Privacy Policy

Account details for owners and staff: name, email, phone, role, language and sign-in information.

What companies add to run their business: clients, homes, entry instructions, schedules, prices, notes, photos, messages and payment records. Access codes (lockbox, alarm, gate) are encrypted and only shown to the owner, the office and the cleaners on that day's visit, and every view is logged.

Basic usage and device data to keep the service secure and working, like IP address, browser and error reports.

To run Maidful for the company that uses it: booking, scheduling, the cleaner app, payments, reminders, reports and support.

We don't sell personal data and we don't use clients' data for advertising.

Google Cloud and Firebase (database and sign-in), DigitalOcean (servers), Vercel (domains), Bunny (photos and files), Stripe (card payments, on each company's own account), Telnyx and Twilio (text messages), Resend (email).

DeepSeek and Google (Gemini) process the text of requests made to Maidful AI. We never send them access codes or card details, and we send the least personal data each task needs.

As long as the company's account is active. After an account closes we delete its data within 90 days, except records we must keep by law, like invoices.

Clients and staff can ask the cleaning company they deal with to see, correct or delete their information, or contact us and we'll pass the request on. Clients can reply STOP to stop texts and use the unsubscribe link in emails.

Depending on where you live, you may have rights under laws like the CCPA or PIPEDA. Email hello@maidful.co to use them.

Data is encrypted in transit, access codes are encrypted at rest, every request checks the user's company and role, and browsers can't read the database directly.

Maidful is for businesses and isn't meant for children under 16.