Privacy Policy

Last updated October 14, 2026

Sudsy Social is run by Branded Monthly LLC (“we”, “us”). It’s the front office for house-cleaning businesses: it catches their calls, answers and books their leads, and takes care of their clients by text and email in the business’s name. This policy explains what information we collect, why, who we share it with, and the choices you have.

It covers the Sudsy Social app and website, the public pages our members share with their clients (their My page, its quote form and its privacy and texting pages, and their referral links), and the calls, texts and emails Sudsy Social handles for members. We don’t sell personal information.

1. What we collect

From members (the cleaning business owners who sign up):

Account details: your name, email address and password (stored only as a secure, one-way hash), your time zone and language, when you agreed to these terms and this policy and which versions, and your answers to the sign-up confirmations.
Your business: its name, legal name, phone number, address and mailing address, the areas you serve, your price list, services, hours and policies, logo and colors, offers, and links. If you let My business fill itself, we read your own website and your public Google listing to find these details.
Texting registration: your business’s legal name, EIN and address, or for a sole proprietor your own name, home address and mobile number, and the owner’s name, email and mobile. The photo of your IRS letter is stored encrypted, shown only to you and our admins, and deleted 90 days after you confirm it. We check your business against public state records (Florida’s Sunbiz).
Billing: your package, payment history, text packs and the texting setup, and the exact words you agreed to for it. Payments are handled by Stripe; we never receive or store your full card number.
Your phone line: your mobile number for forwarding, your call settings, and the numbers you mark Team, Personal or Business. If you choose to add your phone contacts, we receive only one-way codes, never names or numbers (see “How we match people without sharing them”). Your Sudsy number belongs to your business: if you leave, we transfer it to your new phone company at no charge (see the Terms).
From apps you connect: from Google Calendar, Jobber or Housecall Pro, your clients and appointments; from Google Business Profile, your reviews and listing details.
How you use the app: which parts you open and on which days, counted inside our app only; we don’t use outside analytics or advertising trackers.
Device information needed to run the service: if you turn on reminders, your browser’s push notification address.

About members’ clients (the people a member cleans for, and people who call, text or ask a member for a price):

Contact details and history: name, phone number, email, address, ZIP code (used to send texts at a reasonable local time), language, and notes the business adds.
Conversations: messages with the business by text, email and My page.
Quotes, bookings and visits: what they asked for, the price shown, booked and finished cleans, and how the team gets in. A door or lockbox code is stored encrypted and shown only to the business, never in a text.
Calls: the number that called, when, and voicemails left on the business’s Sudsy number, with their written transcripts.
Number checks: whether a number is a mobile or a landline, and whether it changed owners since the business last heard from it.
Consent records: when someone agrees to texts or offers, the time, the page or message, the exact words and their version, the mobile number, and the IP address and browser; and every opt-out (STOP or unsubscribe). Also their yes or no to photos of their home.

From people who visit a member’s public pages:

Taps and visits: which link or button was tapped, when, and which app it came from. To count people instead of page reloads, we create a code from the visitor’s IP address, browser details and the date, using a secret key. We don’t store the IP address itself, and the code changes every day.
What you type into a form there, such as a quote request or a referral. We pass it to that member.

2. Our waitlist

If you join our waitlist (no account), we collect your name, email address, business name, city and state, the language you’d like, and, if you tell us, how many cleaners you have and whether you want an email when Sudsy Social opens. We use it only to plan our launch and, if you ticked the box, to send you that email. We don’t sell it or use it for advertising. To have your entry deleted, contact us; we answer within 30 days.

3. How we use it

To run the front office: connect and record calls the way this policy describes, answer and book leads, send the confirmations, reminders, check-ins, review requests and offers the business turned on, and file its texting registration.
To show results: count calls, leads, bookings, taps and visits, and what new clients are worth.
To keep everyone safe: sign-in, preventing abuse and spam, checking numbers before a text, and the records that show what was sent and with what permission.
To support you and improve Sudsy Social: answer your messages, and learn from usage and feedback which features help.
To send service emails: things like password resets, receipts, reminders and daily or weekly summaries.

We don’t use your information or your clients’ information to advertise to them, and we don’t sell or rent it.

4. Your clients’ information

When a member uses Sudsy Social, it calls back, texts and emails the member’s clients in the business’s name. We process clients’ information for the member, only to provide the service.

We never sell it.
We never use it for our own marketing.
We don’t use it to train AI models, and our AI provider’s terms don’t allow it to either.
Other businesses on Sudsy never see it.

When a member reports a wrong message, or we correct one, we may keep a copy to test our assistant, with names, numbers and addresses removed first. It’s never used to train an AI model.

If you’re a member’s client and want to see, correct or delete your information, ask the business directly, or contact us and we’ll pass it on and help.

5. Text messages (SMS)

Businesses that use Sudsy Social may text their own clients, and people who call or ask them for a price, through Sudsy Social. Those texts come from the business (for example “Shine Bright Maids”), powered by Sudsy Social.

