Privacy Policy

HBM Home Solutions, the trading name of Mrs Clean House Clean Service LLC ("we", "us"), provides carpet, upholstery, mattress, and area rug cleaning services in Fuquay-Varina, North Carolina, and runs the scheduling, quoting, and invoicing application at app.hirehbm.com used to deliver them. This policy describes what information we collect, how we use it, and the choices available to you ("you") as a customer or as a user of that application.

Information we collect

We collect only what is needed to schedule, deliver, and bill the services you ask us for:

• Account and business data: business name, owner name, email, and a hashed password when a Customer signs up.
• Client data you enter: your customers' names, contact details, and service addresses, which you provide to generate quotes, schedule jobs, and send invoices.
• Communication consent records: SMS opt-in/opt-out status and timestamps, kept so we honor STOP/START/HELP requests correctly.
• Calendar data: if you connect Google Calendar, we store an encrypted OAuth credential and create/update calendar events tied to your scheduled jobs. We request only the scope needed to manage events (calendar.events) — never your full calendar history or other Google data.
• Payment data: subscription billing is handled entirely by Stripe. We never see or store your card number; we keep only the subscription status and Stripe's own customer/subscription identifiers.
• Usage and diagnostic data: basic application logs (e.g. login attempts, errors) used to keep the service reliable and secure. We do not log passwords, full payment details, or provider access tokens.

How we use information

• To provide the core product: quotes, scheduling, invoicing, team coordination, and the integrations you turn on (email, SMS, calendar, maps).
• To secure your account and enforce that each business's data stays separated from every other business using the application.
• To communicate with you about your account, billing, or service changes.

We do not sell personal information, and we do not use your clients' data for advertising.

SMS and mobile opt-in information

If you give us your mobile number and affirmatively opt in, we send you transactional text messages about services scheduled, rescheduled, or updated for you. We do not send marketing or promotional text messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Your mobile number and consent record are disclosed only to our messaging provider (Twilio) for the sole purpose of delivering the messages you requested, and to no one else.

• Message frequency varies — typically no more than a few messages per month.
• Message and data rates may apply, charged by your mobile carrier.
• Reply STOP at any time to opt out; reply HELP for help.
• We record your opt-in and opt-out status with timestamps so that STOP, START, and HELP requests are always honored.
• Consent to receive text messages is never a condition of purchasing any service.

Full details of the opt-in, including the exact consent wording, are on our SMS notification consent page.

Who we share data with

We use a small set of providers to deliver the product, each acting on our instructions and only for the purpose you enabled:

• Stripe — subscription billing and payment processing.
• Resend — transactional email delivery (invoices, team invitations, account notices).
• Twilio — SMS delivery only. Mobile opt-in data is shared with Twilio solely to deliver the messages you consented to, and is never shared with any other third party or used for marketing.
• Google — Calendar sync and address/drive-time lookups, where enabled.
• Our infrastructure hosting provider, to run the application.

We do not share data with anyone else, except where required by law.

Data retention and deletion

We retain account and client data for as long as your account is active so the product keeps working. You can request correction or deletion of your business's data, or of a specific client's data, by contacting us below; we will act on verified requests within a reasonable time.

Your rights

Depending on where you or your clients are located, you may have rights under applicable law to access, correct, or delete personal information — including under U.S. state privacy laws and, for users in Brazil, the Lei Geral de Proteção de Dados (LGPD). Contact us to exercise these rights.

Security

We use encrypted connections (HTTPS) throughout, encrypt stored third-party access tokens, hash passwords, and scope every request to the requesting business's own data. No method of transmission or storage is 100% secure, but we work to protect information appropriately for the data we hold.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above.