Privacy Policy

Introduction

Round Monster ("we", "our", "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

Data We Collect

When you sign up for and use Round Monster, we collect the following personal data:

• Account information: Name, email address, company name, and password (encrypted)
• Business data: Customer records, job details, route information, financial transactions, and worker details that you enter into the platform
• Usage data: Login times, features used, and browser/device information for security and performance
• Payment data: Billing details processed securely through Stripe — we never store your card details
• Communication data: SMS and email content sent through the platform to your customers or workers

How We Use Your Data

We use your data to:

• Provide and operate the Round Monster platform
• Process payments and manage your subscription
• Send transactional emails and SMS messages on your behalf
• Provide customer support
• Improve our platform and develop new features
• Ensure security and prevent fraud

Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: Processing necessary to provide the services you signed up for
• Legitimate interest: Platform security, fraud prevention, and service improvement
• Legal obligation: Tax and financial record-keeping requirements
• Consent: Marketing communications (you can opt out at any time)

Data Sharing

We do not sell your data. We engage carefully-vetted sub-processors to deliver parts of the Platform — for example, hosting your database, sending transactional emails on your behalf, processing your subscription payment, or delivering SMS messages to your customers. The current, complete list of sub-processors (with the categories of data each one processes and the country they process it in) is published at /sub-processors. We will give you at least 30 days' notice before adding a new sub-processor so you can object if necessary. Where you (the cleaning company) are the controller of personal data about your end customers and workers, our role is that of processor. Our obligations as your processor are set out in our Data Processing Agreement, which forms part of our Terms of Service.

Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days before permanent deletion unless you request earlier removal. Financial records are retained for 7 years as required by UK law.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability
• Object to processing

To exercise any of these rights, contact us at support@roundmonster.uk.

Security

We protect your data with:

• HTTPS encryption on all connections
• Row Level Security ensuring multi-tenant data isolation
• Encrypted passwords using industry-standard hashing
• Regular security audits and monitoring
• Access controls and authentication on all endpoints

Cookies

Round Monster uses essential cookies only — session authentication tokens required for the platform to function. We do not use tracking or advertising cookies.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notification.

Contact

For questions about this privacy policy or your data, contact us at: Email: support@round.monster