Privacy Policy

KleanEazy (“KleanEazy”, “we”, “us”) provides an on-demand cleaning marketplace that matches customers with independent professional cleaners in Western Australia. This Privacy Policy describes what personal information we collect, how we use it, who we share it with, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

• Account: name, email, phone, role (customer / cleaner / admin), password (hashed with bcrypt).
• Profile: avatar, address, geolocation, gender (for matching), birth year (for age-range matching), bio, hourly rate, service radius.
• Cleaner verification: photo ID, WWCC (if applicable), police check, ABN, insurance details, bank details for payouts.
• Booking data: service type, schedule, address, cleaner notes, preferred attributes, theme selection (Glam Clean), payment status, arrival & completion timestamps.
• My Clients CRM (cleaners on CRM Pro): per-client history of bookings between you and each trusted-pairing customer, private cleaner-only notes you save about that client (e.g. “prefers eco products”), and any retro-invoices you raise for off-platform work.
• Body-cam media (optional): video uploaded by cleaners after a job. Cleaners are not required to wear body cams — it is opt-in and encouraged. Where a recording exists, it is viewable only by the booking’s customer, the assigned cleaner, and KleanEazy administrators.
• Payment & billing data: handled by Stripe. We store a Stripe Customer ID, Subscription ID, and Session ID plus amounts and timestamps — we never see or store your card number or CVC.
• Referral & credit data: referral codes, referred users, credits earned and applied.
• Device data: IP address, browser user-agent, approximate location, and usage logs for security & abuse prevention.

• Match customers with nearby verified cleaners based on location, gender preference, age range, service type, and availability.
• Process one-off payments, recurring monthly subscriptions, refunds, and store orders through Stripe.
• Operate the My Clients CRM: display your trusted-pairing clients to you, let you re-book on their behalf, and let you raise retro-invoices for offline jobs (with the customer’s prior consent).
• Deliver trust & safety features, including optional body-cam recordings, reviews, complaint handling, and dispute resolution.
• Send transactional notifications by email, SMS, and push: booking confirmations, receipts, payment failures, arrival alerts, funds-ready alerts, and account notices.
• Detect fraud and misuse (e.g. off-platform solicitation, chargebacks, spam).
• Improve the product, fix bugs, and comply with legal obligations (including tax, consumer law, and lawful requests).

Where you subscribe to a paid plan (Cleaner Pro, CRM Pro, Customer Pro, Customer VIP, etc.), Stripe stores your payment method on your Stripe Customer record and charges the plan price on a monthly cycle until you cancel. We keep the following recurring-billing data:

• Stripe Customer ID and Subscription ID.
• Plan key, current period start and end, next billing date, cancel-at-period-end flag.
• Renewal history (how many months you’ve renewed, last payment success/failure timestamps).

We use this data only to keep your subscription running, to show you your next billing date, and to notify you if a card is declined so you can update it. You can cancel any time (see Section 5 of the Terms & the “Manage subscription” section of your dashboard).

If you are a cleaner subscribed to CRM Pro, we make your list of trusted-pairing customers, their booking history with you, and any private notes you save available only to you. The customer cannot see your notes about them. Admins may access this data only to resolve a dispute, comply with a lawful request, or investigate suspected abuse. If you cancel CRM Pro, your notes are preserved but hidden from your dashboard until you resubscribe. Notes are deleted permanently 24 months after you close your account or immediately on your written request.

When you or an admin voids an unpaid booking / invoice, we do not delete the underlying record. The booking is flagged “voided” with the reason, actor, and timestamp so a full audit trail is preserved. This is required for tax and dispute-resolution reasons and cannot be opted out of. Voided invoices are visible only to the parties to the booking and admins.

We share data with:

• The other party to a booking — cleaner sees the customer’s name, phone, address, and notes; customer sees the cleaner’s name, photo, ratings, and (if applicable) “Bodycam-ready” badge.
• Stripe (Stripe Payments Australia Pty Ltd) — for card processing, subscriptions, and payouts. Stripe is PCI-DSS Level 1 compliant.
• Twilio and Resend — for SMS & email delivery.
• Cloud storage providers — for body-cam and image assets, encrypted at rest.
• Law enforcement or regulators — when legally required (e.g. subpoena, court order, safety emergency).

We do not sell your personal information.

Body cams are optional for cleaners. Cleaners who choose to wear one earn a “Bodycam-ready” badge on their profile. If a recording is uploaded, it is encrypted in transit and at rest, and is accessible only to the booking’s customer, the assigned cleaner, and KleanEazy administrators for safety, quality, and dispute purposes. Recordings are retained for up to 90 days from upload and then permanently deleted, unless required for an active investigation or legal claim.

Glam Clean is a premium cleaning service performed in a themed outfit. Promotional photos and bios voluntarily provided by cleaners are visible to authenticated customers within the Glam Clean section. Cleaners may opt out at any time, which removes their themed profile. Glam Clean is not an adult-services product; see the Terms for boundaries.

When you refer a friend, we store the referral link between your account and theirs so we can credit both parties when the referred user completes their first paid booking. If either party deletes their account, the link is preserved in de-identified form for accounting reconciliation.

• Account & profile data: retained while your account is active, plus 7 years after closure (Australian tax record-keeping obligations).
• Booking & payment records: 7 years (tax law).
• Cleaner verification documents: 3 years after your last active booking.
• Body-cam recordings: 90 days from upload.
• CRM private notes: 24 months after account closure or immediately on your request.
• SMS & email logs: 24 months.

Under the Australian Privacy Principles and the Privacy Act 1988 (Cth), you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or out-of-date personal information.
• Request deletion of your personal information (subject to retention obligations in Section 11).
• Export a copy of your data in a portable format.
• Withdraw consent for optional data (e.g. bodycam upload, marketing emails).
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we’ve mishandled your data.

Email privacy@kleaneazy.com.au to exercise these rights. We aim to respond within 30 days.

We use industry-standard safeguards: TLS 1.2+ for all traffic, bcrypt-hashed passwords, role-based access control, encrypted media storage, PCI-DSS-compliant payment tokenisation via Stripe, and per-endpoint audit logging. No system is 100% secure — please use a strong, unique password and enable your provider’s multi-factor authentication where available.

KleanEazy is not intended for users under 18. If we learn we have collected data from a minor, we will delete it promptly.

We may update this policy from time to time. Material changes — particularly to how we handle CRM data, subscriptions, or body-cam recordings — will be communicated via email and an in-app notice at least 14 days before they take effect.

Privacy questions or data requests: privacy@kleaneazy.com.au.