Privacy Policy

1.Who we are

Next Clean is a web application for residential cleaning companies, available at app.nextcleanapp.com. Next Clean is operated by Lynx Ledgers LLC, a Massachusetts limited liability company located in Fall River, Massachusetts, USA (“Next Clean”, “we”, “us”).

This policy covers the Next Clean app, this website (nextcleanapp.com), messages sent through the app, and emails sent to our support address. Questions: [email protected].

2.Who is responsible for the data

Our customers are cleaning companies. The people who use Next Clean for a cleaning company (owners, office staff and cleaners) are “business users”. The households a cleaning company works for are its “clients”.

Records about clients and team members

When a cleaning company enters information about its clients or its team, the cleaning company decides what to collect and how to use it. For that information the cleaning company is the controller (the “business” under California law), and Next Clean is its processor (“service provider”): we use it only to provide the app to that cleaning company, as our Terms of Service describe. If you are a client of a cleaning company, that company is your first contact about your information; we will help it answer you.

Account information

For a cleaning company’s account, business users’ sign-in details, this website and messages sent to our support address, Next Clean is the controller.

3.Information we process

Business accounts and sign-in

Name, company name, email address, phone number, password (kept only as a secure hash by our sign-in provider), language, time zone and country, and the company’s details such as its address, logo, email, phone and invoice footer.

Information cleaning companies enter about their clients

Name, phone numbers, email address, service addresses and their map location, home access instructions and entry codes, preferred language and contact channel, optional birthday and photo, notes, custom fields, the schedule of visits, estimates, agreements, invoices, payments and tips, ratings, and the client’s SMS and WhatsApp consent settings. Clients do not create accounts.

What clients do through secure links

A client who opens a link from their cleaning company can approve or decline an estimate, sign an agreement, view or pay an invoice, rate a visit, report a payment made outside the app, or send a message. When a client signs an agreement, we record the typed name, the signature image, the date and time, the IP address and the browser’s user agent, as evidence of the signature. We record when each link was first and last opened, and how many times.

Messages

The content of SMS, WhatsApp and email messages sent and received through the app, the phone number or email address used, attachments, and delivery status. Messages are stored in the cleaning company’s account.

Team information

For cleaners and staff: name, email, phone, photo, team, hire date, schedule and time off, visit start and finish times, photos taken on the job, and the pay information the company enters (rates, pay periods and totals). We do not collect Social Security numbers, tax ID numbers, government ID numbers or bank account numbers of team members.

Location

When a cleaner taps On my way, More time, Start or Finish in the team app, the app asks the device for its location once and records the coordinates, their accuracy and the distance to the service address. The app does not track location continuously. If the cleaner does not allow location access, the action still works without it. Only users the cleaning company allows to manage employees can see these records.

Payments

Card payments are made on a checkout page hosted by Stripe, into the cleaning company’s own Stripe account. We never receive or store card numbers or security codes. We keep the payment amount, tip, method, date and Stripe’s reference for the payment. For other payment methods (such as Zelle, Venmo, cash or check), we keep only what the cleaning company records.

Technical information

To keep the service secure and working, we process IP addresses (for example, to limit repeated attempts; these records are kept for up to one day), browser type and error reports. Before an error report is stored, email addresses and phone numbers are masked, and passwords, tokens, keys and entry codes are removed. Error reports are usually deleted after 30 days.

Cookies and similar technologies

This website (nextcleanapp.com) sets no cookies and uses no analytics or tracking. The app (app.nextcleanapp.com) uses only the cookies it needs to work: a sign-in session cookie, a cookie that remembers which company you are working in, and a cookie that remembers your language. The team app also stores pages, photos and pending actions on the device so it can work with a weak signal; signing out clears the cached pages and photos. If a business user turns on notifications, we store that device’s push subscription. We use no advertising cookies, no analytics and no third-party tracking pixels.

4.Why we use it

We use personal information to provide and secure the app; to send the messages, documents and notifications that cleaning companies and business users ask us to send; to process sign-ins; to answer support requests; to prevent abuse; and to comply with the law. We do not use it for advertising, and we do not sell personal information or share it for cross-context behavioral advertising.

Where laws such as the GDPR (European Union) or the LGPD (Brazil) apply, our legal bases are: performing our contract with the cleaning company; our legitimate interest in running a secure and reliable service; complying with legal obligations; and consent where it is required. Consent to receive SMS and WhatsApp messages is collected by the cleaning company before any such message is sent (see section 11).

5.Service providers (subprocessors)

We use these providers to run Next Clean. Each one receives only what it needs for its task.

We don’t sell personal information. We may disclose information when the law requires it, to protect people’s rights and safety, or to a successor if our business is transferred, always subject to this policy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6.How long we keep it

Information stays in a cleaning company’s account while the account exists, unless the company deletes it sooner. Next Clean does not delete client records, messages, documents or photos automatically on a timer.

A client record the company deletes

Removed from the app together with its addresses, visits, conversations and messages. The app does not delete a client who has any invoice or payment, a signed agreement or an approved estimate, because those are the company’s financial and legal records; the company can archive that client instead.

Change history

The app keeps a history of changes to records (what changed, when, and by which user) so the cleaning company can see what happened. It is kept until the company’s account is deleted. On a verified deletion request, we also remove the requester’s entries from it.

