Privacy Policy

If you are a client or employee of a cleaning company that uses TRASHCAN, that company decides what is collected about you and why; TRASHCAN stores and processes it on the company’s behalf. Questions about your cleaning — or requests to see or delete your information — go to that company first; we will help them answer.

For company owners who sign up, TRASHCAN is responsible for your account information.

• Account details: name, email, phone, and a password stored only as a one-way hash. Multi-factor secrets are encrypted; backup and email codes are stored only as hashes.
• Home and job details: addresses, home notes, room counts, and entry codes (encrypted), the cleaning checklist, before-and-after photos and videos, room times, and the GPS position where the crew started and finished each clean (proof of the visit).
• Live location while a crew is driving to a home, so the client can see them coming. Positions are kept only for that trip.
• Billing: invoices and payment status. Card numbers are collected by Stripe and never touch TRASHCAN; we keep only the card brand, last four digits and expiry.
• Messages: texts with the company, conversations with Tex, reviews and room ratings.
• Usage and security records: sign-ins, a change history of who edited what, and basic server logs.

To run the cleaning business: quoting, scheduling, sending reminders and photos, getting crews paid and clients billed, answering questions (including through Tex), and keeping accounts secure. We do not sell personal information and do not use it for advertising.

TRASHCAN uses these service providers, each only for its part of the work:

• Vercel (hosting) and a managed Postgres database (Neon)
• Stripe (payments and subscriptions)
• Resend (email)
• Twilio (texts and phone calls)
• Mapbox (maps, directions and arrival times)
• Cloudflare R2 or Vercel Blob (photo and video storage)
• Google (only if you choose “Continue with Google”)
• Anthropic (to write Tex’s answers from the company’s help articles)
• Intuit QuickBooks (only if the company connects it)

Before-and-after photos are kept for 6 months and videos for 30 days by default. Other records are kept while the company’s account exists; when a company asks us to delete its account, we delete its records except where the law requires us to keep them (for example payment and tax records).

• Unsubscribe from news and offers with the link in any marketing email. Reminders and invoices still come.
• Reply STOP to any text to stop texts from that company; START turns them back on.
• Choose email, text or WhatsApp for your reminders in your account settings.
• Ask the company (or us, if you own an account) to see, correct or delete your information.

Multi-factor sign-in for owners and office staff, encryption in transit everywhere and at rest for sensitive fields, signed webhooks, and every company’s data kept separate from every other company’s. No system is perfectly secure; if a breach affects you, we will tell the affected company and help them notify you as the law requires.

TRASHCAN is for businesses and adults. It is not directed to children under 13, and we do not knowingly collect their information.

If this policy changes in a way that matters, we will tell account owners by email before it takes effect.

Use Help inside your account, or reply to any email we send you.