Privacy Policy

TodoClean - Cleaning Business Management Platform

Aion Technologies LLC | www.todogroupapps.com | Effective Date: July 7, 2026 | vs 2.1

1. Introduction and Scope

Aion Technologies LLC, a North Carolina limited liability company doing business as AION Tech ("Aion," "we," "us," or "our"), operates TodoClean. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use TodoClean, including our web-based application, progressive web app, websites, payment features, support, and related services (collectively, the "Service").

TodoClean is designed for independent residential cleaning professionals and cleaning businesses in the United States. This policy applies to business owners, managers, crew members, trial users, website visitors, support contacts, and individuals whose information is entered into TodoClean by a cleaning business, such as cleaning customers.

If you are a cleaning customer of a business that uses TodoClean, that business is usually responsible for deciding what information is entered into TodoClean and how it is used for cleaning services. You should contact that cleaning business first for questions about your job records, invoices, appointments, or customer profile. We may help that business respond to privacy requests where appropriate.

2. Information We Collect

2.1 Information You or Your Business Provide

• Account and contact information, such as name, email address, phone number, business name, mailing address, login credentials, account role, permissions, and support preferences.
• Business profile information, such as service area, business type, subscription plan, crew size, account settings, templates, preferences, and communications with us.
• Customer and job information entered by you or authorized users, such as customer names, addresses, contact details, service preferences, pets, access notes, gate or alarm notes, scheduled dates, job notes, job status, checklists, and job history.
• Crew information, such as crew member names, email addresses, phone numbers, roles, availability, job assignments, check-in/check-out times, and work-related notes.
• Photos and attachments you choose to upload, such as before/after photos, issue documentation, or support attachments.
• Support and communications information, such as emails, messages, call details, feedback, survey responses, and information you provide when contacting us.
• Website forms and early access information, such as contact details, business type, language preference, and information submitted through waitlist, early access, or demo request forms.

2.2 Payment and Stripe Information

TodoClean uses Stripe for subscription billing, payment processing, Stripe Connect onboarding, connected accounts, payouts, refunds, disputes, and related payment services. We do not store full payment card numbers or CVV codes on our servers.

• For subscriptions, Stripe may process payment method details, billing address, card brand, last four digits, expiration date, invoices, receipts, taxes, payment status, and billing history.
• For Stripe Connect and payouts, Stripe may collect and process legal name, business name, address, date of birth, tax information, government identification, ownership information, bank account information, verification status, payout records, refund records, dispute records, chargeback data, and risk information.
• We may receive limited information from Stripe, such as customer ID, connected account ID, subscription status, plan, invoice status, payment status, payout status, refund status, dispute status, chargeback status, fraud or risk signals, and other data needed to provide payment features and support.

2.3 Information Collected Automatically

• Device and usage information, such as IP address, browser type, device type, operating system, referring pages, pages viewed, features used, buttons clicked, timestamps, session information, and error logs.
• Cookies, local storage, and similar technologies used for login sessions, security, preferences, analytics, and performance.
• Crash, diagnostics, and performance information collected through tools such as Sentry or similar providers.
• Approximate location information from IP address for security, analytics, fraud prevention, and service improvement.

2.4 Location Information

If you enable location permissions and use a location-based feature such as check-in/check-out, we may collect precise GPS coordinates and timestamps for that feature. We do not intend to track precise location in the background when you are not actively using a location-based feature. You can disable location permissions in your browser or device settings, but doing so may prevent GPS-based features from working.

2.5 Information from Third Parties

• Stripe, payment networks, banks, and financial partners may provide payment, subscription, payout, verification, dispute, chargeback, and fraud-prevention information.
• Authentication, hosting, analytics, security, email, notification, and support providers may provide account, technical, delivery, or diagnostic information.
• Operators, managers, crew members, or other authorized users may enter information about customers, jobs, crew members, or business operations.

