added to it as supporting documentation; we do not keep other personal data beyond what these records require.
• If you close your account and you had open invoices, we notify the other party (the host or cleaner you were working with) so their records stay accurate, and those invoices show that the account was closed.
• Limited security and audit logs (including IP address) are retained for a defined period for fraud-prevention, security, and legal-compliance purposes, then deleted.
• Pseudonymous analytics and crash diagnostics (via PostHog and Sentry) may be retained under those providers’ standard retention periods to keep the app working; they are not used to identify you after deletion and are not sold or used for advertising.
• Owner accounts: if you are the sole owner of an account that still has other members, you’ll be asked to remove those members or transfer the account first (so we don’t delete data other people rely on). If you can’t, email hello@thecleanslateapp.com and we’ll complete your deletion for you. We do not keep your data for marketing after you leave.

Data is encrypted in transit (TLS), connected iCal links are encrypted at rest, and accounts are isolated so one account cannot access another’s data. No system is perfectly secure, but we work to protect your information.

You can access, correct, export, or delete your information — in the app or by emailing hello@thecleanslateapp.com.

U.S. state privacy rights (for example, California / CCPA): if you live in a U.S. state with a privacy law, you may have the right to know what personal information we collect and why, request a copy, request correction or deletion, and opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information for advertising, so there is nothing to opt out of, but you can exercise the other rights by emailing us. We will not discriminate against you for exercising these rights. Deletion may be limited where we must retain records by law. We honor the Global Privacy Control (GPC) browser/device signal as an opt-out preference signal where required by law, though as noted, we have no “sale” or “sharing” of personal information to opt out of today.

EU/UK (GDPR): where applicable, you have rights of access, rectification, erasure, restriction, portability, and objection; contact us to exercise them.

We operate in the United States; if you use CleanSlate from elsewhere, your information is processed in the U.S.

CleanSlate is a business tool not directed to children and is not intended for anyone under 18.

We may update this policy; we’ll post the new effective date here and, for material changes, notify you in the app or by email.

Reverie Ventures LLC · hello@thecleanslateapp.com