Privacy Policy

Account details — name, email, and password (stored as a salted hash, never in plain text), plus an optional profile photo.

Workforce records — rosters, clock-in and clock-out times, breaks, checklists, site audits, forms, chat messages and photos entered by a workspace's team. This data belongs to the business running the workspace; we process it on their behalf.

Location — a single GPS reading at the moment of clocking in or out (with the device's permission), used to confirm the clock action happened at the work site. The app does not track location continuously or in the background.

Booking enquiries — if you submit a clean request on a business's public booking page, the details you enter go to that business.

To provide the Service: showing rosters, computing timesheets, verifying on-site clock-ins, delivering notifications you opt into, and emailing invitations and account messages. We also use aggregate, de-identified usage data to improve the product. We do not sell personal information, and we don't use it for third-party advertising.

Customer data is stored with Supabase in Sydney, Australia. Our application runs on Vercel with compute pinned to Sydney. Some service providers we rely on process limited data overseas: Stripe (payments — we never see full card numbers), Resend (transactional email), and Google Workspace (our own mailbox). Each is bound by its own privacy and security commitments.

Workspace data is kept while the subscription is active. When a workspace closes we retain its data for 60 days, then delete it from live systems. Businesses can request earlier deletion, or an export, at any time.

Every workspace's data is isolated with database-level row security, enforced independently of the application code. Access is over HTTPS only. Passwords are hashed, payment details are handled entirely by Stripe, and file storage is scoped per workspace.

You can access or correct your personal information. Crew members: your employer administers your workspace, so start with them for roster and timesheet records; for anything else contact us. If you have a privacy concern, email crew@yourcleaningcrew.app and we'll respond within 30 days. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

If we make material changes to this policy we'll notify workspace administrators by email and note the new effective date here.