Security

Security and privacy are important to how we build Cycle Clean ("Cycle Clean"). Cleaning businesses trust us with sensitive data about their clients, employees, schedules, and payments. This page summarizes the measures we use to help protect that information. It is intended as a high-level overview—not a contractual commitment unless expressly stated in our Terms or a signed agreement.

1. Encryption in transit

We use HTTPS (TLS) for the Cycle Clean Website and application. Data transmitted between your browser or mobile device and our servers is encrypted in transit under normal operating conditions.

2. Authentication and access control

• User passwords are stored using one-way hashing—not in plain text.
• Role-based access separates tenant, employee, client portal, and super-admin capabilities.
• Tenant data is scoped so businesses generally access only their own accounts and records.
• Internal access to production systems is limited to personnel who need it to operate and support the Service.

3. Payment card security

Cycle Clean uses trusted payment partners rather than storing full card numbers on our servers:

• Stripe — subscription billing and client invoice payments (including Stripe Connect for tenant payouts where enabled).

Card data is handled by Stripe according to its security standards. Review Stripe's documentation for details about PCI compliance and data handling.

4. Infrastructure and hosting

Cycle Clean runs on modern cloud infrastructure with industry-standard physical and network security provided by our hosting partners. We apply patches and updates to our application stack as part of ongoing maintenance.

5. Monitoring and incident response

We monitor application logs and errors to detect abuse, failures, and suspicious activity. If we become aware of a security incident that affects customer data, we will investigate promptly and notify affected customers or users when required by law or when notification is otherwise appropriate.

6. Your responsibilities

Security is shared. You are responsible for choosing strong passwords, limiting access to your account, and ensuring your team follows good security practices. If you believe your account has been compromised, contact us immediately at support@cycleclean.io.

7. Certifications

Cycle Clean does not currently hold SOC 2, ISO 27001, or similar third-party certifications. We continue to improve our security program as the product and customer base grow. Enterprise customers with specific security requirements may contact us to discuss their needs.

8. Reporting security concerns

If you discover a potential security vulnerability, please report it responsibly to support@cycleclean.io with enough detail for us to investigate. Do not publicly disclose vulnerabilities before we have had a reasonable opportunity to address them.

9. More information

For how we collect and use personal data, see our Privacy Policy. For contractual terms, see our Terms & Conditions.