Privacy Policy
Last updated: August 2, 2025
Effective date: August 2, 2025
Tidy24 (“Tidy24”, “we”, “us” or “our”) operates the Tidy24 platform—currently in Beta, a B2B multi-tenant SaaS solution designed to streamline cleaning-business operations (bookings, scheduling, CRM, invoicing, analytics). We respect your privacy and are committed to protecting your personal data in compliance with EU/UK GDPR, California’s CCPA, Canada’s PIPEDA, and other applicable laws.
1. Who We Are
Tidy24
- Headquarters: Smila, Ukraine
- Email: privacy@tidy24.com
- Phone: +380 500 800 200
You may also reach our Data Protection Contact at privacy@tidy24.com for any privacy-related inquiries.
2. Scope & Applicability
This Privacy Policy applies to all users of tidy24.com and related subdomains, our mobile and web applications, and any services we provide. It explains:
- What personal data we collect
- Why and how we use it
- With whom we share it
- Your rights under EU/UK GDPR, CCPA, PIPEDA, and other laws
- How to contact us about your privacy
3. What Data We Collect
We collect the following types of data:
Account & Profile
Name, email, phone, company name & address
Credentials
Username, hashed password
Payment Info
Billing details via secure third-party processors (e.g. Stripe)
Service Data
Booking details, client notes, invoices, CRM records
Usage & Analytics
IP, device/browser info, pages visited, performance metrics
Cookies & Tracking
See our Cookie Policy
4. How We Use Your Data
We use your data for the following purposes:
- Service Delivery: account setup, scheduling, invoicing, notifications
- Support: troubleshooting, customer inquiries
- Billing: payment processing, refunds, invoices
- Improvement: usage analytics, A/B tests, feature optimization
- Marketing: newsletters & offers (only if you’ve opted in)
- Compliance: fraud detection, legal obligations
5. Legal Basis for Processing (GDPR)
- Contract performance (Art. 6(1)(b)) – to fulfill our agreement
- Legal obligation (Art. 6(1)(c)) – comply with laws (tax, finance)
- Legitimate interests (Art. 6(1)(f)) – security, platform improvement
- Consent (Art. 6(1)(a)) – for marketing & non-essential cookies (you can withdraw anytime)
8. Data Retention
We retain data while your account is active or as needed to:
- Provide services
- Comply with legal obligations
- Resolve disputes, enforce agreements
Afterward, we securely delete or anonymize personal data per our retention schedules.
9. Data Security
We implement robust safeguards, including:
- Encryption: TLS 1.2+ in transit; AES-256 at rest
- Access Controls: role-based permissions; 2FA for staff
- Audits: regular vulnerability scanning & penetration tests
- Incident Response: documented breach protocol and notifications
10. International Transfers
Your data may be stored or processed in Ukraine, the U.S., or other countries. We rely on:
- EU Standard Contractual Clauses (SCCs) for EU/UK transfers
- PIPEDA-compliant safeguards for Canadian data
11. Your Rights
Depending on your jurisdiction, you may have the right to:
Right | EU/UK GDPR | CCPA (California) | PIPEDA (Canada) |
---|---|---|---|
Access | ✔ | ✔ | ✔ |
Rectification | ✔ | ✔ | ✔ |
Erasure (“Right to be Forgotten”) | ✔ | ✔ (with exceptions) | ✔ |
Restriction of Processing | ✔ | — | — |
Data Portability | ✔ | — | ✔ |
Object to Processing | ✔ (L.I.) | ✔ (sale of data) | ✔ |
Opt-out of Sale | — | ✔ | — |
Withdraw Consent | ✔ | ✔ | ✔ |
To exercise any right, please email privacy@tidy24.com or use your account dashboard. We will respond within applicable legal timeframes.
12. California Privacy Rights
Under the California Consumer Privacy Act (CCPA), California residents also have:
- The right to know what personal data we collect, use, share, or sell
- The right to request deletion of personal data
- The right to opt-out of the “sale” of personal data (we do not sell your data)
- The right not to receive discriminatory treatment for exercising these rights
13. EU & UK Residents
Under the EU GDPR and UK Data Protection Act 2018, you may:
- Lodge a complaint with your supervisory authority (e.g., ICO in the UK, CNIL in France)
- Withdraw consent at any time for processing based on consent
14. Canadian Residents
Under PIPEDA and applicable provincial laws, Canadian residents have:
- The right to access and correct personal data
- The right to file a complaint with the Privacy Commissioner of Canada
15. Children’s Privacy
Our services are intended for business users aged 16 or older (18+ in certain regions). We do not knowingly collect personal data from individuals below this age.
16. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements.
- We will post any changes here with a new “Last updated” date.
- Continued use of our services after changes constitutes acceptance.
17. Contact Us
For any questions or to exercise your data protection rights under GDPR, CCPA or PIPEDA, please contact:
Tidy24 (Beta)
- Smila, Ukraine
- Phone: +380 500 800 200
- Email: privacy@tidy24.com
We aim to respond to all inquiries within 30 days or sooner as required by law.