Privacy policy
This explains what CleaningCalc collects, why, and who else sees it. Edishouse LLC is the data controller for your account; you are the controller for your own customers’ details, and we process those on your behalf.
What we collect
- Your account. Email address, and the sign-in records needed to keep the account secure. There is no password — signing in uses a link sent to your email.
- Your business. Company name, contact details, address, logo, brand colour and the proposal wording you write.
- Your cost settings. Wage, headcount, targets, productivity and the statutory rates you confirm. These describe how you run your business and are visible only to you.
- Your customers and quotes. The names, contact details and addresses you enter for the people you quote, and the quotes themselves.
- Billing. Subscription status, renewal dates and a Stripe customer reference. We never see or store your card number — it goes directly to Stripe.
What we do not do
- We do not sell your data, and we do not share it with advertisers.
- We do not use your cost settings, prices or customers to train anything.
- We do not use advertising or analytics cookies. The only cookie is the one that keeps you signed in.
- We do not pool your figures with other subscribers’, or publish them in any form.
Why we hold it
To provide the service you are paying for, to take payment, to keep the account secure, and to meet accounting obligations. The legal bases are performance of our contract with you, and our legitimate interest in running the service securely.
Who processes it
- Supabase — hosts the database, file storage and sign-in emails. Your account data and quotes live here.
- Stripe — takes payments and holds card details. We receive only the subscription status and a customer reference.
- Our hosting provider — serves the application. It processes requests but does not store your data separately.
These providers may process data outside your country. Where that happens, transfers rely on the standard contractual protections those providers publish.
Your logo is public
Logos are stored in a public bucket so they can appear on a proposal without a signed link. Anyone with the exact URL can view the image. Do not upload anything confidential as a logo.
How long we keep it
- While your account is open — for as long as you keep it.
- After you close it — deleted from live systems immediately. Closing the account is something you do yourself, and it takes effect at once rather than after a waiting period. Backups age out on their own cycle, normally within 90 days.
- Invoices and payment records — kept as long as tax law requires, typically six to seven years. This is a legal obligation and survives account deletion.
Your rights
Depending on where you live, you can ask for a copy of your data, correct it, delete it, restrict how it is used, object to processing, or receive it in a portable form. The first, the last and the deletion you can do yourself under Account without asking us — a download of everything the account holds, and a button that closes it. For the rest, write to us and we will respond within 30 days. You may also complain to your data protection authority.
Security
Data is encrypted in transit and at rest. Access between accounts is enforced at the database level rather than only in the application, so one subscriber’s query cannot return another’s rows. We keep the number of people with production access small.
No system is perfect. If a breach affects you we will tell you and the relevant authority within the time the law requires.
Children
The service is for businesses and is not intended for anyone under 18.
Contact
Data protection enquiries go to info@edishouse.com.