Privacy Policy

1. Who We Are and What This Covers

SpotlessQuote is operated by Lucent Design LLC, a Tennessee limited liability company ("SpotlessQuote", "we", "us"). It is software that cleaning companies ("merchants") connect to their Jobber account so their customers can book online. This policy explains what information we handle, why, and the choices you have. It covers merchants who connect their Jobber account and customers who submit a booking through a merchant's booking page.

When a customer books, the merchant decides how that customer's information is used. We handle it on the merchant's behalf, to deliver the booking. Each merchant is responsible for its own privacy practices.

2. Merchants: What We Collect

• Company name and Jobber account ID, from your Jobber account
• Your business timezone, set from your browser when you first connect; you can change it
• OAuth access and refresh tokens, encrypted at rest (AES-256-GCM)
• Your booking page settings: your page link and the prices you set
• A record of when your account was connected and disconnected

We never see your Jobber password; you approve access on Jobber's own sign-in page. When a customer books, we create records in your Jobber account on your behalf: clients, properties, jobs, visits, and notes. To avoid duplicates, we look up existing clients by email and existing properties by address before creating new ones.

When you disconnect, your tokens are deleted immediately. Your settings and booking history are kept so that reconnecting restores your booking page; email us to have them deleted.

3. Customers: What We Collect

When you book through a merchant's page we collect the details you enter:

• Name, email address, and phone number
• Service address and home details (such as square footage, bedrooms, bathrooms)
• Requested service, frequency, date and time, and any notes
• The price quoted for your booking

This information is sent to the merchant's Jobber account so they can schedule and perform your cleaning. SpotlessQuote does not collect payment information; any payment is arranged directly with the merchant.

4. How We Use Information

• To create and manage bookings and sync them to the merchant's Jobber account
• To show you the status of your booking
• To prevent duplicate bookings and duplicate records
• To send booking confirmation emails, when email is enabled
• To operate, secure, and troubleshoot the service

We do not sell personal information, and we do not use it for advertising.

5. Information We Exchange With Jobber

Using only the access a merchant approves when connecting, we:

• look up existing clients by email address and existing properties by address
• create the client, property, job, visit, and note for each booking
• receive a notice from Jobber when the merchant disconnects the app, and when a job we created is closed, so the booking's status stays current

We use information from Jobber only to provide this service. We do not sell it, use it for advertising, or share it with anyone other than the service providers below.

6. Service Providers

We rely on these providers to run the service:

• Vercel — application hosting
• Supabase — PostgreSQL database hosting
• Jobber — the merchant's scheduling and CRM platform, where bookings are created
• Resend — email delivery, used only if email confirmations are enabled

We do not share personal information with anyone else, unless the law requires it.

7. Data Retention

• Bookings: retained so the merchant has a record of their bookings, until deletion is requested or the merchant disconnects and asks us to remove their data
• OAuth tokens: stored while your Jobber connection is active and deleted immediately on disconnect
• Webhook audit logs: deleted after 90 days
• Idempotency keys (which stop a retried request from creating a second record): valid for 24 hours, then removed by a daily clean-up
• OAuth state values (used once during sign-in): valid for 10 minutes, then removed by a daily clean-up
• Duplicate-prevention records: the link between a customer's email address (and phone number, if given) or service address and their record in the merchant's Jobber account, kept until the merchant asks us to remove their data
• Request logs: our hosting provider keeps standard request logs (such as IP address and browser type) for a limited time, for security and troubleshooting

8. Cookies and Browser Storage

• Merchants: when you connect, we set one sign-in cookie so that only you can manage your connection. It lasts 30 days and is not used for tracking. Your browser also keeps a small marker so your timezone is detected only once.
• Customers: while you fill in the booking form, your answers are saved in your browser's local storage so you don't lose them between steps. They stay on your device. They are removed when your booking is confirmed on screen, or when you choose "Start over". A saved draft is also deleted the next time you open that booking page if more than 24 hours have passed since you last changed it.

We do not use advertising or analytics cookies.

9. Security

Data in transit is protected with HTTPS, and Jobber access tokens are encrypted at rest. Access to production data is limited to the people who operate the service. No system is completely secure; if we learn of a breach affecting your information, we will notify you as the law requires.

10. Your Choices and Rights

You can ask us to access, correct, or delete your personal information by emailing support@spotlessquote.com. We aim to respond within 30 days. Customers should note that copies in a merchant's Jobber account are controlled by that merchant, so you may also need to contact them. Merchants can disconnect at any time from the connect page or from Jobber. Depending on where you live, you may have additional rights under local law; we honor those requests wherever you are.

11. Children

SpotlessQuote is for businesses and for adults booking a service. It is not directed to children under 13, and we do not knowingly collect their information.

12. Where Information Is Stored

We operate from the United States and store information on servers located in the United States. If you use the service from another country, including Canada, your information is transferred to and stored in the United States. This policy is governed by the laws of the State of Tennessee, as set out in our Terms of Service.

13. Changes to This Policy

We may update this policy. When we do, we will post the new version on this page and change the "Last updated" date above.

14. Contact Us

Questions or requests? Contact Lucent Design LLC at support@spotlessquote.com.