Privacy Policy

Can Cleaning Software

Effective date: October 14, 2026 · Operated by Josh McCauley LLC

1. Who this policy covers

Can Cleaning Software (CanCleaningSoftware) is business-management software for service businesses. It is operated by Josh McCauley LLC (“we,” “us,” or “our”). This policy describes how we collect, use, store, share, and delete information when you use the websites, web application, mobile app, and related communications (the “Services”).

The Services are multi-tenant. Each business has its own account. Information a business enters, connects, or receives is kept with that business’s account and is not shown to other businesses on the platform.

This policy covers two groups. The first is the business and its staff: owners, administrators, office users, cleaners, and sales representatives who use the Services. The second is that business’s own customers: the people the business schedules, bills, and messages. We process customer records on the business’s instructions so the business can run its operations. We do not own a business’s customer list or its Google Business Profile.

2. Information we collect

What we collect depends on the features a business turns on and the information people submit.

Business account and staff

Name, email address, phone number, role, and sign-in credentials for people who use the Services
Business name, branding, service area, settings, and support correspondence
Payroll, commission, and time records a business chooses to keep, including a clock-in or clock-out location when that payroll feature is used
Optional door-to-door signup audio, stored as a private file with the consent text and timing recorded for that signup, when a business enables recording

A business’s customers

Name, company, email, phone, billing address, and service address
Service details such as can counts, notes, schedule, route, service history, invoices, and referral information
Map coordinates derived from a service address, and an optional navigation point
Photos taken for a service stop
Messages the business sends or receives with that customer
Files a business uploads to import customers or service history

Payments

Card payments are processed by the payment provider the business connects: Stripe, Xplor Pay, or Authorize.Net. The card is tokenized by that provider. We store the provider’s customer and payment-method identifiers and, when the provider returns them, the card brand, last four digits, and expiration. We do not store the full card number on our servers for those tokenized payments. Merchant credentials that we store for a business are encrypted. Platform payment keys stay in server configuration and are not shown in the application.

Technical information

We store the sign-in token in the browser’s local storage. The application also sets a security cookie used to protect form posts, and it records server logs that can include IP address, browser type, and the page or API requested. We do not run a third-party advertising or product-analytics tag in the application.

3. Google Business Profile

A business may choose to connect a Google account that manages its own Google Business Profile. Connecting is optional. The business owns that profile. Can Cleaning Software does not own it and does not take it over.

An administrator starts the connection from review settings. Google shows its consent screen. After Google redirects back, an administrator must confirm the connection inside Can Cleaning Software before the connection becomes active. The application requests this OAuth scope:

https://www.googleapis.com/auth/business.manage

Google describes that scope as access to manage Business Profile information for locations the Google account is allowed to manage. This application uses the granted access to:

Read the email address of the Google account that is connecting
List the Business Profile accounts that account can manage
List the business locations on those accounts
List reviews for the one location an administrator selects

For each review we copy Google’s review id, the reviewer display name, star rating, review comment, and review time into that business’s account. Google does not provide the reviewer’s email address or phone number to this application, and we do not collect them from the review.

We use the copied reviews to help the business see which customers have already left a review, so it can avoid asking those customers again. The application compares the reviewer name with customer names. A close name is suggested only when that customer also has a completed service within two days of the review. A person at the business confirms or dismisses each suggestion. When a match is confirmed, message templates that include the review-request placeholder are left blank for that customer. Other customers can still receive the review-request text the business wrote, including the business’s own review link.

We do not use this Google access to reply to reviews, edit the Business Profile, create posts, or run ads. We do not send Google review data to the AI provider described below. We do not sell Google user data, share it with other businesses on the platform, or use it to train generalized models.

The connected Google email, account identifier, location identifier, location title, and copied review fields are stored in that business’s database records. Access tokens and refresh tokens are encrypted before they are stored. They are used to keep the connection and to list reviews when an authorized user syncs, including refreshing an expired access token.

Disconnecting inside the product removes the stored tokens and the saved Google account, location, and email from Can Cleaning Software. It does not delete reviews already copied into the account, and it does not by itself remove the app from the Google account. The Google account holder can revoke access at Google Account permissions. Changing the selected location deletes the reviews previously synced for that business. Delete all operational data, described below, deletes the synced reviews, the matches, and the Google connection record.

Can Cleaning Software’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

We use information to:

Provide, operate, and secure the Services
Create and manage business and user accounts
Schedule service, run routes, and keep service history
Send the messages a business asks the Services to send, including email, SMS, and mobile notifications
Process invoices and payments through the payment provider the business connected
Match Google reviews to customers when the business connects Google and confirms a match
Provide support when you contact us
Detect abuse, keep financial and consent records, and meet legal obligations that apply to us

We do not sell personal information. We do not use Google user data for advertising.

