Privacy Policy

Last updated: July 11, 2026

1. Introduction

CleanSimple LLC ("we", "us", "our") operates CleanSimple.app. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Category	Data	Purpose
Account	Name, email, company name, phone	Account creation and communication
Voice Input	Audio recordings, transcribed text	Voice-to-job parsing
Business Data	Customers, jobs, invoices, leads	Core service functionality
Payment	Billing address (card data via Stripe)	Subscription processing
Communications	Support messages, feedback	Customer support

2.2 Information Collected Automatically

Data	Purpose
IP address, browser type, device info	Security and service optimization
Usage patterns (pages visited, features used)	Product improvement
Cookies and session tokens	Authentication and preferences

3. How We Use Your Information

Provide, maintain, and improve the Service
Process voice recordings through AI transcription (OpenAI Whisper)
Parse job details using AI language models (OpenAI GPT)
Process payments through Stripe
Send transactional emails (invoices, account notifications)
Respond to support requests and feedback
Detect and prevent fraud, abuse, or security issues
Comply with legal obligations

4. Third-Party Data Sharing

We share data with the following service providers, strictly for operating the Service:

Provider	Data Shared	Purpose	Their Policy
Supabase	All business data	Database hosting, auth	supabase.com/privacy
OpenAI	Voice audio, job text	Transcription, parsing	openai.com/privacy
Stripe	Billing info	Payment processing	stripe.com/privacy
Google Maps	Location queries	Lead generation	policies.google.com/privacy

We do NOT sell your personal data or business data to advertisers, data brokers, or any third party for marketing purposes.

5. Voice Data Processing

This section is specific to our voice-to-job feature:

Audio recordings are uploaded securely (TLS) to our servers
Audio is sent to OpenAI Whisper API for transcription
Transcribed text is processed by GPT for structured data extraction
Original audio files are deleted from our servers within 24 hours
Transcribed text and parsed data are stored in your account
OpenAI does not use your audio/text to train their models (API usage policy)

6. Data Security

All data transmitted over TLS 1.2+ encryption
Data at rest encrypted with AES-256
Row-Level Security (RLS) isolates each company's data
Regular security audits and dependency updates
SOC 2 compliant infrastructure (Supabase, AWS)

7. Data Retention

Data Type	Retention Period
Account data	While account is active + 30 days
Business data (jobs, customers, etc.)	While account is active + 30 days
Voice recordings	Deleted within 24 hours of transcription
Payment records	7 years (legal requirement)
Support communications	2 years
Analytics data	12 months, anonymized

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Export your data in a machine-readable format
Objection: Object to certain processing activities
Restriction: Request restriction of processing

To exercise these rights, email privacy@cleansimple.app or use the data export feature in Settings.

9. GDPR (EU Users)

If you are in the European Economic Area (EEA):

Legal basis: Contract performance (Article 6(1)(b) GDPR)
Data is processed in the United States (AWS infrastructure)
We use Standard Contractual Clauses for international transfers
You may lodge a complaint with your local Data Protection Authority

10. CCPA (California Users)

If you are a California resident:

We do not sell your personal information
You have the right to know what data we collect
You have the right to request deletion
You have the right to opt out of data sale (N/A — we don't sell)
We will not discriminate against you for exercising your rights

11. CAN-SPAM Compliance

For our HERMES lead generation feature:

All outreach emails include a valid unsubscribe link
We maintain an opt-out list and honor requests within 10 business days
Every email identifies the sender and includes a physical address
Users are responsible for compliance with local email marketing laws

12. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

14. Contact Us

For privacy-related questions:

Email: privacy@cleansimple.app
Mail: CleanSimple LLC, Attn: Privacy, Austin, TX