Privacy Policy

Effective October 13, 2026. This policy covers maidvista.com and the MaidVista application at app.maidvista.com.

MaidVista is software for cleaning companies. A cleaning company is the business that holds the MaidVista account (the “business”). People who book, pay, or receive messages from that business are “customers.” This policy says what we collect, why, how long we keep it, and who else touches it. We do not sell personal information.

1. Who we are

MaidVista operates the websites and the application named above, from the United States. Privacy questions go to admin@maidvista.com.

2. Information we collect

We collect only what the product needs to run a cleaning company.

• Account and staff. Name, email, phone, role, login credentials (stored as a hash, not as the password itself), and settings the business enters.
• Customers and jobs. Name, email, phone, service address, access notes the customer or business provides, appointment times, photos the business uploads, invoices, estimates, and messages.
• Payments the customer makes. Card and bank payments are processed by Stripe. We store the result: brand, last four digits, expiration month and year, a Stripe identifier, amount, status, and date. We do not store a full card number or a card security code.
• Messages. Email and text messages the business sends or receives through MaidVista, including the number, the time, and the delivery result.
• Use of the product. IP address, browser type, pages opened, and diagnostic logs. We use cookies that keep you signed in and remember a few interface choices. We do not use advertising cookies and we do not sell cookie data.

3. Business bank data (Stripe Financial Connections)

A business may connect its own business bank account or business credit card so MaidVista can keep the books. The connection is made through Stripe Financial Connections. Stripe shows the business what will be shared and asks for consent in Stripe’s own screen. That consent is separate from any permission to charge a customer or to pull an electronic check.

If the business consents, we may receive:

• Institution name, account name, account type, and the last four digits of the account number.
• Current and pending balances.
• The account holder’s name and mailing address.
• Transactions: date, amount, and the description or merchant name.

We use that information for one purpose: the business’s own bookkeeping inside its MaidVista account. That means importing transactions, suggesting a category, letting the business correct the category, reconciling, and preparing reports the business asks for, including a packet the business chooses to email to its own accountant.

We do not use bank or card transaction data to:

• decide credit, insurance, housing, or a loan;
• sell, rent, or trade the data;
• build advertising or consumer-scoring profiles;
• train a public artificial-intelligence model;
• look at a cleaning customer’s personal bank history. A customer who pays an invoice by bank authorizes that payment separately. That authorization is not permission to read the customer’s other transactions.

We do not ask Stripe for the full account number or routing number in order to keep the books. Moving money (a card charge or an electronic check) uses Stripe’s payment screens and a separate authorization.

The business can disconnect the bank in MaidVista or in Stripe. After disconnect we stop refreshing that account. Connection identifiers are deleted within 30 days. Lines already posted into the books stay in the books, because they are the business’s accounting records, until the business deletes them or the retention period in section 8 ends.

If suggested categories are turned on, we send the transaction date, amount, and description to xAI only so it can suggest an expense category. We do not send an account number, a routing number, or a government identification number. xAI may use that content only to answer that request. We do not permit it to advertise to the business or to the business’s customers.

Stripe’s handling of the connection is also covered by Stripe’s privacy policy. Stripe is a service provider for this connection. Stripe does not receive the data so it can sell it.

4. How else we use information

• To provide the application: scheduling, invoicing, the customer portal, staff tools, and backups of that business’s data.
• To send email and text messages the business turns on, such as appointment reminders and invoices. A business can turn a message type off. A customer who should not be texted can be marked that way, and we will not text that number.
• To take payments the customer chooses to make.
• To keep the service secure, prevent abuse, and fix errors.
• To answer a support request.

We do not use customer lists for our own advertising to those customers. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Who receives information

We do not sell personal information. We share it only in these cases:

• The business itself. Staff the business allows can see that business’s customers, jobs, payments, and books. One cleaning company cannot see another company’s data.
• Service providers acting on our instructions. Stripe, for payments and bank connections. An email delivery provider, to send mail the business asked to send. A text-message gateway the business connects, to send texts the business asked to send. xAI, only for the category suggestion described above. Our hosting provider, which keeps the servers in the United States. These providers may use the information only to perform that service, not for their own marketing.
• Exports the business starts. If the business emails an accountant packet or downloads a spreadsheet, that business is sending its own records. We do not send a bank feed to an outside party on our own.
• Law and safety. We disclose information if a law, subpoena, or court order requires it, or if it is reasonably necessary to prevent fraud, protect someone’s safety, or defend a legal claim.

6. Where we store it

We store MaidVista data in the United States. We do not store it on servers outside the United States. If you use MaidVista from another country, you understand that your information will be processed in the United States.

7. Security

Pages are served over HTTPS. Passwords are hashed. Each cleaning company is separated from the others. Payment card numbers are handled by Stripe, not stored by us. No method of storage or transmission is perfectly secure, and we do not promise that it is.

8. How long we keep it

• Account, customer, and job records: for the life of the business’s account, then deleted or de-identified within 30 days after the account is closed, unless we must keep a record for tax, accounting, or a legal claim.
• Books and posted transactions: kept so the business can stand behind its accounting. After the account is closed, we keep those records for up to 7 years where tax or accounting rules require it, then delete them.
• Bank connection tokens: only while the account is connected, then deleted within 30 days of disconnect.
• Text-message delivery logs: removed after 30 days.
• Security logs: about 90 days, unless we need a specific log for a security incident.

9. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you;
• correct it;
• delete it, unless we have to keep it for the books, tax, security, or a legal claim;
• stop texting you, or export a copy of what you gave us;
• disconnect a linked bank account;
• appeal a refusal of one of these requests.

Email admin@maidvista.com. We will verify the request and answer within 45 days. We will not discriminate against you for asking. Customers of a cleaning company should contact that company first, because the company decides its own customer list. We will help the company carry out a request that the law requires.

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with similar laws can use the same email. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no sale to opt out of. We do not collect government identification numbers to grant access to the product.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to object to processing based on a legitimate interest, to restrict processing, to data portability where it applies, and to complain to your local data protection authority. Our processing is based on performing the service the business signed up for, the business’s and our legitimate interest in running and securing that service, consent where we ask for it (including a bank connection), and legal duty.

10. Children

MaidVista is for businesses. It is not directed to anyone under 16, and we do not knowingly collect personal information from children under 13. If you believe we have, email admin@maidvista.com and we will delete it.

11. Changes

If we change this policy, we will post the new version on this page and change the effective date. If a change materially expands how we use business bank data, we will also ask the business to connect the bank again before we collect any new type of data.

12. Contact

MaidVista
United States
admin@maidvista.com
https://maidvista.com/privacy-policy/