Privacy Policy

1. Information We Collect

• Photographs: We collect the photographs you upload to a report, including the timestamp of when each photo was taken (or, if unavailable, when it was added). Location data is collected only if you grant location access via your browser; otherwise, no location information is stored. Any embedded metadata within the photo file, such as camera details, is removed prior to storage. Reports locked with earlier versions of CleanLog may display location data extracted from the photo file even without location permission; please contact us if you wish to have such reports deleted.
• Report Details: We collect the property address, the intended recipient of the report, and any notes you provide. For cleaning professionals, we also collect the business name, Australian Business Number (ABN), and mobile number entered. This information is stored with the report and accessible to anyone with the report link.
• Report Link Access: Upon the initial opening of a locked report link in a browser different from the one used to create the report, we record the date and time of access and display this information on the report. Automated link checkers are excluded from this tracking.
• Payments: Payment processing is conducted by Stripe, which collects your email address and payment details. We do not have access to or store your card number. We retain records of each payment, including the amount, date, and the associated report or credit package.
• Credits and Usage Limits: We generate a random identifier for your browser and store hashed versions of your ABN and IP address. These are utilised to manage credits, permit one complimentary cleaner report per ABN, and regulate the frequency of note formatting per day.
• On Your Device: Drafts, photos in reports not yet locked, and the email address entered prior to locking are stored locally in your browser's storage. The report and associated photos are transmitted to our servers upon locking, and note text is sent when you select Format Note (refer to section 2). The email address is never transmitted.
• Analytics: Google Analytics 4 (Measurement ID: G-HSM61MFYWH) employs cookies and a randomised identifier to monitor visits, page usage, and whether visitors access the payment page or complete transactions (including product and amount), rendering this data non-anonymous. Prior to transmission to Google, we remove report links, property addresses, and sensitive URL components.

2. Third-Party Data Processors

• Supabase stores reports and photographs on Amazon Web Services servers located in Mumbai, India.
• Stripe processes payments in the United States and other jurisdictions.
• Google processes Google Analytics data in the United States and other countries.
• Lovable hosts the website; its servers may be located outside Australia.
• Note Formatting: When you select Format Note, the note text is transmitted via Lovable's AI service to Google Gemini, which may process data outside Australia. Photographs are not transmitted.
• Voice Typing: Utilises your browser's native speech recognition service. In Chrome, audio is sent to Google; on iPhone devices, audio is sent to Apple.
• Address Search: The address you input is sent to Photon, a mapping service operated by komoot in Germany, to provide address suggestions.

3. Purpose of Data Collection

Your information is used to create and lock reports, record the server timestamp when a report is locked, enable report viewing via shared links, process payments, and prevent misuse. We do not sell, rent, or trade personal information, property addresses, or photographs to any third parties.

4. Report Access Links

Reports are accessible solely via their unique, lengthy, and random links. Anyone possessing the link can view the entire report, including photographs, their locations, and any business details. Please share these links only with authorised individuals.

5. Data Retention

Locked reports and associated photographs are retained until the report creator requests deletion (see section 6, which also explains when we may keep a report during a bond dispute). If a report lock is incomplete, any uploaded data remains on our servers until the report is locked or deletion is requested. Payment records are retained in accordance with applicable tax laws.

6. Report Deletion

To request deletion, please email support@cleanlog.com.au with the report link. Prior to deletion, we verify that the requester is the report creator. For paid reports, deletion requests must originate from the email address associated with the Stripe receipt. We do not delete reports upon request from individuals who only have access to the report link. Reports potentially required for bond disputes may be retained until resolution. Deletion removes the report, photographs, property details, and disables the report link. Payment records are retained as required by tax regulations. Copies previously saved or shared by users are unaffected. We endeavour to respond within 30 days.

7. Access and Correction Rights

You may request a copy of the personal information we hold about you at no cost. Locked reports cannot be modified by any party, including ourselves. To correct information, please create a new report and request deletion of the previous report as outlined in section 6.

8. Enquiries and Complaints

We aim to manage personal information in accordance with the Australian Privacy Principles. For questions or complaints, please contact support@cleanlog.com.au. We will respond within 30 days. If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.