Privacy Policy

1. Who we are

The Clean Autonomy reports workspace (the “Service”) is operated by [Company Name], [Company Address]. For any privacy question or request, contact us at [contact email].

2. Data we collect

• Account and profile data. When you sign in through XO Auth, we receive the identity details you approve on the consent screen — typically your name, email address, a unique user identifier and, where provided, your profile picture and organisation.
• Workspace data. Reports, sites, shifts and related operational records that you or your organisation create or upload in the Service.
• Technical data. Session identifiers, device and browser type, IP address and timestamps of requests, used to keep the Service secure and working.

3. Why we use it

• To authenticate you and keep you signed in.
• To display and generate the cleaning reports you request.
• To secure the Service, prevent abuse and diagnose faults.
• To respond to support and privacy requests you send us.

4. Cookies and session storage

We use strictly necessary cookies and browser storage to hold your signed-in session and your interface preferences. These are required for the Service to function and are not used for advertising. If your browser blocks them, sign-in will not work.

5. Identity provider and other processors

Sign-in is handled by XO Auth, acting as our identity provider. When you sign in, XO Auth processes your credentials and returns only the profile fields you consent to share. We also rely on our hosting and database providers to run the Service. We do not sell personal data, and we do not share it with third parties for their own marketing.

6. Storage and retention

Account and workspace data is retained for as long as your account is active. When an account is closed, associated personal data is deleted or anonymised within [retention period], unless we are required to keep it longer to meet a legal or contractual obligation. Technical logs are kept for a shorter period for security purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email [contact email]. We will respond within the period required by applicable law in [governing jurisdiction].

8. Security

Access to the workspace requires authentication, and data is transmitted over encrypted connections. No online service can promise perfect security, so we do not claim it — if you believe you have found a vulnerability, please report it to [contact email].

9. Changes to this policy

We may update this policy as the Service changes. The “last updated” date above always reflects the current version, and material changes will be communicated in the app or by email.

10. Contact

Questions about this policy? Write to [Company Name], [Company Address], or email [contact email].