Citrico Privacy Policy

1. Who is responsible for your information

• Information in a company's portal. Cleaning companies and other businesses ("Customers") use the Platform to manage their work with their own personnel and clients. For information about a Customer's personnel, clients and work, the Customer is responsible for how it is collected and used, and Citrico acts as the Customer's service provider (sometimes called a processor), handling the information only on the Customer's instructions and to run the Platform. If you use a portal provided by your employer or your cleaning company, please send privacy requests to that company. If you send them to us, we will pass them on and help the company respond.
• Our own information. Citrico is responsible (a controller) for information about our Customers as businesses (such as account administrators and billing contacts), visitors to our websites, people who contact us, and our own records of terms acceptance and security.
• Brand portals. A Customer that runs a portal under its own brand may publish its own privacy policy (for example the SaniFilPro Privacy Policy). That policy explains the Customer's practices; this policy explains Citrico's.

2. Information we collect

Information you or your company provide

• Account details: name, email address, phone number, role, company, language preference, a password (stored only as a one-way hash) and, for crew members, a PIN (also stored only as a one-way hash).
• Company and store details: company name, billing contact, store names and addresses, schedules, checklists and settings.
• Work records: check-in and check-out times, checklist answers, notes, photos, supervisor visits and scores, tickets, schedule requests, documents, invoices and payment status.
• Messages and support: emails, feedback and support requests you send us.

Information collected automatically

• Precise location at clock-in and when a photo is taken (see Location).
• Device and usage information: IP address, browser and device type, operating system, pages used, and the date and time of requests.
• Sign-in and security records: sign-in attempts, lockouts, and a cookie that recognizes a device you signed in on before, used for security alerts.
• Terms acceptance records: which version of our terms and privacy policy you accepted, when, from which IP address and browser, and in which language.
• Error reports: technical details when something breaks, such as the page, the device type and the error message.

Information from others

• Payments: Stripe tells us whether a payment succeeded and gives us limited details, such as the card brand and last four digits. We never receive full card or bank account numbers.
• Your company: your employer or cleaning company may create your account and add information about you, such as your name, phone number and the stores you work at.

3. Location

The Platform collects a phone's precise location only at two moments: when a crew member clocks in, and when a photo of the work is taken. It is collected only while the app or website is open and in use, only after the phone's permission is given, and never in the background. We do not track where anyone goes between those moments or when they are not working.

Each location point is saved with the check-in or photo it belongs to and is compared with the store's address to show whether the work happened on site. The cleaning company's admins can see the result and where the reading was taken. Clients see only whether the work was on site (yes or no), never a map or coordinates. Location is never sold or used for advertising. Declining location permission never stops a crew member from clocking in; the record simply shows that no location was available.

Precise location is treated as sensitive information under some state laws. We use it only for the on-site check described here.

4. Photos

Photos taken in the Platform are meant to show work areas and completed work. Crew members are instructed not to photograph people or anyone's personal information. Photos are stored securely, shown to the cleaning company and to the client for the store, and kept as described in How long we keep information. If a photo shows a person or personal information by accident, the cleaning company can remove it, or you can ask us to.

5. How we use information

• to provide the Platform, including sign-in, checklists, photos, on-site checks, reports, tickets, schedules, invoices and payments;
• to send service messages, such as sign-in links, invitations, visit reports, invoices, receipts, security alerts and notices about changes;
• to keep the Platform secure, prevent fraud and abuse, and enforce our terms;
• to provide support and respond to requests;
• to understand how the Platform is used, using anonymous or aggregated information, and to fix and improve it;
• to bill our Customers and keep financial records; and
• to comply with the law and respond to lawful requests.

We do not use personal information for advertising, and we do not let third parties use Customer information to train their artificial intelligence models.

6. Cookies and analytics

• Essential cookies keep you signed in, protect forms against forgery, remember your language, recognize a device for security alerts, and, if you arrived through a partner link, remember the referral for up to 90 days. The Platform cannot work without the sign-in and security cookies.
• Analytics: we use Vercel Web Analytics to count page views and see which pages are used. It does not use cookies, does not identify you, and does not follow you to other websites.
• No advertising cookies. We do not use advertising cookies, retargeting pixels or social media trackers.

