Privacy Policy
DRAFT — requires attorney review Not legal advice. This policy does not apply to any use of Mopful until counsel approves it and an effective date is published.
1. Who we are
Mopful is quality control and proof-of-service software for commercial cleaning companies, operated by TODO(owner): legal entity name ("we", "us"). This policy covers our website, our web app and our mobile app. Contact: support@mopful.com. Postal address: TODO(owner): US postal address for legal notices and CAN-SPAM.
2. Two roles: your company and us
When a cleaning company uses Mopful, that company decides what to record and who can see it, and we process the records for it. For work records (inspections, task lists, photos, issues, reports, visit times and locations) your company, not Mopful, is the main decision maker, and we act as its service provider or processor under the Data Processing Addendum. If you use Mopful through your employer, requests about your work records may be passed to your employer. For account data, website visits and our own marketing, we decide how the data is used.
3. What we collect
- Account data: name, email address or phone number, role, company, language, and for cleaners who sign in by PIN, a company code, a staff number and a PIN (the PIN is stored only as a salted hash).
- Work records: inspections, scores, task lists and their status and times, notes, issues, fixes, clients and sites your company creates, and reports.
- Photos: proof photos taken with the phone camera or chosen from the gallery, and the time they were captured. Logos and avatars.
- Location: one position reading when a cleaner arrives at a site, one when a cleaner leaves, and one when an inspection starts, together with its accuracy and the distance to the site address. We do not collect location continuously or in the background, and the app does not ask for "always" location permission. If location is denied or unavailable, the app still works and the record shows that no location was captured. TODO(owner): confirm with the app team whether photos are stamped with a device location at the moment each photo is taken. If so, state it here.
- Site access codes: door and alarm codes and notes that your company chooses to store. They are stored encrypted, and each view is logged in your company's activity history.
- Activity history: who created or changed inspections, visits, issues, access codes and team access, and when. It keeps field names and statuses, not content, and is kept for 36 months.
- Device and usage data: app version, device type, crash reports, push notification tokens, and usage events that help us fix problems and improve the product.
- Billing data: plan, status and subscription identifiers. Our payment provider handles payment card details; we never see or store full card numbers.
- Support messages you send us.
- Website data: pages viewed, referrer and device information. Analytics and advertising cookies and tags (Google Analytics 4, Google Ads, Microsoft Advertising) are loaded only after you accept them in the cookie banner.
We do not use facial recognition. We do not collect precise location outside the moments listed above.
4. How we use it
To provide the service your company subscribed to; to generate and send the reports and notifications your company configures; to authenticate users and protect accounts; to bill for plans; to give support; to detect abuse; to fix problems and improve the product; to send service emails, and marketing email where the law allows, with a one-click unsubscribe; and to meet legal duties. We do not sell personal information and we do not share it for cross-context behavioral advertising.
5. Who receives it
- Your company and the people it chooses. Your company's users see records according to their role and assigned sites. Reports go to the recipients your company selects, such as its clients, through links it controls.
- Sub-processors that host and run the service for us, listed in the Data Processing Addendum: Google Cloud and Firebase, Cloudflare, Resend, Lemon Squeezy and Google Gemini (AI). RevenueCat is listed too but is not active at launch.
- Legal and safety. When the law requires, or to protect rights and safety, and in a sale or merger of our business with notice to you.
6. Where data is stored, and who can access it from where
Data is stored in the United States. Our sub-processors and our support team may access it from other countries, under contract and only as needed to run and support the service. TODO(owner): confirm the storage region of every store: Firestore multi-region (planned nam5), Cloud Run (us-central1), the Cloudflare R2 media bucket location hint, the Google Cloud Storage backup buckets, the Gemini API processing location.
7. How long we keep it
| Data | Kept for |
|---|---|
| Proof photos | the photo retention of your plan: 12 months (Starter), 24 months (Pro), 36 months (Business); Enterprise by agreement |
| Activity history | 36 months |
| Other work records | while the account is active |
| Backups | rolling copies for 30 days |
| Account deleted | 30-day grace period, then full deletion; backup copies expire within 30 days after that |
| Data export files | the download link works for 7 days |
| Customer import files | deleted after 7 days |
| Billing records | as long as the law and our payment provider require |
| Suppression record (an address that bounced or opted out) | kept so we do not email it again |
TODO(owner): confirm retention of audit logs, support tickets, and data of trial accounts that never subscribe.
8. Security
We use access controls by role and site, encryption in transit, encryption of site access codes, scoped and signed links for photos, rate limits on sign-in and PIN attempts, and backups. No system is perfectly secure, so we cannot promise that data will never be accessed by an unauthorized person. If a breach affects personal information we will notify the affected companies and, where the law requires, individuals and regulators.
9. Your choices and rights
- Access and export. Signed-in users can request an export of their data from the app. The file is emailed as a download link that works for 7 days. TODO(owner): confirm export is available to PIN members without email.
- Correction. Edit your profile in the app, or ask your employer or us.
- Deletion. See the Account Deletion page. There is a 30-day grace period.
- Marketing email. Use the unsubscribe link in any marketing email.
- Cookies. Accept or reject analytics and advertising cookies in the cookie banner; you can change your mind later.
- Location. You can turn off location permission in your phone settings. The app keeps working and the record shows that no location was captured. Your employer's rules may still apply to you.
- California and other states. Residents of California and some other states have the right to know, access, correct and delete their personal information, to opt out of sale or sharing, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define them. To use a right, write to support@mopful.com. We may need to verify your identity and, for work records, pass the request to your employer. TODO(attorney): confirm which state privacy laws apply to Mopful given its size, and whether employee data and business-contact data are in scope. Add a notice at collection if required.
10. Children
Mopful is for businesses and their workers. It is not directed to children under 13, and we do not knowingly collect their personal information. TODO(attorney): confirm whether cleaners aged 16 or 17 can be users and whether any state rule needs extra terms.
11. Changes
We will post changes here with a new effective date, and for a material change we will notify account owners by email or in the app.
12. Contact
support@mopful.com. Postal address: TODO(owner): US postal address for legal notices and CAN-SPAM.