3. How We Use Information

We use personal information for the following purposes:

• Provide, operate, maintain, secure, and improve the Service.
• Create and manage accounts, permissions, crew access, schedules, jobs, reminders, customer records, business settings, and support.
• Process subscriptions, payments, payouts, refunds, disputes, chargebacks, invoices, receipts, taxes, and related payment communications through Stripe.
• Support Stripe Connect onboarding, identity verification, fraud prevention, risk review, payout management, and payment compliance.
• Send account, service, legal, billing, security, support, policy, and transactional communications.
• Send push notifications, email notifications, reminders, or job updates where enabled or permitted.
• Respond to questions, troubleshoot problems, investigate bugs, and provide customer support.
• Monitor performance, analyze usage, develop features, improve user experience, and understand product adoption.
• Detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, security incidents, illegal activity, and violations of our Terms.
• Comply with legal, tax, accounting, regulatory, data breach, law enforcement, payment network, and Stripe requirements.
• Enforce agreements, protect rights, resolve disputes, and support business transactions such as financing, merger, acquisition, or sale of assets.

4. How We Share Information

4.1 Within Your Business Account

Information may be visible to the operator, managers, crew members, and other authorized users within the same TodoClean business account based on account settings and permissions. Operators are responsible for deciding who should have access and removing users who should no longer access the account.

4.2 With Service Providers

We share information with vendors and service providers that help us provide the Service. These may include Stripe for payments and Stripe Connect, Supabase for database and authentication infrastructure, Sentry for error tracking and performance monitoring, notification providers, email providers, hosting providers, analytics providers, support tools, and security vendors.

These providers may access personal information only as needed to perform services for us or comply with law, unless their own terms and privacy policies apply directly to you, such as Stripe's payment services.

4.3 With Stripe, Financial Partners, and Payment Networks

When you use payment features, we share information with Stripe and Stripe may share information with us, financial partners, payment networks, banks, identity verification providers, fraud prevention providers, and other parties needed to process payments, manage connected accounts, verify identity, prevent fraud, handle disputes, and comply with legal and regulatory obligations.

4.4 Legal, Safety, and Business Transfers

• We may disclose information if required by law, subpoena, court order, government request, payment network rule, or similar legal process.
• We may disclose information to protect the rights, property, safety, security, or integrity of Aion, TodoClean, users, customers, Stripe, service providers, or the public.
• We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.
• We may disclose information with your consent or at your direction.

5. Cookies, Analytics, and Tracking Choices

We may use cookies, local storage, pixels, SDKs, and similar technologies to keep you signed in, remember preferences, secure accounts, measure performance, understand usage, detect fraud, and improve the Service. Some providers may also use these technologies when they provide services to us.

Most browsers let you block or delete cookies. If you block necessary cookies or local storage, parts of the Service may not work properly. We do not currently use personal information for targeted advertising or cross-context behavioral advertising.

Some browsers offer Do Not Track signals. There is not yet a common industry standard for responding to those signals, so we do not currently respond to Do Not Track. If we become legally required to recognize a Global Privacy Control or similar opt-out signal for sale or sharing, we will do so as required. At this time, we do not sell personal information or share it for cross-context behavioral advertising.

6. Data Retention

We keep personal information for as long as reasonably necessary to provide the Service, maintain accounts, support business operations, comply with law, resolve disputes, prevent fraud, enforce agreements, and meet tax, accounting, payment, security, and backup requirements.

• Account and business data is generally kept while the account is active.
• If you request account deletion, we will delete or anonymize personal information within a reasonable time, typically within 30 days, unless retention is required or permitted by law, contract, payment rules, security needs, backups, disputes, fraud prevention, or legitimate business purposes.
• Business records, invoices, payment history, tax records, dispute records, chargeback records, and related accounting records may be retained for up to 7 years or longer if required by law or payment rules.
• Backup copies may remain for a limited period before being overwritten according to our backup practices.
• Stripe and other service providers may retain information according to their own legal, regulatory, and business requirements.

7. Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. Examples may include HTTPS/TLS encryption in transit, access controls, account authentication, data isolation controls, logging, vendor security review, least-privilege access, monitoring, and secure development practices.

No internet-based service, browser, payment flow, or storage system is completely secure. You are responsible for using strong passwords, protecting your devices, managing crew access, removing users who should no longer have access, and promptly notifying us if you suspect unauthorized access.

Please do not enter full payment card numbers, CVV codes, bank passwords, Social Security numbers, government ID numbers, health information, or other highly sensitive information into notes, job records, customer profiles, support messages, or other free-text fields unless we provide a secure field specifically designed for that information.

