Privacy Policy
Last Updated: August 26, 2026
1. Introduction
MaidLoop ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our Service.
2. Information We Collect
2.1 Account Information
When you create an account via Clerk (our authentication provider), we collect:
- Email address
- Username and display name
- Profile picture (if provided)
- Authentication identifiers (user ID)
2.2 Business and Customer Data
We store operational data that organization members create and manage through the Service, including:
- Cleaner profiles, availability, and metadata
- Cleaner status, pay setup, and configuration
- Customer names, contact details, service addresses, map coordinates, tags, and notes
- Services, jobs, recurrence settings, assignments, prices, and appointment history
- Invoices, payment-status records, external payment links, and customer change requests
- Public booking and job-management tokens used to provide customer-facing links
2.3 Usage Data
We automatically collect:
- Action usage counts (for trial and product activity management)
- Subscription status and billing information (via Polar)
- Device information (user agent, browser type)
- Service interaction logs (for debugging and security)
2.4 Google OAuth Data (If Applicable)
If you sign in with Google, we receive:
- Your email address
- Your name and profile picture
- Basic profile information
Limited Use Disclosure: MaidLoop's use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements. We only use this data to authenticate you and provide the Service. We do not transfer this data to third parties except as required to provide the Service.
3. How We Use Your Information
We use collected information to:
- Provide the Service: Store organization, customer, cleaner, scheduling, and invoice records and deliver the features you use
- Authenticate and authorize: Verify your identity and manage your account
- Billing and subscriptions: Manage your subscription, understand product activity, and process payments via Polar
- Security and abuse prevention: Detect and prevent fraud, spam, and unauthorized access
- Service improvement: Debug issues, analyze usage patterns (aggregated and anonymized), and improve Service performance
- Customer support: Respond to your inquiries and provide assistance
- Legal compliance: Comply with applicable laws and regulations
We DO NOT:
- Sell your personal data to third parties
4. How We Share Your Information
4.1 Service Providers
We share data with service providers who help us operate the Service:
- Convex: Database and serverless backend for account and operational data
- Clerk: Authentication and user management
- Polar: Subscription billing and payment processing
- Sentry: Error monitoring and debugging
- Vercel: Hosting and infrastructure
- Geoapify: Address autocomplete; receives address text entered into supported address fields
- OpenCode model service: Optional CSV column auto-detection; receives column headers, not imported row contents
These providers process information under their own terms and privacy policies to provide services used by MaidLoop.
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or abuse
- Investigate security incidents
4.3 Business Transfers
If MaidLoop is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
5. Data Retention
We retain data while an account or organization is active and as needed to provide the Service, address security or billing issues, and comply with applicable legal obligations. Cancelling a subscription does not automatically delete the organization or its records.
- Organization data: Remains available to the application until the organization is deleted or a supported deletion request is processed
- Cleaner profile data: Can be deactivated in the application; permanent deletion is not currently a self-service action
- Provider logs and backups: May remain for the periods used by our service providers, security processes, and legal obligations
- Billing records: Are also handled by Polar and may be retained as required by applicable law and the provider's policies
MaidLoop does not currently publish a guaranteed deletion or backup-expiry timeline. Contact us before cancelling or deleting an organization if you need to understand the records available to you.
6. Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of personal data or an organization, subject to identity verification and applicable obligations
- Portability: Request information about available exports; MaidLoop does not currently provide a full-workspace self-service export
- Object to processing: Object to certain data processing activities
To exercise these rights, contact us at support@maidloop.com.
For Google OAuth users: You can revoke MaidLoop's access to your Google account at any time via your Google Account permissions page.
7. Security
MaidLoop uses service-provider and application controls intended to protect data:
- Encryption: Data in transit protected by TLS/HTTPS
- Access controls: Authenticated application data is scoped to organization membership. Organization members currently share broad access to that organization's operational data.
- Authentication: Clerk provides account and session authentication. Available sign-in and multi-factor options depend on the configured account and provider settings.
However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Cookies and Tracking
We use essential cookies and local storage for:
- Authentication and session management
- User preferences (theme, default settings)
- Service functionality and performance
We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.
9. International Data Transfers
MaidLoop is hosted on Vercel and Convex infrastructure, which may process data in multiple countries. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.
10. Children's Privacy
The Service is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@maidloop.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top of this page indicates when changes were last made. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
12. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: support@maidloop.com
13. Additional Information for EU Users (GDPR)
If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Legal basis: We process your data based on contract performance (providing the Service) and legitimate interests (security, improvement)
- Privacy contact: Contact support@maidloop.com for GDPR-related inquiries
- Right to lodge a complaint: You may file a complaint with your local data protection authority
- Right to restriction: You may request restriction of processing in certain circumstances
14. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it's used
- Request deletion of your personal information
- Opt-out of the sale of personal information (Note: We do not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise these rights, contact us at support@maidloop.com.