Privacy Policy

• Your account: name, email address, phone number and a password (stored only as a one-way hash, never in readable form).
• Google sign-in:if you choose “Continue with Google”, Google shares your name, email address, profile picture and whether Google has verified the email. We ask for nothing else — no contacts, calendar, Drive or Gmail access.
• Billing: card payments are handled by Stripe. We never see or store your card number; we keep the Stripe customer and invoice references, amounts and payment status.
• Onboarding and your site:what you give us to build your site — business details, service areas, services, your cleaners' names and email addresses, your logo, photos, review screenshots and links to your public pages.
• Public pages, with your permission:if you tick the box during onboarding, we read the public pages you link (such as your website or Google, Facebook or Yelp listings) to help fill in your site. What we find is shown to our staff for review; it isn't published automatically.
• Messages to us: call requests, change requests and any photos you attach.
• Visit counts:we count page views on the sites we host so owners can see their traffic. We store the page path (without the query string), the referring site and a daily visitor code. That code is a keyed one-way hash of the day, IP address and browser type, so it can't be turned back into an IP address or linked across days. The IP address itself is not stored.
• Cookies:only what's needed to keep you signed in and protect forms. No advertising or cross-site tracking cookies.

• To create and run your account, build your site and app, and sign you in.
• To bill you and send receipts, account and service emails.
• To answer call and change requests and provide support.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations, such as keeping billing records.

Information we receive from Google sign-in (name, email address, profile picture) is used only to create and sign in to your Spiffy Officeaccount and to show who is signed in. We don't use it for advertising, don't sell it, and don't share it with anyone except as needed to run the service or as required by law. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Spiffy Office's access at any time from your Google Account's security settings.

When a cleaning business uses Spiffy Office, its own clients and cleaners may enter information on that business's site — names, addresses, phone numbers, booking details, messages, reviews and photos. We store and process that information on the business's behalf to run its site and app. The business decides how it uses that information, and its clients should contact the business first with questions about it. We'll help the business answer those requests.

We may contact cleaning businesses about Spiffy Officeusing business contact details they have published (for example, on a public business listing), and may look at their public website first to see whether we can help. Every sales email includes a way to opt out, and once you do, we add your address to a do-not-contact list and won't email you again for sales. If you're a customer, you'll still get receipts, billing notices and account emails.

We share information only with the companies that help us run the service, and only what each needs:

• Stripe — card payments and billing.
• OVHcloud — the servers that host spiffyoffice.com and our customers' sites.
• Google — sign-in, if you choose it.
• Our email delivery provider — to send account and service emails.

We'll also disclose information if the law requires it, or to protect the safety of people or the service. If Spiffy Officeis ever sold or transferred, your information would move with it under this policy, and we'd tell you first.

We keep account and site information while you're a customer. After you cancel, your site goes offline at the end of your paid period and you have 30 days to ask for a copy of your data; after that we delete it. We keep billing records as long as tax and accounting rules require. If you created an account but never became a customer, you can ask us to delete it at any time.

• See and update most of your information yourself in your account and dashboard.
• Ask us for a copy of your information, or to correct or delete it.
• Opt out of sales emails with the link in any of them.

We'll respond within 30 days. We may need to confirm it's really you before acting on a request.

Every site we host is served over HTTPS, passwords are hashed, and staff access is limited to people who need it. No system is perfectly secure, but if a breach affects your information, we'll tell you promptly.

Spiffy Office is a tool for businesses and isn't meant for children under 13. We don't knowingly collect their information.

If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell customers by email before it takes effect. See also our Terms of Service.

Questions about this page, or a request about your information? Use Request a calland tell us what you need — we'll get back to you.