Privacy Policy

CleanForge ("we", "us", "our") operates a platform for managing cleaning crews for short-term rental properties. This Privacy Policy describes what data we collect, how we use it, who we share it with, and your rights regarding that data.

We are committed to collecting only what is necessary to operate the Service and to handling your data with care.

We collect the following categories of data:

We do not collect payment card numbers, bank account details, or government IDs. Payment information is collected and stored directly by Stripe.

Data is collected through the following means:

• Direct input — information you enter when creating properties, cleaners, and jobs
• iCal feeds — calendar event data pulled from Airbnb, VRBO, or other booking platforms you connect
• Cleaner submissions — photos and job status updates submitted by cleaners via the mobile job page
• SMS replies — cleaner responses to job offers received via Twilio webhook
• Authentication provider — basic profile data (name, email) from Clerk upon sign-up

We use the data we collect to:

• Provide and operate the Service (scheduling, notifications, payouts)
• Run AI analysis on cleaning photos to generate quality feedback
• Send SMS messages to cleaners on behalf of hosts via Twilio
• Process and record cleaner payouts through Stripe Connect
• Log agent actions for host audit and transparency
• Detect no-shows and trigger reassignment logic
• Respond to support requests

We do not use your data for advertising, do not sell it to third parties, and do not use it to train AI models.

CleanForge integrates with the following third-party services, each of which has its own privacy policy:

When you connect an iCal calendar URL, the platform fetches event data from your calendar provider (e.g. Airbnb). CleanForge does not have a direct relationship with those providers for this data — you are responsible for ensuring your use of their calendar feeds is permitted under their terms.

Cleaning photos uploaded by cleaners are stored in Supabase Storage and processed by Anthropic's Claude vision model for quality review. Photos are transmitted to Anthropic's API for analysis and are governed by Anthropic's Privacy Policy. We do not use photos for any purpose beyond the quality review requested.

AI-generated scheduling suggestions are produced using job metadata (dates, cleaner scores, rates). No personally identifying information about cleaners beyond names and reliability scores is used in scheduling prompts.

Hosts add cleaner phone numbers to the platform to enable job SMS notifications. CleanForge stores these numbers and uses them to send job-related messages via Twilio. Phone numbers are associated with the host who added them and are not shared with other hosts.

Cleaners who wish to be removed from a host's account should contact that host directly. Hosts can deactivate or delete cleaner records at any time through the Cleaners section of the dashboard.

All application data is stored in Supabase (PostgreSQL) with row-level security enforced on every table. Each row is associated with a host ID, and authenticated requests can only access rows belonging to that user.

Authentication is handled by Clerk using industry-standard JWT tokens. API routes that perform mutations require a valid authenticated session. We use HTTPS for all data in transit.

While we take reasonable steps to protect your data, no system is completely immune to security risks. We encourage you to use a strong, unique password and to notify us immediately at security@cleanforge.xyz if you believe your account has been compromised.

We retain your data for as long as your account is active. You may delete individual records (properties, cleaners, jobs) at any time through the dashboard. To request full account deletion and erasure of all associated data, contact us at privacy@cleanforge.xyz.

Some records (such as Stripe transfer IDs) may be retained for legal or accounting compliance even after account deletion. We will inform you if this applies when you request deletion.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request erasure of your data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at privacy@cleanforge.xyz. We will respond within 30 days.

CleanForge uses only strictly necessary cookies — those required for the application to function. We do not use advertising cookies, tracking pixels, analytics cookies, or any cookies that share data with third parties for marketing purposes.

Because these cookies are strictly necessary for the service to operate, we do not require your consent to set them under ePrivacy Directive exemptions. You may disable cookies in your browser settings, but doing so will prevent you from logging in or using the dashboard.

We may collect basic server-side request logs via Vercel (IP address, request path, timestamp) for error monitoring and uptime purposes. These logs are not linked to individual user identities and are retained for a maximum of 30 days.

CleanForge is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify users via in-app notification or email. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at privacy@cleanforge.xyz.