What we collect, and what we do with it.
Last updated August 2026
This policy is under legal review. It accurately describes what this site does today; the wording may change once our attorney has finished reviewing it.
Tidyflow builds and runs software and websites for cleaning businesses. This policy covers tidyflow.dev — our own marketing site. It does not cover the software we operate for a client's business, which is governed by our agreement with that client.
What we collect
What you type into our contact form: your name, email address, phone number, business name, city, roughly how big your team is, and whatever you tell us about what you're trying to fix. Alongside that we record your IP address and the time your message arrived, which is how we stop bots from flooding the form. The form also contains one hidden field that a real person never sees or fills in — if it comes back filled, we know the submission was automated and we discard it. There's no account to create, and we don't ask for anything else.
Why we collect it
To reply to you. That's the whole purpose. If you ask us for a quote or a conversation, we use what you sent to have that conversation and to work out what setting you up would involve. The IP address is used only to limit how often the form can be submitted, so the inbox stays usable.
Where it goes
Your submission is stored in our database, hosted by Supabase, and a copy is emailed to us through Resend so we actually see it. This site is hosted on Vercel. Your IP address goes to Upstash, which counts recent submissions so we can rate-limit the form. We also use Sentry to tell us when something on the site breaks. Those companies process this data on our behalf and don't get to use it for their own purposes. We do not sell your information, and we do not share it with anyone for marketing.
Cookies, analytics and error reporting
We use Vercel Analytics to count page visits. It is cookieless and does not follow you across other websites. The only cookie this site sets is one that remembers whether you chose English or Spanish; the intro animation remembers itself using your browser's own storage rather than a cookie. Sentry watches for errors, so if a page breaks we get the technical details of what went wrong. We deliberately do not run session recording on this site — Sentry can replay a visitor's session, and we have that switched off here. There are no advertising trackers and nothing that follows you around the internet, which is why you aren't seeing a cookie banner.
How long we keep it
We keep contact submissions for as long as we might reasonably still be talking to you about working together, and then we delete them. The rate-limiting records tied to your IP expire on their own within about an hour. If you'd rather we delete your submission sooner, ask and we will.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email or call — the details are below — and we'll handle it ourselves. There's no form and no ticket queue. Worth being straight with you about one limit: we can delete your record from our database, but a copy of your message also exists in our email, so we delete that too when you ask rather than pretending it isn't there.
Children
This site is aimed at business owners. We don't knowingly collect information from anyone under 18.
Changes
If we change this policy we'll update the date at the top of this page.
Questions about any of this
Reach out and you'll get one of us, not a support queue. It's a small team — the same people who built the software answer the phone.
(331) 262-3119