1. Who We Are

Kleeser Inc. is an on-demand home services marketplace platform connecting residential clients ("Klients") with independent service providers ("Kleaners"), currently focused on residential cleaning. Kleeser develops and operates a proprietary mobile application and software platform — it is not a cleaning company or cleaning service provider. Our registered address for legal and privacy purposes is in New Jersey.

For questions about this Privacy Policy or your personal data, contact us at info@kleeser.com.

2. What Data We Collect

2.1 Data you provide to us

• Phone number (used for account creation and identity verification via SMS)
• Email address (collected when signing up via email, Sign in with Apple, or Sign in with Google)
• Sign-up method (phone number, email, Sign in with Apple, or Sign in with Google)
• Full name (collected at profile creation)
• Government-issued ID (Kleaners only — submitted as part of identity verification at onboarding to ensure platform safety. This may include a driver's license or passport image, and is collected, processed, and stored directly by Stripe Identity — Kleeser receives only the verification status and does not store raw ID images or biometric data on Kleeser servers; see Sections 2.2 and 5.2)
• Home address (Klients — used for booking and Kleaner dispatch only)
• Zip code (Kleaners — used for job matching)

2.2 Data we collect automatically

• Real-time location data (GPS) — collected when the app is active and during accepted cleaning sessions
• Device information (device type, operating system, app version)
• IP address (recorded at account creation and legal acceptance)
• Start Cleaning and End Cleaning timestamps (recorded per session, linked to job_id)
• Supplies confirmation records (Kleaners — timestamped response to the in-app supplies confirmation per booking)
• Legal acceptance records (timestamp, device, app version, document version at the time of clickwrap acceptance)
• In-app chat messages (between Klients and Kleaners during active sessions) — retained for 12 months following the session date and may be reviewed by Kleeser in connection with disputes, damage claims, or investigations
• Ratings and reviews submitted after completed sessions
• Error and crash data (collected by Sentry for platform stability and debugging)
• Identity verification data — government-issued ID images and biometric data submitted through Stripe Identity during Kleaner onboarding. This data is collected, processed, and stored by Stripe directly. Kleeser receives only the verification status (verified / unverified / pending) and does not store raw ID images or biometric data on Kleeser servers
• Device push notification tokens — collected via Firebase Cloud Messaging (FCM) to deliver booking confirmations, job status updates, and platform notifications to your device. Tokens are linked to your account and refreshed automatically by Firebase

2.3 Data we do not collect

• Social security number
• Raw credit or debit card numbers (Stripe handles all card data)
• Precise financial account details beyond payment tokenisation
• Property data sourced from Zillow — this data is displayed in the app for reference only and is never stored on Kleeser servers or linked to any user record

3. Why We Collect Your Data

We collect and process personal data only for the following purposes:

• To create and manage your account
• To match Klients with available nearby Kleaners
• To process payments and issue receipts
• To verify identity and prevent fraud
• To define and record the active cleaning session window for insurance and dispute purposes
• To record legal acceptance of our Terms of Service and Independent Contractor Agreement
• To investigate and resolve damage claims, disputes, and complaints
• To enforce our Terms of Service and Independent Contractor Agreement
• To send transactional communications — booking confirmations, receipts, and service updates (via Resend)
• To monitor platform stability and fix errors (via Sentry)
• To enroll Kleaners in the theft protection bond, arrange platform insurance coverage, and administer related claims
• To comply with applicable New Jersey and federal law
• To verify eligibility for the first-time booking promotion, including checking phone number and payment details against prior booking records to prevent fraudulent redemption

4. Legal Basis for Processing

Under the New Jersey Data Privacy Act (NJDPA) and applicable US privacy law, we process your personal data on the following bases:

• Contract performance — processing necessary to provide the platform service you have signed up for
• Legitimate interests — fraud prevention, platform security, dispute resolution, and improving service quality
• Legal obligation — retaining legal acceptance records, tax records, and complying with law enforcement requests
• Consent — location tracking and in-app communications, where consent is obtained at account creation

5. How We Share Your Data

We do not sell or rent your personal data. We share data only in the following limited circumstances. Kleeser admin staff have read-only access to platform data through a secure internal back office tool. This access is limited to authorised personnel only and is used solely for platform management, dispute resolution, and operational oversight. All admin access is logged.