8. Your Choices and Privacy Rights

8.1 Account Access and Correction

You may access and update certain account information in the Service. If you cannot update information directly, contact us at support@todogroupapps.com or legal@todogroupapps.com.

8.2 Deletion Requests

You may request deletion of your account or personal information by using any account deletion tools we provide or by contacting us. Deletion may not remove information we must keep for legal, payment, tax, accounting, backup, fraud prevention, dispute, security, or business purposes.

8.3 Location, Notifications, and Marketing

• You can disable location access through your browser or device settings. This may stop GPS check-in/check-out features from working.
• You can opt out of optional or promotional browser or push notifications through your browser or device settings. Notifications necessary to operate your account, such as security alerts, payment issues, and job-related notices, may continue while your account is active, consistent with our Terms of Service.
• You can unsubscribe from marketing emails using the unsubscribe link in the email. We may still send transactional, billing, security, legal, and service messages.

8.4 Cleaning Customers

If you are a cleaning customer whose information was entered into TodoClean by a cleaning business, please contact that cleaning business first to access, correct, delete, or ask questions about your job records. We may need to refer your request to the business that controls the account, because that business decides how your information is used for cleaning services.

9. California Privacy Notice

This section is intended to help California residents understand our privacy practices. Aion Technologies LLC may not meet the legal thresholds that make the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, CCPA), apply to every business. However, we provide this notice to be transparent and to support privacy requests where applicable.

9.1 Categories of Personal Information

The table below describes categories of personal information we may collect, the sources, and how we use or disclose them.

9.2 Sale, Sharing, and Targeted Advertising

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share personal information of individuals under 16. If our practices change, we will update this policy and provide any required opt-out choices.

9.3 Sensitive Personal Information

We use sensitive personal information only as reasonably necessary to provide requested features, process payments, secure the Service, prevent fraud, maintain accounts, comply with law, or as otherwise permitted by the CCPA. We do not use sensitive personal information to infer characteristics for advertising.

9.4 California Rights

Subject to legal limits and verification, California residents may have the right to:

• Know the categories and specific pieces of personal information collected about them.
• Know the categories of sources, purposes, and third parties involved in collection, use, disclosure, sale, or sharing.
• Request deletion of personal information, subject to exceptions.
• Request correction of inaccurate personal information.
• Opt out of sale or sharing of personal information. We do not currently sell or share personal information as those terms are used in the CCPA.
• Limit use and disclosure of sensitive personal information where the law provides that right.
• Not be discriminated against for exercising privacy rights.

9.5 How to Submit California Requests

To submit a California privacy request, contact legal@todogroupapps.com or support@todogroupapps.com. We may need to verify your identity and authority before responding. If you use an authorized agent, we may require proof that you authorized the agent and may ask you to verify your identity directly.

10. North Carolina and Other U.S. State Privacy Matters

We are based in North Carolina and comply with applicable data security and breach notification laws. If a security incident triggers a legal duty to notify individuals, regulators, consumer reporting agencies, payment partners, or others, we will provide notices as required by applicable law.

Residents of other U.S. states may have privacy rights under state law. If you believe a state privacy law applies to your information, contact us using the information in Section 15. We will review and respond as required by applicable law.

11. Children's Privacy

TodoClean is not directed to children and is intended for business use by adults. We do not knowingly collect personal information directly from children under 13. If we learn that we collected personal information directly from a child under 13 without required consent, we will delete it as required by law.

Users should not enter children's personal information into TodoClean unless it is necessary for the cleaning service and they have the legal right to provide it.

12. International Use

TodoClean is intended for use in the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our service providers operate. Privacy laws in those locations may differ from the laws where you live.

13. Third-Party Links and Services

The Service may link to or integrate with third-party websites, payment pages, services, or tools. Their privacy practices are governed by their own policies. We are not responsible for the privacy practices of third parties that we do not control.

For Stripe payment and connected account services, please review Stripe's privacy policy and applicable Stripe terms at stripe.com/privacy and stripe.com/legal.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by updating the Effective Date, posting the revised policy, sending email notice, showing in-app notice, or using another reasonable method where required by law. Your continued use of the Service after the revised policy takes effect means you acknowledge the updated policy.

15. Contact Us

For privacy questions or requests, contact us: