Privacy notice

Last updated 11 October 2026

Who controls your data

TidyFlow Assistant is the data controller for personal data processed to run TidyFlow AI accounts. For business data you enter about your clients and cleaners, you are the controller and we process it on your behalf.

What we collect and why

Account data (email address and sign-in credentials) to create and secure your account — contract performance. Subscription status from our payment provider to control access — contract performance. Business data you enter (business name, and later clients, visits and invoices) to provide the service — contract performance. Basic technical data (IP address, device and log data) for security and fraud prevention — legitimate interests. Support messages to help you — legitimate interests.

Who we share it with

Hosting and infrastructure providers that run the service; Paddle.com, our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing; professional advisers; and authorities where required by law. We do not sell personal data.

International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to standard contractual clauses.

Retention

Account and business data are kept while your account is active. After an account ends, data is deleted or anonymised within 30 days unless the law requires us to keep it longer (for example, transaction records).

Your rights

Under UK GDPR you can request access, correction, erasure, restriction, portability, object to processing and withdraw consent. You can also complain to the Information Commissioner's Office (ico.org.uk). We respond within one month.

Security

We use encryption in transit, access controls that keep each account's data private, and paid-access checks on the server. No system is perfectly secure, and we do not claim certifications we do not hold.

Cookies and browser storage

We use only essential browser storage to keep you signed in and, for the sample demo, to keep fictional records in your browser. We do not use advertising cookies.

The sample demo

The demo stores fictional records in your browser only. Please do not enter real personal information. You can export or clear it in demo settings.