A deleted company

Access ends immediately and the company can be restored for 30 days. After that, its data and files are scheduled for permanent deletion, which we complete within 30 more days.

Sign-in accounts

Kept until you ask us to delete them (see Data deletion).

Links sent to clients

Work for 180 days (rating links for 30 days). A signed agreement stays available to the client. Team invitations expire after 7 days.

Data export files

Deleted 24 hours after they are created.

Error reports

Usually deleted after 30 days.

IP addresses used to limit repeated attempts

Deleted after 1 day.

Backups

Made daily and kept for 7 days.

SMS and WhatsApp opt-outs

Kept on the client’s record while the record exists. Our SMS provider, Twilio, also keeps its own opt-out list for our number.

7.Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to object to or limit some uses. California residents have these rights under the California Consumer Privacy Act (CCPA), and the right not to be treated differently for using them. We do not sell or share personal information as the CCPA defines those terms.

How to make a request

• Email [email protected]. To delete information, follow the steps on our Data deletion page.
• We confirm it’s you before acting, usually through the email address or phone number on file.
• We reply within 30 days (45 days where the CCPA applies, extendable as that law allows; we will tell you if we need more time).
• If a cleaning company entered your information, we pass your request to that company and help it respond, because it decides about that information.
• Someone you authorize can make a request for you, with proof of the authorization.
• If we decline a request, you can ask us to reconsider by replying to our answer.

To stop text messages, reply STOP. See section 11.

8.Security and incidents

We protect information with:

• encryption in transit (HTTPS, with HSTS);
• database access rules that keep each cleaning company’s data separate from every other company’s;
• passwords stored only as secure hashes;
• private storage for client files, photos and documents, reachable only through signed links (company logos and profile photos are public);
• links for clients built from long random codes;
• limits on repeated attempts to sign in or open links;
• checking the signatures of the notifications we receive from Stripe, Twilio, Meta and Resend;
• removing personal data from error reports before they are stored.

Home entry codes are never shown on pages, PDFs or messages that clients see, and are masked in the change history. Data is stored with Supabase in the United States, using its encryption at rest. No system is perfectly secure.

Incident response

If we learn of a security incident affecting personal information, we work to contain it within 24 hours, notify affected cleaning companies (and, where required, affected people and authorities) within 72 hours of confirming it, and share a written report within 30 days.

To report a security problem, email [email protected] with “Security” in the subject.

9.International transfers

Next Clean is operated from the United States. Our database, app hosting and email provider are in the eastern United States. Some of the providers in section 5 may process data in other countries under their own safeguards. If you use Next Clean from outside the United States, your information is transferred to and processed in the United States, where data-protection laws may differ from those in your country.

10.Changes to this policy

We may update this policy. For material changes, we will email account owners and post the new version on this page at least 30 days before it takes effect. The date at the top shows the current version.

11.SMS and WhatsApp messaging

Cleaning companies use Next Clean to send service messages to their clients by SMS and WhatsApp. The full description, with the consent script and sample messages, is on our SMS & WhatsApp Messaging Program page.

Who sends the messages

The cleaning company is the sender of its SMS. Next Clean is the platform: SMS is delivered by Twilio from our toll-free number, +1 833-549-6398. On WhatsApp, messages come from the “Next Clean” business account on the same number, delivered by Meta: Next Clean sends them on behalf of, and with the authorization of, the cleaning company, which is named in every message. The default text of every message names the cleaning company.

Consent

A cleaning company may send SMS or WhatsApp messages to a client only after the client has agreed, and only after the company has checked “Accepts SMS” or “Accepts WhatsApp messages” on that client’s record. Both boxes start unchecked for every new client, and the app sends no SMS or WhatsApp message to a client whose box for that channel is unchecked. A client who opted out can also turn messages back on by replying START (or UNSTOP), which checks the box again; a reply such as “yes” does not. Consent to receive SMS is not a condition of purchasing any goods or services.

Message types, frequency and cost

Service messages only: visit reminders, on-the-way and visit updates, estimates, agreements, invoices, receipts, statements, payment reminders, requests to rate a visit, and replies in a conversation with the cleaning company. The program is not used for marketing or promotions. Message frequency varies based on your service activity with the cleaning company. Message and data rates may apply.

Opting out and getting help

Reply STOP to any text message to stop SMS, or STOP on WhatsApp to stop WhatsApp messages. Reply START to receive them again. Reply HELP for help, or email [email protected]. The full list of keywords is on the SMS & WhatsApp page.

How mobile information is shared

We share mobile phone numbers only with the service providers that store and deliver messages for us: Supabase and Vercel (hosting), Twilio (SMS) and Meta (WhatsApp). Message text may also be processed by Anthropic when a business user asks the app to draft a reply, and by browser push services for business users’ notifications. None of them may use it for their own purposes or for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

What is kept

The client’s consent settings, the date and the user of each change to them (in the change history), opt-outs received by STOP, and the messages with their delivery status. They stay in the cleaning company’s account while the client record exists.

12.Children

Next Clean is a business tool for adults. Business users must be at least 18 years old. Next Clean is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe we hold a child’s information, contact us and we will delete it.

13.Contact us