---
title: "Privacy Policy · BlastoClean"
description: "How BlastoClean collects, uses and protects your information."
url: "https://www.blastoclean.com/privacy"
---

# Privacy Policy

Last updated August 19, 2026

BlastoClean ("we", "us") provides quoting, scheduling and payment software for cleaning
companies. This policy explains what we collect on this website and in the BlastoClean
application, and what we do with it.

## What we collect

**On this website.** If you use the contact form, we collect the name, email address,
company name and message you send us, and we keep a technical fingerprint of the request
(such as a hashed network address) to prevent abuse. This site does not use advertising
trackers.

**Usage statistics.** This site keeps aggregate, cookieless statistics about its own use:
which page paths were viewed, which sites referred visitors here, and daily totals of each.
They are plain counters — no cookies, no device identifiers, nothing that could single out
a visitor — and they are never shared. When you send the contact form or start a trial, we
also record which page and referring site brought you to us, so we know which pages
actually help people find the product.

**Referral and partner links.** If you arrive through a referral link (`/r/…`) or a partner
link (`/p/…`), we set two cookies on this site: a random identifier for your browser, and
the referral or partner code you arrived through. They exist for one purpose — making sure
the person who referred you gets credited if you sign up, even if that happens days later.
The identifier is random and is not derived from anything about you or your device, and
neither cookie is used for advertising or shared with advertisers. They last **90 days** and
are removed when you clear your browser's cookies. A visit through a partner link also sends
that identifier, the partner's code, the page you landed on, the site you came from, your
network address and your browser's user-agent string to the BlastoClean application, so the
partner can see how their link is performing; that record is kept for as long as the partner
relationship needs to be auditable. It is a record of the visit, not a second copy of the
credit: if you clear these cookies before signing up, the signup is simply not credited to
anyone. Arriving through an ordinary link sets neither cookie.

**Partner applications.** If you apply to the partner program at `/partners`, we collect
what the form asks for: your name, business name if you give one, email address, phone
number, mailing address, the PayPal address commissions should be sent to, your website or
social links if you give them, how you plan to promote BlastoClean, the link you would like,
and a password for the partner portal — which is stored hashed and is never readable by us.
Your application is kept as written, because it is the record of what you applied with, and
alongside it we keep hashed forms of your network address and browser user-agent string and
the exact consents you gave, as evidence of what was agreed to and when. The mailing address
and the PayPal address exist to pay you and to meet US tax-reporting obligations. If your
application is declined, or your partnership ends, we keep the application and the
commission records for as long as the money involved has to stay auditable.

**In the application.** When you create a company account we store the information you
enter to run your business: your team's names and email addresses, your customers and
their properties, your room and task libraries, quotes, schedules and payment records.

## What we do with it

We use your information to provide the service — and for nothing else. We do not sell
personal information, we do not rent lists, and we do not use your customers' details for
our own marketing.

Contact form messages are used solely to reply to you.

## Payments

Card payments are processed by your company's own payment provider (such as Stripe).
Card numbers never touch our systems: customers enter them directly with the provider
through its hosted checkout. We store only the references the provider gives us and an
encrypted copy of the credentials your company connects.

## Where your data lives

The service runs on Cloudflare's global platform. Data is stored in Cloudflare's D1
database and R2 storage, protected in transit by TLS.

## How long we keep it

For as long as your account is in use, and then for a while afterwards, so that leaving by
accident costs you nothing.

**If you leave** — you cancel, or your trial ends and you never subscribe — we keep your
account for six months after your access actually ends. Anything with a shorter clock of
its own keeps it: walkthrough recordings still expire on the retention window your company
chose, and are not held back by this. Cancelling takes effect at the
end of the period you have already paid for, so the six months start from that day, not
from the day you cancel. Moving to the Free plan instead is not leaving: those accounts
are covered by the paragraph below however long they pay nothing.

Coming back inside those six months picks up exactly where you left off. After them the
account becomes eligible for deletion, and a person at BlastoClean reviews it before
anything is deleted. Unlike the inactivity case below, no further notice is sent — the
timetable is the one described here — so if you want your records, export them before you
go, or ask us for a copy while we still have them. Once the deletion has run there is
nothing left to send.

**If you are on the Free plan,** there is no deadline while the account is in use. If
**nobody signs in for a year**, we email the account owner and pause the account: it is
locked, but nothing is deleted, and signing in at any point brings it all back
immediately. If nobody signs in during the **three months** after that email, the account
becomes eligible for deletion, again with a person reviewing it first.

When an account is deleted it is deleted in full — every record, every uploaded file, and
the email addresses of its users, which become free to sign up with again. Deletions are
not retroactive to backups: an account can persist in an encrypted database backup until
that backup rotates on its own schedule.

**Everything else we hold** keeps its own clock, and none of it is tied to your account:
contact-form messages are kept so that we can answer you and so that we have a record of
who has asked us about the product — we do not delete them on a schedule, and you can ask
us to delete yours whenever you like; a partner application and its commission ledger are
kept for as long as the payments they describe have to stay auditable, which is longer than
the partnership itself; the cookieless usage counters are aggregates with
nobody in them and are kept indefinitely as totals; and the photos, video and voice notes from a Magic Quote
walkthrough are deleted on the retention window your company chooses in Settings — 30
days, 90, a year, or kept — after which the timeline, the transcripts and the quote they
produced remain.

You can ask us to delete your account sooner than any of this, at any time, by contacting
hello@blastoclean.com.

## Your rights and your exit

Your company's data belongs to your company. An owner can export the whole account —
settings, team, customers, properties, templates, quotes and audit records — as a portable
file at any time, and can ask us to delete the account entirely by contacting
hello@blastoclean.com. The export stays available on a paused account too — being locked
for inactivity never holds your own records hostage.

## Changes

If this policy changes, the date above changes with it, and material changes will be
announced in the application.

Questions? Email **hello@blastoclean.com**.