Privacy policy

Efficient Cleaning Operations LLC (“ECO,” “we,” “us”) is a residential and commercial cleaning company serving Springfield, Branson, and the surrounding southwest Missouri communities. This policy explains what information we collect, why we collect it, who else sees it, and what you can do about it.

It covers this website, our online booking flow, the customer portal, the links we email you, and the records we keep to run cleans. It applies whether you are a prospective customer who requested a walkthrough, an active customer, or someone who filled in a form and never booked.

We are a small local company, not an advertising business. We do not sell your information, we do not rent or trade it, and we do not share it for anyone else’s marketing.

We collect what is needed to quote a job, get to your property, clean it correctly, bill for it, and answer questions afterward. Concretely, that is:

When you request a walkthrough or quote

• Your name and, for commercial enquiries, your business name.
• Your email address and phone number.
• The service address — street, city, state, and ZIP. We also store approximate coordinates for that address so we can plan routes and check whether you fall inside our service area.
• Anything you type into the booking form’s question fields, and the notes our estimator writes during the walkthrough.
• How you found us — the referral source you tell us, plus any campaign parameters carried in the link you arrived on.

When you become a customer

• Everything above, plus your service schedule, preferred day and time window, and the earliest and latest times we may be at the property.
• Property and household details you choose to give us so the job goes right — pets, parking, which entrance to use, and similar notes. This is also where access details end up; see home access information below, because it deserves its own section.
• A record of every clean: when it was scheduled, who was assigned, when it was completed, hours worked, notes our cleaners wrote for you, internal notes, and any complaint or satisfaction rating attached to it.
• Photos taken during the clean — again, see its own section.
• Billing records: the amounts, the payment status, and reference identifiers issued by our payment processor.

When you sign a service agreement

Signing online is an electronic signature, so we record what makes it verifiable later: the signer’s name and email, the drawn signature image, the date and time, the IP address and browser user-agent the signature came from, and a cryptographic hash of the signed PDF so any later alteration is detectable.

When you use the customer portal

We record the IP address that requested each sign-in link, and the IP address and browser user-agent attached to the resulting session, along with when you last signed in and how many times you have. This is security and troubleshooting information — it is how we can tell a legitimate sign-in from a suspicious one.

When you answer a satisfaction survey

Your rating, your recommendation score, and any written feedback, plus a separate yes/no record of whether you gave permission to publish your feedback as a public review. Those are two different answers and we store them separately on purpose.

Cleaning a home usually means getting into it when you are not there. Customers commonly give us a gate code, an alarm code, a keypad or lockbox combination, smart-lock access, or instructions for where a key is kept. If you give us that information, it is stored with your customer record so the assigned cleaner can get in and do the job.

Here is how it is handled, stated plainly:

• It is stored in our customer database alongside your other scheduling preferences, on our hosting provider’s managed infrastructure. It is not stored in a separate encrypted vault, and we do not want to imply that it is.
• Our system reaches it only through a server-side key. There is no public read access to customer records; every read is made by our application after checking who is asking.
• Office staff can see it in our system, and the cleaner assigned to your property is given what they need to get in. Access notes are not shown on the job screen our cleaners work from — that screen carries the address, the scope, and how to reach you.
• It is never written into a calendar invitation. When a clean syncs to a staff member’s work calendar, the event carries the service scope, the address, the assigned team, and the estimated duration — not your access notes.
• It is never sent to a payment processor, an email provider, or an AI service.

If you cancel service, ask us to remove your access details and we will. We also recommend what you would recommend to yourself: change the code once a cleaning relationship ends, with us or with anyone.

Our cleaners take before-and-after photos during a clean. They exist for three reasons: to show the work was done, to flag damage or a problem that was already there when we arrived, and to settle questions about condition later. For short-term rental turnovers, the photo report is the deliverable the host is paying for.

Who can see them

• Our office staff and cleaning staff. The photo storage is restricted to internal staff roles — it is not public, and the file links are not guessable public URLs.
• You, for your own cleans. When you view a clean in the customer portal, the photos are served through a check that confirms the photo belongs to a clean at your property. You cannot see anyone else’s, and no one else can see yours.

What we do not do with them

We do not publish them, post them to social media, put them on this website, or use them in advertising — not without asking you first and getting a yes. We do not sell them and we do not share them with anyone outside the company, except where we are legally required to, or where you have asked us to send them to someone (a property manager or landlord, for example).

Please tell your cleaner if there is a room, an object, or a document you do not want photographed, and we will keep it out of frame. You can ask us to delete a specific photo, or all photos of your property, at any time.

This site sets no advertising cookies, no analytics cookies, and no third-party tracking cookies. There is no Google Analytics, no advertising pixel, and no session-recording tool. If you only browse the public pages, nothing is set at all.

The cookies that do exist are strictly functional — they are how being signed in works:

• Customer portal session. Set when you sign in to the portal. It lasts up to 30 days unless you sign out or we revoke it. It is not readable by JavaScript in your browser.
• Staff session. Set when an employee signs in to our internal system. Customers never receive this cookie.
• Legacy internal tool session. A short-lived cookie for a password-gated internal quoting page. It expires after 24 hours and is never set for customers.