5. Service providers

We use service providers to operate the Services. They process information for that purpose and are not authorized to use it for their own marketing. The providers that apply depend on the features a business uses:

Google, for the Business Profile connection described above, and separately for maps, geocoding, directions, and route optimization using platform Maps credentials rather than the business’s Google login
Twilio, for SMS and voice features a business enables
Resend, for email delivery
Stripe, Xplor Pay, and Authorize.Net, for card payments a business connects
OpenAI, or another AI endpoint configured for the platform, when an AI feature is used
Meta, when a business connects a Facebook Page to import leads
Apple Push Notification service, when the iOS app registers a device for operational notifications

The application database and related infrastructure store the records. We do not publish a separate hosting region in the product.

6. SMS, email, and phone

When a business enables messaging, the Services can send and store transactional and conversational SMS and email about scheduling, service, billing, and support. Message content, phone numbers, email addresses, delivery status, and opt-in or opt-out records are stored with that business’s account. Consent to receive SMS is not a condition of buying the business’s services.

Message frequency depends on the business’s activity and settings. Message and data rates may apply. A recipient can reply STOP to opt out of SMS or HELP for help. Opting out of SMS does not turn off email or in-product notices. SMS consent and opt-out records are kept even when a business deletes its other operational data, so a later message does not ignore a prior stop request.

Voice calling, when enabled, is placed through Twilio. Call routing settings and related records are stored with the business account.

A business’s own customers may have a separate SMS privacy page on that business’s site. That page describes the business’s texts. This policy describes the platform.

7. AI features

Some features draft a reply, answer a staff question, or help with scheduling by sending the relevant conversation and operational facts to an AI provider. The platform uses OpenAI unless a different endpoint is configured. Those calls happen only when the feature is configured and a user or an enabled automation uses it.

The prompt can include customer and job details needed for that task. We store the conversation and usage records in the business’s account. Google review records are not included in those AI calls. AI output is shown to the business’s users; a person can review or reject it depending on the feature’s settings.

8. Other connected services

Maps. When a business uses maps, geocoding, directions, or route optimization, service addresses and coordinates are sent to Google Maps with the platform’s Maps credentials. That is separate from the Google account a business connects for reviews.

Facebook leads. If a business connects a Facebook Page, we store a Page access token and import the lead fields Facebook returns, such as name, email, phone, and form answers, so the business can create or update a customer.

Mobile app. The iOS app can register a device token so we can send operational notifications, such as a new message or a route update, through Apple Push Notification service. The token is stored with the user who registered the device.

9. How long we keep information

We do not apply one retention period to every record. Information stays in the business’s account while the account uses the Services, unless it is deleted by an action below or we must keep it for billing, consent, security, or a legal obligation.

Disconnect Google removes the stored Google tokens and the saved Google account, location, and email. Copied reviews remain until a later deletion.
Choosing a different Google location deletes the reviews previously synced for that business.
Delete all operational data, in the business’s settings, deletes customers, service history, routes, messages, synced Google reviews, review matches, and the Google connection record. A separate Keep CRM Setup option deletes customer and operational records while retaining reusable configuration such as sequences, templates, pricing plans, and staff settings. Both keep the company account, owner and administrator access, platform subscription and billing status, SMS consent and opt-out records, and connections such as Twilio, email, and payment providers. Those company resets are not used as a substitute for personal account deletion.
Personal account deletion removes a staff login, mobile device and push registrations, and personal profile links. It does not delete the company account or that company’s customers, invoices, routes, payments, or SMS consent evidence. Billing, consent, security, and legal records may be retained for as long as those obligations apply.
An administrator can edit or delete individual customer records in the product.

To ask us to correct or delete personal information, use the account deletion page, the in-app Delete Account option, or email support@cancleaningsoftware.com. We may need to confirm that you are the person the request is about, or that you are authorized to act for the business. We may retain information the product is built to keep, including billing records, SMS opt-out records, and security logs. If you are the last administrator for a company, we will not silently delete the company; ownership transfer or business closure is handled as a separate process.

10. Security

Business records are stored so that one business’s account is not served as another business’s data. Account passwords are stored as hashes. Google access and refresh tokens, and tenant payment credentials that we store, are encrypted before storage. The public site redirects to HTTPS.

These measures reduce risk. They are not a guarantee that unauthorized access is impossible.

11. Your choices

Do not connect Google. Review matching stays off, and we do not receive that business’s Google reviews.
Disconnect Google in review settings, and revoke Can Cleaning Software at Google Account permissions if the Google account should stop granting access.
Turn off optional features such as SMS, AI, Facebook leads, maps, or signup recording.
Reply STOP to opt out of SMS from a business using the Services.
Delete your personal staff account in the mobile app under Account → Delete Account, or use the public account deletion page.
Email support@cancleaningsoftware.com to request access, correction, or deletion.

12. Browser storage

The sign-in token is stored in local storage on the device you use to sign in. A security cookie is used so the site can tell a real form post from a forged one. The interactive application also keeps a short-lived connection while a page is open. You can remove the token by signing out, or by clearing site data in the browser. Blocking cookies or site data can prevent sign-in.

13. Children

The Services are for businesses and their adult users. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us and we will take appropriate steps.

14. Changes

We may update this policy. When we do, we change the effective date at the top. The current version is posted at /privacy and /legal/privacy.

15. Contact

Josh McCauley LLC · Can Cleaning Software

Email: support@cancleaningsoftware.com