7. How we share information

We share personal information only as described here:

• Within the Customer's workspace, according to each person's role. For example, a cleaning company's admins see their crew's records, and a client sees the records for its own stores.
• Service providers that help us run the Platform, under contracts that limit their use of the information to providing services to us: hosting and file storage (Vercel), database hosting in the United States (Neon), email delivery providers, payment processing (Stripe) and error monitoring (Sentry).
• Legal and safety: when we believe in good faith that the law, a court order or a valid legal request requires it, or to protect the rights, property or safety of our Customers, users, the public or Citrico. Where allowed, we will tell the affected Customer first.
• Business transfers: to a buyer or successor in a merger, acquisition, financing or sale of assets, under the protections of this policy.
• With permission: when a Customer or you ask us to.

8. No sale, no targeted advertising, no tracking

We do not sell personal information. We do not share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. The Platform does not track you across other companies' apps or websites.

9. How long we keep information

• Retention. We keep information while an account is active and for as long as reasonably necessary to provide the Platform, keep business records, resolve disputes, enforce our agreements, and meet legal, tax and accounting obligations. There is no fixed deletion schedule. When an account is deleted, we delete its sign-in details and profile within 30 days.
• Invoices and payment records are kept as long as tax and accounting laws require.
• After a Customer closes its account, or a User deletes theirs: a copy of its data is available on request for 30 days after closure. After that we may delete or anonymize it, except records we are required by law to keep, such as invoices and payment records for tax purposes.
• Backups are overwritten on a rolling schedule, within 30 days.

Individual deletion requests are honored through "Delete my account" in the app menu or at /delete-account, except work records (checklists, check-ins, photos, reports), which belong to the Customer as its business records and which the Customer may keep, with the person's name removed from them where possible.

10. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest by our hosting providers, one-way hashing of passwords and PINs, role-based access, separation of each Customer's data, sign-in rate limits and lockouts, and logging of staff access. No system is perfectly secure, so we cannot guarantee security. If a security incident affects your information, we will notify the affected Customers and people as the law requires. To report a security issue, email support@citrico.app.

11. Your choices and rights

• Delete your account: use "Delete my account" in the app menu or visit /delete-account. We confirm within 7 days and finish within 30 days.
• Access and correction: ask for a copy of your information or ask us to correct it.
• Language and notifications: change your language in the app, and turn notifications on or off in your phone's settings.
• Location and camera: turn location or camera permission on or off at any time in your phone's settings.

To make a request, email soo@citrico.app. If your information is in a company's portal, we may pass your request to that company, which decides on it. We will verify your identity before acting on a request and respond within 30 days, or sooner if the law requires.

12. State privacy rights

Depending on where you live, state privacy laws (for example in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states) may give you rights to know what personal information we have, to get a copy, to correct it, to delete it, and to opt out of its sale, its sharing for cross-context behavioral advertising, targeted advertising and certain profiling. We honor these rights where those laws apply to us and to your information. We do not sell or share personal information or use it for targeted advertising, so there is nothing to opt out of, and we treat a Global Privacy Control signal as an opt-out request where the law requires. You may use an authorized agent, and we will never treat you differently for using your rights. If we decline a request, you may appeal by replying to our decision; if the appeal is denied, you may contact your state's consumer protection office.

13. Children

The Platform is a business tool and is not intended for anyone under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has given us information, contact us and we will delete it.

14. Where information is stored

Citrico is based in the United States, and the Platform is hosted in the United States. If you use the Platform from outside the United States, your information will be transferred to, stored in and processed in the United States.

15. Changes to this policy

We may update this policy. The version number and date at the top show the current version. For material changes we will give notice in the Platform or by email before they take effect, and we may ask you to acknowledge the updated policy when you next sign in.

16. Contact