Privacy at CleanerFlow Leads.
On this page
- What we collect
- Categories of information we collect
- Where it comes from
- How you found us
- How we use it
- Who we share it with
- In the CleanerFlow Leads app (cleaning professionals)
- Your answers after the cleaning
- Sale and sharing of your information
- Sensitive personal information
- How long we keep it
- Your privacy rights
- How to exercise your rights
- Changes to this policy
- Contact
1What we collect
We collect information you give us directly when you submit a cleaning request or apply as a cleaning provider. That includes your name, phone, email, the property address (or ZIP) where the cleaning is needed, the type of cleaning, the date you want it done, and the details of the place you tell us: the type of home or place (house, townhouse, apartment, studio, office, store, clinic or salon), how many bedrooms, rooms and bathrooms it has, its approximate size, who will be there during the cleaning, and any extra services you choose.
We also collect technical information your browser sends — IP address, user agent, referrer. When you agree to be contacted, we keep your full IP address and user agent, together with the date, the page and the exact consent text you accepted, as proof of that consent; that record is kept separately from the rest of your request. For fraud prevention and rate limiting we use one-way hashes of these signals instead of the originals.
2Categories of information we collect
Using the categories California law defines, we collect: identifiers (name, phone, email, IP address); commercial information (the cleaning you request — type of service, home size, bedrooms and bathrooms, frequency, add-ons, who will be home, and the date and time you prefer); internet or network activity (browser type, referrer, pages viewed, and the campaign that brought you to us, such as UTM tags or an ad click ID, if any); approximate geolocation (the ZIP or property address where the cleaning is needed, and the country and state we infer from your IP address); and, if a cleaning provider referred you, their referral code. If you type a message in your request, we collect its contents. We do NOT collect government IDs, financial account numbers, biometric data, precise GPS location, or health data.
If you are a cleaning provider, we send our weekly emails to account holders who haven't asked us to stop, and we also record whether you opened them and which links you clicked.
3Where it comes from
Directly from you when you submit a cleaning request or a provider application; automatically from your device (IP address, browser) when you use the site; and, for provider verification only, from the references, licenses, or credentials you choose to give us.
4How you found us
On your first visit we note how you got here and keep at most: the tag of a link of ours (UTM tags); the source a link reports about itself (ChatGPT, for example, adds utm_source=chatgpt.com to links it cites); an ad click ID, if the link had one; only the name of the previous site, such as google.com, bing.com or chatgpt.com — never its full address or what you searched for; and the page you landed on and the date. A visit with no link and no previous site is noted as "direct". The first visit counts; later visits don't change it.
Until you send a request or an application, this stays only in your browser (local storage, under cf-leads-utm, and cf-leads-ref when you arrive through a provider's referral link). When you send a request or an application, or join CleanerFlow Helpers, it is attached to that record and deleted with it: for a cleaning request, on the schedule in "How long we keep it"; for a provider or Helpers account, together with the account. We use it only to learn which paths bring people to us; it never changes your price or who receives your request.
5How we use it
For cleaning service requests: we share your contact details with up to three matched local cleaning providers so they can reach out about your service request. The number of providers is capped — we never send a single request to ten cleaners.
For provider applications: we use your business information to verify identity, service area, and trust signals (insurance, license, references) before adding you as a buyer.
For everyone: we use technical signals (one-way hashes of your IP address and user agent, the country and state inferred from your IP, and whether your email domain is a disposable one) to prevent fraud and abuse and to score the quality of a request.
We also check whether your phone number is a mobile or a virtual line, whether its area code belongs to the state where the cleaning will happen, how many requests the same number made in the last 45 days, whether it was reported unreachable in a past request, and how long the form took to fill in — using a one-way hash of the number, never the number itself.
6Who we share it with
Cleaning providers you ask us to send your request to: when you send a request, you are asking us to pass it, with your contact details, to up to three (3) approved local cleaning providers so they can contact you about it. Those providers pay CleanerFlow for the introduction. That is how the service stays free for you. Because you tell us to make this disclosure when you send the request, California law does not count it as a sale of your personal information (Civil Code §1798.140(ad)(2)(A)), and we rely on that rule. We never send the same request to more than three providers, and we never give your details to anyone for their own advertising.
Service providers: vetted vendors that run the service for us under contract — hosting, SMS and email delivery, payment processing, and fraud prevention — and only for those purposes. They cannot use your information for their own ends.
Our weekly tips, news and offers emails go only to cleaning providers, to account holders who haven't asked us to stop. They go out through Mailmundo, CleanerFlow LLC's own email platform, which runs on Amazon SES.
The videos that explain each page of this website are delivered by Bunny.net (BunnyWay d.o.o., a company based in the European Union). When you press play, your browser downloads the video from Bunny's network, so Bunny receives your IP address and basic browser details, as any website does, only to deliver it. Bunny does not receive your name, your email, your account or anything from the app, and the videos have no ads. Bunny counts how many times each video is played; only the totals reach us, never who watched. This applies to the website only; the app does not use Bunny.