Portal sign-in links are single-use and expire ten minutes after we send them. If a link has been used or has aged out, it stops working and you request a new one.

Because we run no tracking, we have nothing to honour a Do Not Track or Global Privacy Control signal against — there is no cross-site profile of you here to opt out of.

We use a small number of service providers to run the business. Each one receives only what it needs. None of them are permitted to use your information for their own marketing.

• Our hosting and database provider. This is where customer records, clean history, in-home photos, and signed agreements are stored. Data is held on managed cloud infrastructure in the United States.
• Our website hosting provider. Serves these pages and runs the application. It processes the ordinary technical information any web host does, such as the IP address a request came from.
• Our email provider. Sends transactional email — booking confirmations, portal sign-in links, contract links, satisfaction surveys, password resets. It receives the recipient’s email address and the contents of that message.
• Google, for work calendars. When a staff member connects their work calendar, their assigned jobs are written into it. A cleaning event carries the customer name or business name, the service address, the scope of work, the assigned team, and the estimated duration. A walkthrough event additionally carries the prospective customer’s email address and phone number, because the estimator needs to reach them. Access codes are never included.
• Our payment processor. Card details are entered on the processor’s own hosted page, not ours. We never receive, see, or store your full card number. What we keep is a set of reference identifiers the processor issues — enough to charge the card you authorised and to match up an invoice, and nothing more.
• An AI text-extraction service, for commercial bid documents only. When a business sends us a formal request for proposal, a staff member may paste that document’s text into a tool that pulls out the structured requirements so we can price it. This runs only on bid documents a business has sent us, only when a staff member starts it, and never on residential customer records, access notes, photos, or payment information.

Beyond those providers, we share information only when you ask us to, or when the law requires it — a valid subpoena, court order, or a situation involving a credible risk to someone’s safety. If our business is ever sold or merged, customer records would transfer with it, and this policy would follow them until replaced.

We keep customer and job records for as long as you are a customer, and afterward for as long as we have a legitimate business or legal reason to — resolving a billing question, answering a damage claim, meeting tax and accounting obligations, or defending a dispute.

Being straightforward about the current state of this: we do not run an automatic deletion schedule. Records persist until someone deletes them, which means old data does not quietly disappear on its own. We would rather tell you that than publish a retention table we do not actually enforce.

Some things do expire on their own: portal sign-in links die after ten minutes, portal sessions expire after 30 days, and contract signing links expire on the date set when they are sent.

If you want your records deleted sooner, ask — see your choices.

These are the measures actually in place. We have deliberately not padded this list with claims we cannot stand behind.

• The site is served over HTTPS, so traffic between your browser and us is encrypted in transit.
• Customer records have no public read access. Every read and write goes through our application using a server-side key that never reaches a browser.
• Access is scoped on the server from your signed-in session, not from anything in the web address. Editing an ID in a URL to try to view another customer’s record returns a not-found page.
• Session cookies cannot be read by JavaScript, and are marked secure in production.
• Portal sign-in links are single-use and expire in ten minutes. Sessions can be revoked centrally, which immediately cuts off a browser that still holds the cookie.
• In-home photos are restricted to internal staff roles at the storage layer, and a customer viewing their own photos passes through an ownership check first.
• Staff calendar credentials are stored encrypted, not in plain text.
• Signed agreements are hashed so that later tampering is detectable.
• Every change to a record is written to an audit log capturing who changed what, and what the values were before and after.
• Staff accounts are role-based. Employees are provisioned individually and access is revoked when someone leaves.

Regardless of where you live, you can ask us to:

• Show you what we hold. We will tell you what is on your record and send you a copy.
• Correct it. Much of it you can fix yourself in the customer portal — contact details, schedule preferences, and property notes. For anything else, ask and we will change it.
• Delete it. We will delete what we are not required to keep. We will tell you specifically what we are holding onto and why, rather than refusing wholesale.
• Remove your access details, on their own, without closing your account.
• Delete your photos, individually or all of them.
• Stop non-essential email. You can opt out of surveys and any marketing email and stay a customer. We will still send operational messages — appointment confirmations, schedule changes, and invoices — because those are part of providing the service.
• Withdraw review consent. We publish feedback as a public review only if you said yes. You can change that answer later.

We will not treat you differently for exercising any of these — no price change, no service change. Ask using any of the contact methods below.

Our services are sold to adults, and this site is not directed at children. We do not ask for anyone’s age or date of birth, and we do not knowingly collect personal information from children under 13.

We clean homes where children live, so our cleaners may see a child’s belongings or room. We do not record details about the children in a household, and our photo practice is the same here as everywhere else — if there is anything you do not want photographed, tell us and we will keep it out of frame.

If you believe a child has given us personal information, contact us and we will delete it.

If we change this policy, we will update the “last updated” date at the top of the page. For a change that meaningfully affects how we handle your information, we will tell active customers directly rather than relying on you to notice a date change.

A real person handles these — there is no ticket queue. For anything on this page, including a request to see, correct, or delete your information:

• Call or text (417) 233-1290.
• Email grace@417ecoclean.com.
• Write to us at 4239 S Sunrise Ave, Springfield, MO 65810.
• If you are already a customer, send us a message from the customer portal.

We are a Missouri company and this policy is governed by Missouri law.