This Privacy Policy explains how Manor Enterprises, LLC (“we”, “us”, “our”) collects, uses, shares, protects, retains and deletes information when you use Manor: the Manor mobile app for Android (package com.firstclasscleaning.manor) and iOS, the Manor web app, and the owner portal and online payment pages (together, the “Service”).
Manor is a business tool for cleaning and property-care companies (“Companies”). Companies use it to schedule and record work, coordinate their staff, manage the properties they look after, and bill property owners. If you use Manor because a Company invited you, as an employee, contractor or property owner, that Company decides what information about you goes into Manor. See Our role and the Company’s role.
1. Our role and the Company’s role
For information a Company enters into Manor about its own business, staff, customers, properties and guests, the Company decides why and how that information is used. We process it on the Company’s behalf and under its instructions, to provide the Service to it. If you are a Company’s employee, contractor, property owner or guest, you can contact that Company about your information. You can also contact us and we will help, or pass your request to the Company where it is theirs to decide.
For information we collect for our own purposes, we are responsible for it. That includes Company sign-up applications, account security, billing of Companies, and keeping the Service running and secure.
2. Information we collect
2.1 Information you or your Company give us
| Category | Examples | Source |
|---|---|---|
| Account information | Name, initials, email address, phone number, role (for example admin, office, cleaner, inspector or owner), job title, service area, account status. Your password is handled by our authentication provider and stored only in hashed form; we never see it. | You, or the Company that invited you |
| Company information | Company name, legal entity name, business type, website, business address, company phone, and the contact details of the person applying | The person signing a Company up |
| Work records | Tasks and schedules, checklists, inspection results and notes, maintenance tickets, inventory counts, task messages between team members, and the times work was started and completed | You and your team |
| Photos | Photos taken or chosen in the app to record completed work, maintenance issues and reference images. A photo can incidentally show a property’s interior or anything else in frame. | You and your team |
| Property information | Property names and addresses, access instructions, door or lockbox codes, Wi-Fi details, and notes | The Company or the property owner |
| Guest and booking information | Guest name, phone and email, check-in and check-out dates and times, and check-in notes for the stays a Company cleans around | The Company |
| Pay and billing information | Rates for work, amounts earned, invoices, invoice line items, billing email, and payment status and history. Card and bank account details are entered directly with our payment processor, Stripe, and never reach our servers; we receive only limited details such as card brand, last four digits, payment method type and whether a payment succeeded. | The Company, property owners, Stripe |
| Payout onboarding | To receive payments, a Company provides identity, business and bank details directly to Stripe. We receive only the account’s status (for example, whether payouts are enabled) and what Stripe still requires. | Stripe |
| Communications | Messages you send us, support requests, and records of emails the Service sends (invitations, password resets, invoices, receipts and reminders) | You, the Service |
2.2 Information collected automatically
- Technical and log data. When the app or website talks to our servers, our hosting providers record standard request information: IP address, date and time, the request made, browser or app version, and error details. We use it to run, secure and fix the Service.
- Information stored on your device. So that you stay signed in and can keep working with a weak or no connection, the app stores your sign-in session and a working copy of the data you need, including work you recorded offline and not yet uploaded, in the app’s private storage on your device. It is removed when you sign out or uninstall the app.
- Network status. The app checks whether your device is online, so it knows when to upload work saved offline. This status is not sent to us.
- Bot protection. Our Company sign-up form uses Cloudflare Turnstile to tell people from automated abuse. Turnstile processes device and browser signals under Cloudflare’s privacy policy.
2.3 What we do not collect
- We do not collect your precise or approximate location.
- We do not access your contacts, call logs, SMS, calendar, microphone or other files on your device.
- We do not use advertising identifiers, show ads, or include advertising or third-party analytics tools in the app.
- We do not sell personal information or share it for cross-context behavioral advertising.
3. Device permissions
- Internet access: to connect to the Service. This is the only permission the Android app declares.
- Camera and photos: when you choose to attach a photo, your device’s own camera or photo picker opens. The app receives only the photo you take or select, and only when you choose to.
4. How we use information
- To provide the Service: create and manage accounts; schedule, assign and record work; show the right information to the right team members; store photos and messages; sync work saved offline.
- To process payments: create invoices, take payments through Stripe, show any processing fee before you pay, issue receipts and refunds, and pay Companies out.
- To communicate with you: send invitations, password-reset links, invoices, receipts, payment reminders, service notices and support replies. We do not send marketing email without your permission.
- To keep the Service safe: authenticate users, prevent fraud and abuse, enforce our Terms and Conditions, and investigate security incidents.
- To maintain and improve the Service: diagnose errors, monitor performance and fix problems.
- To meet legal obligations: keep financial and tax records, and respond to lawful requests.
We do not use personal information to make decisions with legal or similarly significant effects based solely on automated processing.
5. How we share information
We share information only as follows:
- Within your Company. Information is visible to other members of your Company according to their role. For example, admins and office staff see the team’s tasks, a cleaner sees the tasks assigned to them, and a property owner sees work and invoices for their own properties. Access is enforced on our servers, not only in the app.