5.1 With Kleaners and Klients

• Klients see the matched Kleaner's first name and photo after confirming a booking
• Kleaners see the Klient's address and booking details upon accepting a job
• In-app chat messages are visible to both parties in the session

5.2 With third-party service providers

We share data with the following third-party processors solely to operate the platform:

• Stripe — payment processing and tokenisation
• Google Maps Platform (including Google Places) / Firebase — maps, address search and validation, location services, app infrastructure, and real-time data
• Apple — iOS app delivery and push notifications
• Google Play — Android app delivery and updates via the Google Play Store
• Twilio — SMS verification
• Zillow — property data (displayed with attribution, in compliance with Zillow's API terms)
• Sentry — error monitoring and crash reporting
• Insurance and bonding providers — used to enroll Kleaners in the theft protection bond and to arrange the platform's general liability coverage, and to administer related claims. Kleeser shares only the information reasonably required for enrollment and claims administration (such as the Kleaner's name, contact details, and relevant session records). Kleaners consent to this sharing in the Independent Contractor Agreement
• Firebase Cloud Messaging (Google LLC) — used to deliver push notifications for booking confirmations, job status updates, and platform alerts. Firebase may collect device identifiers and notification delivery data. Firebase privacy policy: https://firebase.google.com/support/privacy
• Resend — used to deliver transactional emails including booking confirmations and job status updates to Klients and Kleaners. Resend receives recipient email addresses and message content for delivery purposes only. Resend privacy policy: https://resend.com/legal/privacy-policy
• Retool — used by Kleeser admin staff for read-only access to platform data including registered users, active bookings, transactions, and Kleaner earnings. Access is restricted to authorised Kleeser personnel only. No user data is shared with Retool beyond what is necessary for admin visibility. Retool privacy policy: https://retool.com/privacy
• Stripe Identity — used to verify Kleaner identity during onboarding. Stripe Identity collects government-issued ID images and biometric data directly from the Kleaner. Kleeser receives only the verification outcome. Stripe Identity privacy policy: https://stripe.com/privacy

Each of these providers processes data in accordance with their own privacy policies. By using Kleeser you acknowledge that some features are powered by these services.

5.3 With law enforcement and regulatory bodies

• We may disclose personal data to law enforcement or regulatory authorities if required by law, court order, or to protect the safety of users or the public
• We may share data where we reasonably believe disclosure is necessary to investigate fraudulent activity, damage claims, or violations of our Terms

6. Location Data

Location tracking is central to how Kleeser works. We collect real-time GPS data when the app is active and during cleaning sessions for the following purposes:

• Matching Klients with nearby available Kleaners
• Verifying Kleaner presence at the Klient's address at Start Cleaning
• Recording geolocation at the time of supplies confirmation (Kleaners)
• Fraud prevention and safety monitoring

Klients may manage location permissions through their device settings. Disabling location tracking will prevent the platform from matching you with a nearby Kleaner. Kleaners are required to share location data while accepting and completing bookings as a condition of using the platform. Disabling location permissions after prior use does not delete location data already collected. To request deletion of historical location data, contact info@kleeser.com. Deletion requests are subject to the retention obligations described in Section 8.

7. SMS Communications

By providing your mobile number, you consent to receive text messages from Kleeser, including verification codes, booking confirmations, job status updates, and service notifications. Message frequency varies based on your activity. Message and data rates may apply.

We do not share, sell, or provide your mobile phone number or SMS messaging consent data with third parties or affiliates for marketing or promotional purposes. Your mobile number is shared only with our SMS delivery provider (Twilio) solely to send the messages you have consented to receive.

Reply STOP to opt out of text messages at any time, or HELP for assistance.

8. Data Retention

We retain your personal data for as long as necessary for the purposes described in this policy. Specific retention periods:

• Legal acceptance records (clickwrap timestamps) — retained permanently for the lifetime of the company. Never deleted even if account is deleted — archived instead
• Start/End Cleaning timestamps and supplies confirmation records — retained permanently. These are legal and insurance records
• Payment records — retained for 7 years in accordance with tax and financial regulations
• In-app chat messages — retained for 12 months following the session date
• Ratings and reviews — retained permanently as part of the platform's quality record
• Error and crash logs (Sentry) — retained for 90 days
• Account data (phone number, location history) — retained for the duration of the account and for 3 years following account deletion
• Identity verification records (Kleaners) — the verification outcome and related records are retained for the duration of the Kleaner's active account and for 3 years following account termination or deletion, in accordance with identity verification and fraud prevention requirements. Raw ID images are held by Stripe, not Kleeser
• Stripe Identity verification records — verification status (verified / unverified / pending) retained for the duration of the Kleaner's active account and 3 years following termination. Raw ID images and biometric data are retained by Stripe according to Stripe's own retention policy — Kleeser does not control this data