Legal and safety: when the law requires it, or to prevent fraud, abuse, or harm. We do not share your contact details with any cleaning provider who has not been approved through our review.
7In the CleanerFlow Leads app (cleaning professionals)
If you use our app to buy requests, we also keep: your account email and display name; the profile photo you choose to upload, which is stored at a public link so it can be shown (location and camera details are removed from the photo before it leaves your phone); your mobile number, confirmed by a code we text you; the ZIP codes and business details you set; your language and notification preferences; your purchases, reports and support messages; your answers about how a request turned out, your credits and the monthly spending limit you set. Payments are processed by Stripe; we never store full card numbers — only the amount, date, status and a transaction reference.
If you sign in with Google or Apple, we receive from that service only what's needed to create and open your account: your email address (with Apple, this can be a private address that Apple forwards to you), your name if the service shares it, and a code that identifies your account there. We never receive your Google or Apple password. If you turn on Face ID or fingerprint sign-in in the app, the check happens on your phone: we never receive an image of your face or your fingerprint. This information is kept for the same period as the rest of your account data.
To send you notifications, the app registers a notification token for your device, along with your language and the type of device (iPhone or Android), through Apple's and Google's notification services (Firebase Cloud Messaging). To see how the app is used and fix problems, the app sends to us — not to advertising companies — which screens you open, how long you stay on them, a session identifier, and an error report when something fails (the error message, the screen and technical details). We never use any of this for third-party advertising. If you get our weekly emails (sent to account holders who haven't asked us to stop), we may also use it to choose which of our own news and offers are useful to you. On your phone, the app keeps your sign-in session (protected by the phone's secure storage) and small settings such as your language and whether you finished the welcome steps.
When you buy a request, you receive the homeowner's contact details and become independently responsible for them: keep them safe, use them only for the cleaning that was requested, honor every opt-out, and follow the TCPA and every applicable privacy law. Every access to those details is logged. Opt-outs are shared across CleanerFlow products so they are honored everywhere. If CleanerFlow LLC is involved in a merger, acquisition or sale of assets, this information may be transferred as part of it, under this policy. The app is for adults running a business; we do not knowingly collect data from anyone under 18.
After a purchase, the app may show you an offer for another CleanerFlow product, such as CleanerFlow Pro. You can dismiss it. We may also email you about requests in your area that are about to close or whose price has dropped. You can turn these emails off in Settings or with the link in the email itself.
Weekly tips, news and offers by email. When you have a CleanerFlow Leads account, you get one email a week with the new post from our blog, news and offers from CleanerFlow Leads and, now and then, from another CleanerFlow LLC product that fits what you do. To stop, click the link at the bottom of any of these emails (no sign-in needed), or turn it off in Settings. When you unsubscribe, you choose whether to stop just these or every CleanerFlow email. Stopping changes nothing about your account. If you delete your account, your contact is removed from our sending. We keep when you joined and left the list, and where, as a record of your choice. Account emails (sign-in, password and security) still arrive, because the service needs them. Accounts created before November 4, 2026 get these emails only if they asked for them. Mailmundo sends them. It receives only your email address and your language, and records whether each email was delivered and opened and which links you clicked, along with the IP address with its last part cut off, the type of device and the approximate country and state at the moment of the open or click. We use this only to send these emails and learn what is useful to you. We never sell it. Only cleaning providers with an account are included. People who request a cleaning are never added to this list.
If you use CleanerFlow Helpers inside the app, the Helpers Privacy Notice also applies: /helpers/privacy.
8Your answers after the cleaning
After the cleaning date we email you a short question about the cleaners who received your request: whether each one contacted you, whether you hired one of them, a rating from 1 to 5 and, if you want, a few words. We use your answers to check the quality of the service, to decide which cleaners keep receiving requests, and to refund a cleaner who paid for your request when you tell us nobody contacted you. Your answers are not published and we do not show public reviews on this site. Your written comment is deleted together with the personal data of your request, or sooner if you ask us to delete your data.
9Sale and sharing of your information
We do NOT sell your personal information, and we never use the contact details from your cleaning request for advertising. On this site we use one cookie to remember your language (cf-leads-locale) and Vercel's visit and page-speed measurement, which sets no cookies. When you sign in, we also use the cookies that keep you signed in (sb-…), one that signs you out after a while without activity (cf-leads-app-active) and, when you sign in with Google or Apple, a short-lived one that remembers where to take you back (cf_oauth_next). These are needed for the account to work and are never used for advertising. Only if you choose "Accept" in our cookie banner do we load the Meta Pixel and the Google Ads tag. They record that you visited and, if you send a cleaning request, an event marking that a request was sent, with a reference number — never your name, phone, email or address. Because this may count as "sharing" online identifiers for cross-context behavioral advertising under California law, these tags are off until you accept, stay off if you decline, and never load when your browser sends Global Privacy Control. You can change your choice at any time through "Cookie choices" at the bottom of every page.
