Cleanflow

Your data, explained clearly

Privacy policy

This policy explains how Cleanflow collects, uses, shares, stores, and protects personal data when you use our website, customer app, provider app, support channels, and related services.

Effective: October 19, 2026 Commercial Registration 7054224881 info@cleanflowksa.com

1. Who we are

Cleanflow (Commercial Registration 7054224881) operates a technology marketplace that helps customers discover and book cleaning services offered by independent provider companies in Saudi Arabia. Cleanflow acts as the controller of personal data used to operate the platform, unless a different role is explained at the point of collection.

Privacy contact: info@cleanflowksa.com

2. Personal data we collect

Customer account and profile data

  • Phone number, verification status, name, profile image, date of birth, and gender when provided.
  • Saved addresses, service-area information, location coordinates, building details, access notes, and cleaning instructions.

Provider and staff data

  • Business contact details, public profile content, commercial and verification records, service areas, service catalog, pricing, gallery media, and bank or payout information.
  • Staff names, work email addresses, roles, account credentials, permissions, and booking assignments.

Booking, payment, and support data

  • Service selections, answers, schedules, addresses, booking status, cancellations, reviews, support messages, and communications.
  • Payment status, transaction references, card brand and last four digits, stored payment token references, refunds, platform credits, provider earnings, and payout records. Cleanflow does not intend to store full card numbers.

Device and technical data

  • IP address, device and app information, push-notification identifiers, security logs, session data, crash information, and website usage data.
  • Camera, photo-library, and location data only when you use a feature that requires it and your device permits access.

3. How we collect personal data

We collect data directly from you when you create or update an account, verify your phone number, save an address, request a booking, make a payment, upload content, join as a provider, contact support, or exercise a privacy right. We also receive limited data automatically from your device and from service providers involved in authentication, payments, mapping, hosting, communications, and fraud prevention.

4. How we use personal data

  • Create, authenticate, secure, and support user accounts.
  • Show services relevant to a selected location and calculate booking details.
  • Create and manage bookings, provider responses, assignments, cancellations, payments, credits, reviews, and notifications.
  • Enable providers to operate their company workspace and manage authorized staff.
  • Prevent fraud and abuse, investigate incidents, enforce platform rules, and protect users.
  • Respond to questions, complaints, legal requests, and privacy-rights requests.
  • Maintain, troubleshoot, measure, and improve the reliability and usability of our services.
  • Meet accounting, tax, regulatory, dispute-resolution, and other legal obligations.

6. Sharing and disclosure

We disclose only the data reasonably needed for the relevant purpose:

  • Customers and providers: booking participants receive the information required to deliver, manage, and support the service.
  • Technology and operational processors: hosting, object storage, databases, mapping, push notifications, SMS, email, analytics, customer support, security, and payment providers process data under appropriate contractual controls.
  • Professional advisers and authorities: data may be disclosed where required by law, legal process, audit, dispute handling, public safety, or the protection of rights.
  • Business changes: data may be transferred as part of a merger, financing, restructuring, or sale, subject to applicable safeguards and notice requirements.

We do not sell personal data. We do not share personal data with third parties for their independent direct-marketing purposes without an appropriate legal basis.

7. Storage and international transfers

Cleanflow uses cloud and technology providers that may process or support data from locations inside or outside Saudi Arabia. Where personal data is transferred internationally, we apply the approvals, safeguards, and transfer requirements required by Saudi law and limit the transfer to what is necessary for the stated purpose.

8. Retention, deletion, and anonymization

We keep personal data only for as long as needed for the purpose for which it was collected and to meet legal, accounting, tax, security, anti-fraud, support, and dispute-resolution requirements. Retention is assessed by data type, sensitivity, business need, applicable limitation periods, and legal obligations.

  • Account and profile information is retained while the account is active and is deleted or anonymized after an approved deletion request unless it must be retained.
  • Booking, payment, invoice, credit, payout, and audit records may be retained for the period required by Saudi laws and legitimate dispute or fraud-prevention needs.
  • Expired authentication challenges, inactive sessions, push identifiers, and unnecessary operational records are removed or anonymized according to operational schedules.
  • Backups are protected and removed through controlled rotation cycles.

When retention is no longer necessary, we delete, securely destroy, or irreversibly anonymize the data. Visit our account deletion page to submit a request.

9. How we protect personal data

We use administrative, organizational, and technical measures designed to protect personal data, including role-based access, authentication controls, encryption in transit, credential hashing, session controls, logging, and restricted access to operational and financial information. No system is completely secure, but we review and improve safeguards as the platform evolves.

10. Your privacy rights

Subject to the Saudi Personal Data Protection Law and its implementing regulations, you may have the right to:

  • be informed about how your personal data is processed;
  • access your personal data and request a readable copy;
  • request correction, completion, or updating;
  • request destruction when the data is no longer necessary, subject to lawful retention;
  • withdraw consent where processing relies on consent; and
  • raise a complaint with Cleanflow and, where applicable, the competent Saudi authority.

Email info@cleanflowksa.com to exercise a right. We may verify your identity and request only the information needed to evaluate the request. We will acknowledge the request and communicate the expected response time and any lawful restriction that applies.

11. Children

Cleanflow is not designed for children to create or manage accounts independently. If you believe a child has provided personal data without appropriate authorization, contact us so we can investigate and take appropriate action.

12. Policy updates, complaints, and contact

We may update this policy when our services, processors, or legal obligations change. We will update the effective date and provide an appropriate notice when a change materially affects how personal data is processed.

For privacy questions, rights requests, or complaints, contact info@cleanflowksa.com. If you are not satisfied with our response, you may contact the competent Saudi data-protection authority through its official channels.