Draft for legal review. This page has not been reviewed by a lawyer yet. It describes how the service works today and will be replaced by the reviewed version before launch.

Privacy Policy

Draft of October 24, 2026

This policy explains what personal data [COMPANY LEGAL NAME] ("we") handles inBookleen, why, and the choices you have. It covers two groups: people who use the service for a cleaning business, and the customers who book with those businesses.

1. If you use Bookleen for your business

We collect your name, email, phone number, business details, sign-in activity and billing information to provide the service, keep accounts secure, bill you and support you. Card details for your subscription go straight to our payment processor; we never see them.

2. If you booked with a cleaning business

The business you booked with decides what it collects and why; we process that data for the business, on its instructions. This usually includes your name, contact details, address, the services you chose, the time of your visit, notes and photos you send, and how you agreed to be contacted. Door or lockbox codes are encrypted and shown to the cleaner only on the day of the visit. For questions about your booking or your data, contact the business; we will help them answer you.

3. How we use data

• To run bookings, schedules, messages, payments set-up and records.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations, such as tax and fraud prevention.

We don't sell personal data, and we don't use a business's customer data for our own marketing.

4. Service providers

We use these providers to run the service, each bound to protect the data:

• Hetzner (servers)
• Cloudflare (network protection and file storage)
• Postmark (email delivery)
• Twilio (text messages, when a business turns them on)
• Stripe (our subscription billing)
• Google (turning a ZIP or postcode into a location for service areas)
• Intuit QuickBooks (only when a business connects it)

A business's own payment provider (for example Stripe or Square) processes its customers' payments under that provider's privacy policy.

5. How long we keep data

We keep data while the business's account is open. When an account is closed, its data is deleted after the notice period shown in the app, and removed from backups as they expire, within 30 days. Businesses can erase a customer's personal data at any time.

6. Security

Data is encrypted in transit, sensitive fields (such as access codes and connection keys) are encrypted at rest, each business's data is kept separate, access by our staff is limited and logged, and the database is backed up nightly with regular restore tests.

7. Your rights

Depending on where you live (for example California under the CCPA), you can ask to see, correct, delete or get a copy of your data. Business users can do most of this in the app; booking customers should ask the business first. You can also write to [PRIVACY EMAIL].

8. Changes and contact

We'll post changes here and tell business users about important ones. Contact: [PRIVACY EMAIL], [COMPANY LEGAL NAME], [COMPANY POSTAL ADDRESS].