Click map of open pages. On the pages of this site that anyone can see without signing in (the home page, pricing, the blog, the guides and the city pages), we record where people click and how far they scroll, so we can tell what is clear and what is confusing. For each click we keep only: the page and its language, where on the page the click landed, what was clicked (a link, a button, an image or text, and which one), the type of screen (phone, tablet or computer), and the date and time. We do not record who clicked: we never link a click to an account, even when someone is signed in, and we store no IP address, no cookie and no identifier on the device. We never record what anyone types, and we do not record the screen or the visit. None of this happens inside an account, in the app, on the sign-in and password pages, or on our forms: the cleaning request, the provider application, the contact form, privacy requests, request cancellation, the question about how a cleaning turned out, and the unsubscribe pages. If the browser sends the Global Privacy Control signal or a Do Not Track request, we record nothing. We do this ourselves, with no third-party tool, and never for advertising.
Do Not Sell or Share My Personal Information: to opt out of any sharing for advertising, decline non-essential cookies in our banner, turn on the Global Privacy Control (GPC) in your browser — which we honor as a valid opt-out — or email privacy@cleanerflowleads.com. Opting out never changes the price or quality of anything we offer you.
Do Not Track: there is no agreed standard for the "Do Not Track" setting in browsers, so we don't change what we do when we receive it, except for the click map, which records nothing. We do honor Global Privacy Control, as described above. Other companies can collect information about your activity on this site over time and across other sites only through the Meta and Google tags, and those load only if you choose "Accept" in our cookie banner.
10Sensitive personal information
The only sensitive personal information we handle is the sign-in details of cleaning provider accounts: an email and password, or a Google or Apple sign-in. We use them only to let you into your account and keep it safe, and passwords are stored only in scrambled (hashed) form. We do not collect government IDs, precise location from your device, fingerprints or face images, or health data, and we do not use any information to infer characteristics about you. Because we use sensitive information only for these permitted purposes, there is nothing to "limit" under California's sensitive-information right, but you can still contact us with any concern.
11How long we keep it
Cleaning request data is kept for 2 years from the date of the request when the cleaning is in California, Colorado or Virginia, and for 3 years in the other states we serve; after that we delete your name, contact details, address and message, and keep only the details of the request that don't identify you (such as ZIP, service type and dates) and one-way hashes used to prevent fraud. Consent records are retained for seven years; after that the phone, email, IP address and user agent in them are deleted. Opt-out records are retained indefinitely, so we keep honoring them. Provider application data is retained while you have an active account and for one year after deactivation. Payment and refund records (amount, date, status and a transaction reference) are kept for seven years from the date of payment and then deleted. When you delete your account, your name is removed from them.
When you accept our Terms or Privacy Policy, we record the date and time, the version you accepted, your IP address and the browser or app you used. We keep this record while your account exists and for 4 years after it is deleted, so we can show which terms applied to a purchase, a refund or a chargeback. We use it only for that.
Technical records are kept for shorter periods. Error reports and system logs: 90 days. Records of the emails and text messages we send (recipient, content, time and delivery status): 90 days. Records of how the app is used (screens opened and time on each screen): 13 months. Clicks and scrolling on open pages: 90 days; after that we keep only the daily totals, with nothing about any person. Records of privacy requests (access, deletion and the like): 24 months after we complete them, as proof that we did. If you unsubscribe or an email to you bounces, we keep your email address only as a one-way hash — never the address itself — on our do-not-send list, for as long as needed to keep honoring it.
Opens and clicks on news and offers emails (with the shortened IP address and the device): 12 months; after that we keep only the totals.
12Your privacy rights
Depending on your state, you have the right to: know and access the personal information we hold about you; delete it; correct inaccuracies; opt out of any sale or sharing of it; limit the use of sensitive personal information; and not be treated differently for exercising any of these rights.
13How to exercise your rights
Submit a request at cleanerflowleads.com/privacy/data-request or email privacy@cleanerflowleads.com with the name and the phone or email you used, so we can confirm it is you. An authorized agent may act for you with your written permission. We confirm we received your request within 10 business days and answer within 45 days and never charge you. To opt out of SMS, reply STOP to any text — it takes effect immediately and also takes any open request of yours off the list offered to cleaners. To stop our emails, use the unsubscribe link at the bottom of any of them.
14Changes to this policy
When we change this policy, we publish the new version on this page with a new version number and effective date. If a change matters to how we use your information, we also tell cleaning providers in the app or by email before it takes effect, and we tell people who have an open request by email. We will not use information we already have in a materially different way without asking you first.
15Contact
CleanerFlow Leads is operated by CleanerFlow LLC (San Diego, California), the controller of your personal information. Questions about privacy? Reach us via /contact.