Privacy Policy

1. Introduction

MyStreetCleaning ("we", "us", or "our") operates a street cleaning notification service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

Data Controller: MyStreetCleaning
Contact: privacy@mystreetcleaning.com
Phone: 1-833-562-3866

2. Information We Collect

Personal Information

• Contact Information: Email addresses, phone numbers
• Address Information: Home address, ward, section (for notification targeting)
• Preference Information: SMS preferences, email preferences, voice call preferences, timing preferences
• Optional Information: License plate numbers (for enhanced notifications)

Payment Information

• Payment information is processed by Stripe (our payment processor)
• We store only transaction IDs and subscription status
• We never store credit card numbers or sensitive payment data

Technical Information

• IP addresses (anonymized after 30 days)
• Browser information, device type
• Usage analytics via PostHog (anonymized)
• Affiliate tracking data (when applicable)

3. Legal Basis for Processing (GDPR)

• Consent (Article 6(1)(a)): SMS, email, and voice call notifications
• Contract Performance (Article 6(1)(b)): Providing notification services you've subscribed to
• Legitimate Interest (Article 6(1)(f)): Service improvement, fraud prevention, analytics
• Legal Obligation (Article 6(1)(c)): Tax records, payment processing compliance

4. How We Use Your Information

• Send street cleaning notifications via SMS, email, or voice calls
• Process payments and manage subscriptions
• Provide customer support
• Improve our service through anonymized analytics
• Comply with legal obligations
• Prevent fraud and abuse

5. Third-Party Processors

• Stripe: Payment processing (PCI DSS compliant)
• ClickSend: SMS and voice call delivery
• Resend: Email delivery
• Supabase: Database hosting (SOC 2 compliant)
• PostHog: Analytics (data anonymized)
• Vercel: Hosting and infrastructure

All third-party processors are bound by data processing agreements and comply with applicable privacy laws.

6. Data Retention

• Account Data: Retained while account is active + 3 years after deletion (for legal compliance)
• Notification Logs: 1 year for service improvement and debugging
• Payment Records: 7 years (tax and legal compliance)
• Analytics Data: 30 days (anonymized)
• Support Communications: 2 years

Data is automatically deleted according to these schedules unless longer retention is required by law.

7. Your Rights

All Users

• Opt-out: Text "STOP" for SMS, click unsubscribe in emails, or update preferences in your account
• Access: Request a copy of your personal data
• Correction: Update incorrect information in your account
• Deletion: Request complete account and data deletion

GDPR Rights (EU Residents)

• Data Portability: Receive your data in a machine-readable format
• Restriction of Processing: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for consent-based processing

CCPA Rights (California Residents)

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Non-Discrimination: We won't discriminate against you for exercising your rights

Exercise Your Rights: Visit our Privacy Rights Center to download your data, delete your account, or contact us. You can also email privacy@mystreetcleaning.com or visit your account settings. We'll respond within 30 days (GDPR) or 45 days (CCPA).

8. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Service provider certifications (Privacy Shield, SOC 2, etc.)

9. Security

We implement industry-standard security measures:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security audits and monitoring
• Data minimization and purpose limitation
• Incident response procedures

10. Cookies and Tracking

We use minimal cookies and tracking:

• Essential Cookies: Authentication, security (no consent required)
• Analytics Cookies: PostHog for usage analytics (anonymized, can be disabled)
• Third-Party Cookies: Stripe for payment processing

You can manage cookie preferences in your browser settings or through our privacy settings.

11. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify relevant authorities within 72 hours (GDPR requirement)
• Notify affected users without undue delay
• Provide details about the breach and remediation steps

13. Changes to This Policy

We may update this policy periodically. Material changes will be communicated through:

• Email notification to active users
• SMS notification (for material changes affecting SMS services)
• Prominent notice on our website
• Updated "Last Updated" date at the top of this policy

14. Contact Information

15. Supervisory Authority

If you're not satisfied with our response to a privacy concern, you have the right to lodge a complaint with:

• EU Residents: Your local data protection authority
• UK Residents: Information Commissioner's Office (ICO)
• California Residents: California Attorney General's Office