Privacy Policy

1. Who we are

CleanersHub is operated by PRAXON LTD, a company registered in England and Wales, with its registered office at 148 New Fosseway Road, Bristol, BS14 9LJ, United Kingdom. In this policy “we”, “us” and “our” mean PRAXON LTD.

This policy covers everything we run under the CleanersHub name:

• this website, cleaners-hub.com;
• the web application at app.cleaners-hub.com;
• the CleanersHub mobile app for Android, used by cleaning teams in the field.

If you have any question about this policy, or want to exercise any of the rights described in it, write to contact@cleaners-hub.com.

2. Two different roles

CleanersHub is business software, so the same platform holds two kinds of personal data and our responsibility differs between them.

• Your business and its people. When a cleaning business signs up, we decide how the account, its users and its billing are handled. For that data we are the controller, and this policy describes what we do.
• The records that business enters. Its own clients, addresses, jobs, photos and invoices belong to the business. It decides what to collect and why; we only hold and process it on that business’s instructions. For that data the business is the controller and we are its processor. If you are a customer of a cleaning company that uses CleanersHub and you want your details corrected or removed, ask that company — they control the record, and we act on their instruction.

3. What we collect, and why

Account and identity

Name, email address, phone number and profile picture, from signing up with a password or with Google sign-in. We use them to create and secure the account, to identify who did what inside a workspace, and to contact you about the service. Where you sign in with Google we receive your name, email address and profile picture from Google — never your Google password.

Precise location

The mobile app asks for precise location so a team member can check in and out of a job at the address, and so the map opens where they are. It is collected only while the app is open and in use. We do not collect location in the background, we do not track anyone between jobs, and the permission can be refused or withdrawn in Android settings — the app still works, without the check-in and map-centring conveniences.

A check-in stores the coordinates and the time, so the business can show its own customer that the visit happened.

Camera and photos

The app uses the camera and photo library for before-and-after job photos and for expense receipts. Photos are uploaded to the workspace they were taken for and are visible to that business. We do not scan them for anything else.

Signatures

At the end of a job the customer can sign on the device to confirm the work. The signature is stored as an image against that job, as the business’s record that the work was accepted.

Work records

Clients, addresses, quotes, jobs, timesheets, expenses and invoices entered by the business, as described in section 2.

Technical

Our servers keep ordinary request logs — IP address, time, the page or endpoint requested, and a device or browser description. We use them to keep the service running and secure, and to investigate abuse or faults.

What stays on the device

Biometrics never leave your phone. If you unlock the app with a fingerprint, that check is performed by Android’s own prompt on the device. We never see, receive or store fingerprint or face data.

4. What we do not do

• We do not sell personal data, and we never have.
• We do not use your data, your photos or your clients’ records for advertising.
• We do not track location in the background.
• We do not use third-party advertising or analytics trackers in the mobile app.

5. Legal bases

Under UK GDPR we rely on:

• Contract — to provide the service you signed up for: accounts, jobs, scheduling, invoicing, support.
• Legitimate interests — to keep the platform secure, prevent abuse, fix faults and improve the product, balanced against your rights.
• Legal obligation — to keep financial records for the period the law requires.
• Consent — for device permissions such as precise location, camera and photos, which Android asks you for separately and which you can withdraw at any time in Android settings.

6. Who we share it with

We use a small number of service providers, each of which handles data only to do its job for us:

• Stripe — subscription and card payments. Card details are entered on Stripe’s own systems and never reach our servers. Stripe is an independent controller for payment data under its own policy.
• Google — the Maps SDK in the mobile app, and Google sign-in where you choose it.
• Hetzner Online GmbH — hosting. Our servers and database are in the European Union.
• Google Workspace — the mailbox that sends and receives our email.

Address lookup and geocoding run on our own server, against postcodes.io and OpenStreetMap Nominatim, and the result is cached there. No address is sent from the phone to a third-party geocoder.

We may also disclose data where the law requires it, or to establish or defend legal claims.

7. Where your data is held

The platform and its database are hosted in the European Union. Some providers listed above may process limited data outside the UK/EEA; where they do, the transfer is covered by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision.

8. How long we keep it

• Account data — while the account is open, and for up to 30 days after it is closed, so it can be recovered if closure was a mistake.
• Work records (jobs, photos, signatures, timesheets, client records) — for as long as the business keeps them, and deleted with the workspace when it is deleted.
• Invoices and financial records — six years from the end of the accounting period, because UK tax law requires it. These survive account deletion; see Account deletion.
• Server logs — up to 12 months.

9. Security

Traffic is encrypted in transit with TLS. Passwords are stored hashed, never in readable form. Credentials we hold on a business’s behalf — payment keys, connected-account tokens, bank details — are encrypted at rest. Access to production systems is limited to the people who need it.

10. Your rights

Under UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to another provider in a portable format. You can also withdraw consent for a device permission at any time.

Write to contact@cleaners-hub.com and we will respond within one month. To delete an account, see Account deletion — no app installation is needed.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office (ico.org.uk), but we would rather you told us first so we can put it right.

11. Children

CleanersHub is business software and is not intended for anyone under 16. We do not knowingly collect data from children.

12. Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date at the top. Material changes will be notified by email or a notice in the app. Features that are not yet switched on — such as crash reporting or push notifications — will be added to this policy before they are enabled, not after.

13. Contact us

For anything in this policy, including any request about your data: