Privacy Policy
Last updated: 2026-10-18
1. Who we are
Cleaniro is a brand of Muema BV, a Belgian private limited company with its registered office at Paradijsweg 8 bus B2, 2500 Lier, Belgium, registered with the Crossroads Bank for Enterprises under number 1041.599.757, with VAT number BE 1041.599.757.
Cleaniro provides a SaaS platform for cleaning companies covering scheduling, time tracking, quality control, and operational management.
Contact: privacy@cleaniro.com | Paradijsweg 8 bus B2, 2500 Lier, Belgium
In this privacy policy, “we”, “us” or “Cleaniro” refers to Muema BV, trading as Cleaniro. “You” refers to the natural person whose data is being processed.
2. What data we process
We process personal data in three main categories.
a. Website visitors and prospects
- Identification: name, email address, phone number (if provided via a demo request or contact form)
- Business data: company name, role, sector, number of employees
- Technical data: IP address, browser, device type (in the technical logs of our hosting)
- Communications: content of emails, demo conversations, and chat messages
On cleaniro.com we use no cookies and no tracking pixels. We count visits and clicks anonymously with Vercel Web Analytics, without cookies and without storing personal data (see our Cookie Policy). If you request our free cleaning checklist, we keep your email address and (if provided) your company name to give you the checklist and occasionally send you useful tips; you can unsubscribe at any time by replying to one of our emails or writing to support@cleaniro.com.
When you request a demo via cleaniro.com, we receive the data you enter: name, company name, email address, phone number, number of cleaners, your message and your language. This data is sent to Cleaniro by email via Resend and is used only to contact you about the demo. Demo requests and requests for the free checklist are also stored in our customer relationship system HubSpot (data stored in the EU, Frankfurt), so we can follow up on your request. You can ask us to delete your data at any time via privacy@cleaniro.com.
b. Customers and their users (admins, managers, team leaders)
- Account: name, email address, phone number, role, hashed passwords
- Business data: company name, enterprise number, VAT number, billing address
- Payment data: processed via Stripe, we never see card details
- Usage data: logged-in sessions, actions in the platform, preferences
c. Cleaners (employees of our customers)
- Identification: name, phone number, optional photo
- Work data: schedules, hours worked, sites, tasks
- Time tracking: clock-in/clock-out times, breaks
- Location data: GPS coordinates at clock-in/clock-out (work moments only, not continuous)
- Quality data: inspection results, incidents, optional photos of work
Important regarding cleaners: when a cleaning company is our customer, we act as processor for the data of their cleaners. The cleaning companies are the controllers. Cleaners with questions about their data should contact their employer first.
3. Why we process data
| Purpose | Legal basis |
|---|---|
| Account creation and management | Performance of contract |
| Providing the platform and ensuring functionality | Performance of contract |
| Payment processing and invoicing | Performance of contract + legal obligation |
| Customer service and support | Performance of contract |
| Communications about products, updates and newsletters | Consent (you can unsubscribe at any time) |
| Demo requests and sales conversations | Consent + legitimate interest (sales) |
| Product improvement and analysis (aggregated) | Legitimate interest (product development) |
| Compliance with legal obligations (accounting, tax) | Legal obligation |
| Time tracking of cleaners | Performance of customer’s contract + customer’s legal obligation |
| Fraud and abuse prevention | Legitimate interest (security) |
4. Who receives your data
Subprocessors (processors working for us):
- Supabase (database, authentication, EU region Frankfurt)
- Stripe (payment processing, EU + US via Standard Contractual Clauses)
- Further subprocessors, such as Vercel (hosting of website and app) and Resend (email); for requests via the website also HubSpot (customer relationship management, EU) — see the subprocessors list.
Other recipients:
- Accountant and tax advisor (legal obligation)
- Legal advisors (in case of disputes)
- Government authorities (where legally required)
We never sell your data to third parties for marketing or any other purposes.
5. International transfers
Our database and primary processing take place within the European Union (Frankfurt, Germany via Supabase). Our website and app are hosted by Vercel, in the EU region where available.
Some of our subprocessors (such as Stripe and Resend) partially process data in the United States. For these transfers we use the Standard Contractual Clauses (SCCs) of the European Commission, supplemented where necessary with technical and organizational measures, and the EU-US Data Privacy Framework where available.
6. How long we keep your data
| Category | Retention |
|---|---|
| Account and customer data | Duration of the contract + 30 days after termination |
| Exported data after termination | Available for download for 30 days, then deleted |
| Full deletion from backups | Within 90 days after termination |
| Invoicing and accounting data | 7 years (legal obligation) |
| Cleaner time tracking data | 5 years (labor law obligation BE/NL/FR) |
| GPS location data | Maximum 12 months, then anonymized or deleted |
| Communications (email, chat) | 3 years after last contact |
| Prospect/lead data without conversion | 2 years after last contact |
| Server logs and technical data | 12 months |
7. Your rights
Under the GDPR you have the following rights:
- Access: request which data we process about you
- Rectification: have inaccurate data corrected
- Erasure: have your data deleted in certain cases
- Restriction: have processing temporarily restricted
- Objection: object to certain processing (such as direct marketing)
- Data portability: request your data in a structured, machine-readable format
- Withdraw consent: where processing is based on consent
- Lodge a complaint with the supervisory authority (see section 9)
To exercise a right, email privacy@cleaniro.com. We respond within 30 days.
8. GPS and cleaner location data
When a cleaning company uses our software for time tracking via the mobile app, GPS location data of cleaners may be processed to verify presence at the work site.
Principles we apply
- GPS is recorded only at the moment of clock-in/clock-out
- No continuous tracking outside working hours
- Cleaners are transparently informed about this via the app
- Alternative registration method available (QR code without GPS) where possible
- Maximum retention of GPS data: 12 months
The cleaning companies using our software are responsible for informing their cleaners and integrating this processing into their internal regulations, in accordance with labor law requirements.
9. Filing a complaint
If you believe we are not respecting your rights, you can file a complaint with:
- Belgium: Data Protection Authority (DPA), Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be
- Netherlands: Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl
- France: CNIL — cnil.fr
10. Security
We take appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS, encrypted connection) and at rest (AES-256)
- Each company’s data separated at database level, and role-based access control (least privilege)
- Daily automated backups
- A log of changes (including to hours, access and roles, company data) that users cannot change or delete from within the app
- Geographic limitation to EU data centers for primary processing
See also our Security page.
11. Changes to this policy
We may change this privacy policy from time to time. We will communicate material changes at least 30 days in advance by email to customers and through a notice on cleaniro.com.