Privacy Policy

Introduction

BBU Cleaning ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Work Order Management System.

By accessing or using our system, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the application.

1. Information We Collect

1.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, phone number, role
• Authentication Data: Password (hashed using SHA-256), session tokens
• Profile Information: User preferences, notification settings

1.2 Work Order Data

• Customer information (names, addresses, contact details)
• Service details and line items
• Time tracking entries
• GPS coordinates for work locations
• Photos and documents attached to work orders
• Status updates and approval history

1.3 QuickBooks Integration Data

• QuickBooks company realm ID
• OAuth access and refresh tokens (encrypted)
• Customer and invoice synchronization data

1.4 Technical Information

• Browser type and version
• IP address and geographic location
• Device information
• Usage logs and analytics
• Error reports and debugging information

2. How We Use Your Information

We use collected information for:

• Service Delivery: Creating and managing work orders, scheduling, time tracking
• Authentication: Verifying user identity and maintaining secure sessions
• QuickBooks Integration: Syncing work orders to QuickBooks Online for invoicing
• Communication: Sending notifications, updates, and system alerts
• Analytics: Improving system performance and user experience
• Compliance: Meeting legal and regulatory requirements
• Security: Detecting and preventing fraud, abuse, and security incidents

3. Data Storage and Security

3.1 Storage Location

Your data is stored on:

• Cloudflare Pages: Application hosting (edge network)
• Cloudflare D1: Relational database (SQLite globally distributed)
• Cloudflare R2: Document and photo storage (S3-compatible)

3.2 Security Measures

• Encryption: HTTPS/TLS for all data transmission
• Password Security: SHA-256 hashing with salt
• OAuth 2.0: Secure QuickBooks authentication
• Role-Based Access Control (RBAC): Granular permissions
• Session Management: Secure, HTTP-only cookies
• Regular Backups: Automated database backups

3.3 Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data by contacting us (see Section 8).

4. Third-Party Services

We integrate with the following third-party services:

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from non-essential notifications
• Revoke Consent: Disconnect QuickBooks integration at any time

To exercise these rights, contact us at the email address in Section 8.

6. Cookies and Tracking

We use cookies for:

• Session Management: Maintaining login state (HTTP-only, secure cookies)
• Preferences: Remembering user settings
• Analytics: Understanding usage patterns (anonymized)

You can disable cookies in your browser settings, but this may affect functionality.

7. Children's Privacy

Our system is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. Contact Us

For privacy-related questions or requests, contact:

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the system after changes constitutes acceptance of the updated policy.

10. Legal Compliance

We comply with applicable data protection laws, including:

• General Data Protection Regulation (GDPR) - for EU users
• California Consumer Privacy Act (CCPA) - for California users
• Other applicable state and federal privacy laws