When you delete your account, your personal data is archived rather than permanently deleted where retention is required by law or legitimate business interest. Anonymised data may be retained indefinitely for analytics and fraud prevention. In the event that Kleeser Inc. ceases operations, legal acceptance records and session records will be transferred to a secure archive or destroyed in accordance with applicable law. Affected users will be notified in advance where reasonably practicable.

9. Data Security

We implement the following technical and organisational measures to protect your personal data:

• All data encrypted at rest
• All data in transit protected by HTTPS/TLS — no exceptions
• Legal acceptance and session records stored with the same encryption as payment data
• Stripe tokenisation — raw card numbers are never stored on Kleeser systems
• Access to personal data restricted to authorised personnel only
• Error monitoring via Sentry to detect and respond to security incidents

However, no system is completely secure. We cannot guarantee absolute security against evolving cyber threats. Users are responsible for maintaining the confidentiality of their account credentials. In the event of a security incident affecting your personal data, Kleeser will notify affected users in accordance with Section 12 of this Privacy Policy and applicable New Jersey law.

10. Your Rights Under the New Jersey Data Privacy Act (NJDPA)

If you are a New Jersey resident, or are using the Kleeser platform in New Jersey, you have the following rights regarding your personal data:

• Right to know — you may request confirmation of whether we process your personal data and obtain a copy of that data
• Right to correct — you may request correction of inaccurate personal data
• Right to delete — you may request deletion of your personal data, subject to our legal retention obligations described in Section 8
• Right to opt out — you may opt out of the sale or sharing of your personal data for targeted advertising purposes. Note: Kleeser does not sell or share personal data for targeted advertising
• Right to opt out of marketing communications — if Kleeser sends any promotional messages, you may opt out at any time by contacting info@kleeser.com. Transactional messages (booking confirmations, receipts, service updates) are not marketing and cannot be opted out of while your account is active
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at info@kleeser.com. We will respond within 45 days as required by the NJDPA. We may need to verify your identity before processing your request.

11. Children's Privacy

The Kleeser platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a person under 18, we will take immediate steps to delete that data. If you believe we have inadvertently collected data from a minor, please contact us at info@kleeser.com.

12. Data Breach Notification

In the event of a data breach that compromises your personal data, we will notify affected users promptly and in accordance with applicable New Jersey and federal law. Notification will include a description of the breach, the type of data affected, and steps you can take to protect yourself. We will also notify relevant regulatory authorities where required by law.

13. Third-Party Links and Services

The Kleeser app integrates with third-party services including Google Maps, Firebase, Apple, Stripe, Twilio, Zillow, Resend, and Sentry. These services operate under their own privacy policies. Kleeser is not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before using features powered by these services.

We do not transfer your personal data outside the United States except as necessary to operate the platform through the above third-party services, each of which maintains appropriate data protection safeguards.

14. No Advertising or Data Sales

Kleeser does not display advertising in the app. We do not sell, rent, or share your personal data with advertisers or data brokers for commercial purposes. We do not use your personal data for targeted advertising. Our business model is based on service fees — not data monetisation.

15. Business Transfers

In the event that Kleeser Inc. is acquired, merged, or transfers all or part of its business or assets to a third party, your personal data may be transferred as part of that transaction. We will notify affected users via in-app notification or email in advance of any such transfer. The acquiring party will be required to honour the commitments made in this Privacy Policy with respect to your personal data. You may request deletion of your data prior to any such transfer by contacting info@kleeser.com.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. We will notify users of material changes through the app or email or by SMS at least 14 days before changes take effect. Continued use of the platform after the effective date of changes constitutes acceptance of the updated policy.

17. Contact

For any questions, requests, or concerns regarding this Privacy Policy or your personal data:

Kleeser Inc.

Email: info@kleeser.com

Website: www.kleeser.com

New Jersey