PRIVATE BUSINESS APP · UPDATED OCTOBER 22, 2026
Spotless CRM privacy policy
This policy explains information handled by the private internal Spotless CRM application operated by Spotless Solutions. It applies to the CRM and its Google connection, rather than to third-party websites or all traffic on the public cleaning-services website.
Business and work information
The CRM stores information used to run cleaning work: customer contact details, job titles, descriptions, locations and schedules, assignments, employee work and time records, invoice documents, balances, payments recorded by the business, and a history of changes. Owners can access business records; employee access is limited by the application's role and assignment controls.
Google Calendar
With authorization from the Spotless Google account, the CRM requests the calendar.events.readonly permission. This Google permission can cover calendars the account can access; the application's calendar reader is restricted to the Spotless calendar, spotlesssolutionscg@gmail.com. It reads event identifiers, titles, descriptions, locations, start and end times, recurrence information, update times and cancellation status to mirror scheduled jobs. It does not create, edit or delete Google Calendar events.
Sending invoices with Gmail
With authorization, the CRM requests gmail.send to send issued invoices from the connected Spotless account. An owner selects the invoice, recipients and any message before sending. Invoice contents and attachments are transmitted to Google and the selected recipients. The CRM records sending details for the business history. It does not request permission to read the Gmail inbox or messages.
Optional location at check-in and check-out
When a worker presses check-in or check-out, the application asks the browser for a single location reading. If permission is granted and a reading is available, the CRM stores latitude, longitude, estimated accuracy and capture time with the time record. It also records failed or unavailable readings. This is not continuous background tracking. Imprecise or unavailable readings require review and are not treated as conclusive proof of attendance.
Storage, access and sharing
The current CRM stores its database, invoice copies and local snapshots on the business owner's Mac. Approved users connect through a private network and sign in to the application. Google connection credentials are kept separately on that Mac and excluded from CRM snapshots. Google Drive backup is not currently enabled.
Information is used for the business functions described here. The CRM does not sell Google user data, use it for advertising, or use it to train AI models. Information is shared through Google to perform the authorized calendar and email functions, with recipients selected for an invoice, and with authorized business users as needed for their work.
Spotless CRM's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Retention, correction and revocation
Business records and their history are retained for business administration. Local snapshots currently have no automatic deletion schedule. For access, correction or deletion requests, contact the business at the address below; requests must be assessed against business recordkeeping needs and existing backup copies. There is no promise that revoking Google access automatically deletes previously mirrored records.
The connected Google account can revoke the CRM's permission through Google Account connections. Revocation stops future authorized access after existing access expires; the connection may then need to be authorized again. Contact the business to disable the application connection locally as well.
Contact and changes
Questions about this policy or CRM information: spotlesssolutionscg@gmail.com. If how the application handles information changes, this policy should be updated before the new use begins.