- Between a Company and its property owners. Owners see the work performed at their properties, related photos and their invoices. Companies see owners’ payment status.
- Service providers who process information for us under contract and only to provide their service:
- Supabase: database, authentication, file storage and server functions
- Stripe: payment processing, Company payouts and payout onboarding (Stripe Privacy Policy)
- Resend: delivery of email
- Vercel: hosting of the web app and owner portal
- Netlify: hosting of the trymanor.com website, including these legal pages
- Cloudflare: bot protection on the sign-up form
- Legal and safety. When we believe in good faith that disclosure is required by law, regulation or legal process, or is necessary to protect the rights, property or safety of users, the public or us.
- Business transfers. In a merger, acquisition, financing or sale of assets, information may transfer to the successor, which must continue to protect it as this policy describes.
- With your consent, or at your direction.
6. How we protect information
- All data sent between the app and our servers is encrypted in transit using HTTPS/TLS.
- Data is stored with our infrastructure providers, who encrypt it at rest.
- Access controls in the database itself limit each user to the data their Company and role allow, so another Company’s users cannot read your Company’s data.
- Passwords are stored only in hashed form, and password resets use single-use, time-limited links.
- Card and bank details are handled by Stripe, a PCI DSS Level 1 certified payment provider, and never pass through our servers.
- Administrative access to production systems is limited to personnel who need it.
No system is perfectly secure. If we learn of a security incident that affects your personal information, we will notify you and the relevant authorities as the law requires.
7. How long we keep information
| Information | How long we keep it |
|---|---|
| Account information | While the account is active. Deleted within 30 days of an account deletion request, or of the Company removing the account. |
| Work records, photos and messages | While the Company’s account is active, because they form the Company’s business records. Deleted within 90 days after a Company closes its account, unless the Company asks us to delete them sooner. |
| Invoices, payments and refunds | For 7 years after the transaction, to meet tax, accounting and anti-fraud obligations. |
| Server logs | Up to 90 days. |
| Backups | Deleted data can remain in encrypted backups for up to 30 days, until those backups are overwritten. |
| Data stored on your device | Until you sign out or uninstall the app. |
8. How to delete your account and data
You can ask us to delete your Manor account and the personal data associated with it at any time. You do not need the app installed to do this.
8.1 How to make a request
- Email admin@trymanor.com with the subject “Manor account deletion request”.
- Send it from the email address on your Manor account, or tell us that address and the name of the Company you work with.
- We will confirm that the request comes from the account holder. We may email a confirmation link to the account address before deleting anything.
- We will confirm when the deletion is done, within 30 days of verifying your request.
If you work for a Company, its administrator can also remove your account directly in Manor, from the Cleaners screen (staff) or the Owners screen (property owners).
8.2 What is deleted
- Your sign-in account and password
- Your profile: name, email address, phone number, role, job title and service area
- Your personal settings and permissions
- The sign-in session and working copy stored on your device, when you sign out or uninstall
8.3 What is kept, and for how long
- Business records belonging to your Company, such as tasks you completed, inspection results, photos and messages you added. They are kept as the Company’s records but no longer linked to your name where that is technically possible. They are deleted when the Company deletes them or closes its account (see section 7).
- Invoices, payment and refund records: kept for 7 years, as the law requires for financial records.
- Backups: overwritten within 30 days.
To delete specific information without deleting your account, such as a photo or a message, email us at the same address or ask your Company’s administrator.
9. Your choices and rights
- Access and correction: you can see and update your name and phone number under Settings in the app. For anything else, contact your Company or us.
- Copy of your data: you can ask us for a copy of the personal information we hold about you.
- Deletion: see section 8.
- Emails: invoices, receipts and account emails are part of the Service. You can ask a Company to change the billing email it uses for you.
- Photos: the app can attach photos only when you choose to take or select one.
We will not treat you differently for exercising any of these rights. To make a request, contact us as described in section 14. We will respond within the time the law requires, and in any case within 45 days.
10. US state privacy rights
Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas and other US states with comprehensive privacy laws, you may have the right to:
- know what personal information we collect, use and disclose;
- access, correct and delete your personal information;
- receive it in a portable format;
- opt out of the sale or sharing of personal information, or its use for targeted advertising or profiling. We do none of these;
- limit the use of sensitive personal information. We use it only to provide the Service;
- appeal our decision about your request, by replying to our decision. If we deny your appeal, you may contact your state Attorney General.
You can authorize an agent to make a request for you. We may ask the agent for proof of that authority, and we may ask you to verify your identity. In the past 12 months we have not sold personal information, and we have not shared it for cross-context behavioral advertising.
11. Children
Manor is a workplace tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
12. Where information is processed
The Service is provided from the United States, and information is stored and processed there by us and our service providers. If you access the Service from elsewhere, your information will be transferred to the United States, which may have different data protection laws from your own.
13. Changes to this policy
We may update this policy as the Service or the law changes. We will change the “Last updated” date above. If a change is material, we will tell you in the app or by email before it takes effect.
14. Contact us
For questions, requests or complaints about privacy, contact:
Manor Enterprises, LLC
Attn: Privacy
1094 W Vista Ridge Dr
Lehi, UT 84048
Email: admin@trymanor.com