Privacy Policy
Last updated August 4, 2026
What we store
- Host accounts: name, email, and a hashed password.
- Property details a host enters or imports: addresses, timezones, door codes, wifi details, and reservation data (dates, party size, and guest names as provided by the host's booking platform).
- Cleaner details: name, phone number, language, and sign-in PIN, plus the job history, photos, and videos they capture at work.
- Photos and videos of properties, taken as proof of cleaning work.
- Payment metadata: amounts, payment status, and payout timing. Card and bank numbers never touch Impeca. They are entered on Stripe's pages and held by Stripe.
- Device push tokens (only when the mobile app registers one) and routine server logs.
How we use it
To run the service: scheduling cleans, dispatching and paying cleaners, storing proof, notifying people about their work. Push notifications to your browser or phone, text messages to a phone on file when the deployment has text delivery configured, account email (sign-up, password resets, team logins), and one alert email to a workspace's managers when a cleaner reports something urgent. And, when AI features are enabled, sending photos, video frames, and related job text to Anthropic's API to produce the analysis shown in the app. That is the whole list.
Who else touches it
Data lives with the processors that run the service: AWS (hosting and storage), Stripe (payments), Anthropic (AI analysis, when enabled), Amazon SES, which is part of AWS (email delivery. It receives the recipient's name, email address, workspace name, the sign-in or password-reset link being sent, and, for an urgent-report email, the property name and the cleaner's words), your browser vendor's push service (Apple, Google or Mozilla, when you switch phone alerts on. It receives an opaque delivery address and the encrypted message, never your identity), Google Firebase (push delivery, only for the native app shells, where one is installed), and Twilio (text messages, when the deployment has them configured. It receives the recipient's phone number and the text itself, which names the property, the date, and the pay for a job offer). If you connect Slack, Hospitable, Amazon Business, or a smart-lock provider, data flows to that service only as needed for the feature you connected. We do not sell personal data, share it for advertising, or give one workspace access to another's data.
Cleaners
A cleaner's information is entered by the host who invites her or by the cleaner herself, and is used to offer, run, and pay for cleaning work in that workspace. Cleaners see their own jobs, pay, and history. Never a host's other business data.
Cookies
Impeca sets sign-in session cookies and a language preference. There are no advertising or cross-site tracking cookies.
Retention and deletion
Data is kept while your workspace is active, because job history, proof, and payment records are the product. Ask and we will delete your workspace and its data, subject to records we must keep for payment and legal compliance.
Security
Traffic is encrypted in transit, passwords are stored hashed, sessions are cryptographically signed, and every workspace's data is isolated from every other's.
Contact
Privacy questions or deletion requests: contact whoever runs your Impeca deployment.