Privacy Policy

Sweptt ("we", "us", or "our") operates the Sweptt platform — a cleaning management tool for short-term rental hosts. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. By using Sweptt you agree to the practices described below.

If you have any questions, contact us at hello@sweptt.com.

1. Information We Collect

Account information

When you register, we collect your name, email address, and password (stored as a secure hash). If you are invited as a cleaner, we collect your name and email.

Property and reservation data

You may enter property addresses, iCal feed URLs, reservation dates, and guest information. This data is stored and used solely to power the Sweptt service for your organisation.

Cleaning task data

We store task details, status updates, checklist completions, and photos uploaded by cleaners as proof of completion. Photos are stored securely and accessible only to members of your organisation.

Usage and log data

We automatically collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This helps us diagnose issues and improve the service.

Payment information

Payments are processed by Stripe. We do not store your card details — Stripe handles all payment data under their own Privacy Policy. We store your Stripe customer ID and subscription status.

2. How We Use Your Data

• To provide and operate the Sweptt platform
• To send transactional emails (account verification, password reset, task notifications)
• To process payments and manage your subscription
• To detect and prevent fraud or misuse
• To improve the product based on usage patterns

We do not sell your data to third parties. We do not use your data for advertising.

3. Data Sharing

We share your data only with the following sub-processors required to operate the service:

• Railway — cloud infrastructure and database hosting
• Vercel — frontend hosting and edge delivery
• Stripe — payment processing

All sub-processors are contractually bound to protect your data and may not use it for their own purposes.

4. Cookies

We use a small number of strictly necessary cookies:

• refresh_token — an httpOnly cookie used to keep you signed in securely. It is never accessible to JavaScript.

We do not use advertising cookies or third-party tracking cookies. The landing page does not set any cookies.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. billing records for up to 7 years).

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@sweptt.com. We will respond within 30 days.

7. Data Security

We take reasonable technical and organisational measures to protect your data including HTTPS encryption in transit, hashed passwords, httpOnly secure cookies, and row-level data isolation between organisations. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Sweptt is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email.

10. Contact

For any privacy-related questions or requests:
Sweptt
hello@sweptt.com