Security

Security at CleanConfirm

CleanConfirm is built around protected workspace access for cleaning teams. The product is designed to keep dashboard workflows, team roles, shift data, reminders, cover requests, and billing boundaries scoped to the people who need them.

Authenticated dashboard access

Dashboard pages require sign-in before workspace data can be viewed. Public marketing and resource pages are separate from private app workflows.

Users should keep their login accounts secure and avoid sharing access with other people.

Workspace-based access

Workspace data is scoped to workspace membership. A user should only see the workspaces they own or have joined.

If a team member should no longer see a workspace, an owner or admin should remove that member from the team.

Roles and permissions

CleanConfirm uses roles such as Owner, Admin, and Staff to shape what each person can view or manage.

Owners and admins can manage more of the workspace. Staff access is intended to be narrower and focused on the work they need to see.

  • Owner and admin access for management tasks
  • Staff access for assigned work and relevant updates
  • Role checks around dashboard workflows

Protected app routes

Private routes and app workflows are protected so unauthenticated visitors cannot open dashboard areas directly.

Workspace-aware checks help keep schedule, team, notification, billing, settings, and archive pages behind the right access boundary.

Team data handling

CleanConfirm handles practical coordination data such as team member names, email addresses, optional phone numbers, assigned shifts, confirmation status, reminders, cover requests, and job or client notes.

Teams should avoid adding sensitive information that is not needed for scheduling confirmation or team coordination.

Billing and payment security

CleanConfirm stores billing and subscription status needed to operate the product, but payment details are handled by payment providers.

CleanConfirm is not designed to store full card numbers or full payment credentials in the app database.

Vendors and infrastructure

CleanConfirm relies on trusted service providers for parts of the product, such as hosting, authentication, email delivery, analytics, support, and payment processing.

We choose vendors that help us operate the product reliably, but we do not claim a formal security certification unless one is clearly published.

User responsibilities

Owners and admins should remove people who no longer need access, keep team contact details accurate, and review roles when responsibilities change.

Every user should keep their sign-in account secure, use devices they trust, and report suspicious activity quickly.

Reporting security concerns

If you believe you found a security issue or a workspace access problem, email CleanConfirm support with a clear description and steps to reproduce if possible.

Please do not access, change, or share data that does not belong to you while reporting a concern.

support@cleanconfirm.net