What the texts are for: replies to quote requests and questions, booking and appointment messages (such as confirmations and reminders), payment details after a clean, a request for a review after a clean, an after-clean check-in, and customer care.

How you agree to get them: by ticking the texting box on the business’s quote or referral form, or by texting the business first. The box is never ticked for you, and ticking it is never required to get a price or book a cleaning. If you call a business and miss it, you may get one text from the business asking whether it may text you back; nothing else is sent unless you say yes.

Offers by text are separate: they need their own unticked box. You get at most 2 promotions a month, and only between 8 am and 8 pm your local time.

Message frequency varies.
Message and data rates may apply.
Reply STOP to opt out, or ask in any clear way (for example “stop texting me”). We stop right away, and always within 10 business days. You’ll get one text confirming it. Reply START to opt back in.
Reply HELP for help, or contact the business directly. You can also reach us through our contact form.

What we keep: your mobile number, your messages with the business, and a record of your consent (when you gave it, the exact words you agreed to, the page, your number and your IP address), so the business can show you asked for texts and so a STOP is always honored.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with third parties, except the providers that deliver the messages.

6. Emails to clients

Emails Sudsy Social sends for a business to its clients (booking emails, review requests, check-ins, and offers if the business turned them on) come from the business’s name and are delivered by Resend. Each one says why you’re getting it and has an unsubscribe link that works at once. Emails with an offer say they’re promotional and show the business’s mailing address.

When you reply to one of these emails, your reply goes to the business: to its own email, or through Sudsy Social, where it’s added to your conversation with the business and a copy goes to the business’s own email. Through Sudsy Social, writing “unsubscribe” in a reply stops that business’s emails to you.

If an email to you bounces, Sudsy Social stops emailing that address for every business. If you mark one as spam, that business stops emailing you.

7. Calls and voicemail

Calls to a business’s Sudsy number ring the business owner’s phone first, and a call they answer is never recorded. If the call is missed, a greeting says that messages may be recorded and transcribed before you leave a voicemail.

Voicemails are stored encrypted and turned into text by ElevenLabs, so the business can read them and Sudsy can tell a request for a cleaning from a sales call. The recording is deleted after 90 days; the text stays with the business’s records. Calls from numbers the business marked Personal are never transcribed.

Before a text, we may check with Twilio whether a number is a mobile or a landline, and with the FCC’s Reassigned Numbers Database whether it changed owners; we don’t text landlines or reassigned numbers. Phone companies may also tell us a call is likely spam.

8. How we match people without sharing them

Some safety features need to recognize a person again without showing who they are to anyone else:

Phone contacts: if a member chooses to add their phone contacts, so Sudsy knows friends and family from new leads, their browser turns each number into a one-way code with a secret key of the member’s before anything leaves the phone. We store only the codes, never names or numbers, use them only to recognize that member’s callers, and delete them when the member asks.
Deleted clients: when a business deletes a client, we keep only one-way codes of the client’s number, email and name, made separately for that business, so a calendar or booking-app sync doesn’t bring them back. The codes can’t be turned back into the details, and other businesses can’t use them.
Visitors: the daily visitor code described above.
Opt-outs: a STOP is honored by the business it was sent to, for good, and kept even after a deletion. Another business on Sudsy never sees it or learns about it.
Bounced emails: Sudsy keeps one list of email addresses that bounced, shared by every business on Sudsy, so nobody keeps writing to an address that doesn’t work. The list stores a one-way code made from the address, never the address itself. Other businesses never see the address or why it stopped.

9. AI

Sudsy Social’s assistant uses Anthropic’s Claude. For each draft we send only what it needs: the conversation, the business’s own facts (prices, area, hours, policies) and the client’s booking details. The AI also reads the photo of a member’s IRS letter for the texting registration.

Anthropic’s commercial terms don’t allow it to train on our data, and we never use clients’ information to train AI models.

10. Google

If a member connects Google Calendar or Google Business Profile, we read only what the features they turned on need: appointments from the calendars they choose, and reviews and listing details from their Business Profile.

Sudsy Social’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Appointment details may be sent to Anthropic only to draft messages for the member (such as a reminder or a reply).
We don’t use information from Google for advertising, and we never sell it.
No person reads it, except to help the member when they ask, or when needed for security or the law.
We don’t use it to train AI models.

11. Facebook and Instagram

Posting to Facebook and Instagram is paused: Sudsy Social doesn’t publish anything. If a member connected Facebook or Instagram before, we keep only what the connection needs (the account and Page names and IDs, and an encrypted access key) until they disconnect.

To delete it: disconnect in the app, remove our app in Facebook’s settings (we then delete everything we kept from Facebook and Instagram and give you a code to check on our data deletion page), ask us through our contact form, or delete your account.

13. Cookies and similar tools

We use a small number of cookies and browser storage that the service needs: a sign-in cookie that keeps you logged in, a cookie that remembers your language, and browser storage for small preferences (like a card you closed). We don’t use advertising cookies or cross-site tracking.

Because we don’t track you across other websites, we don’t change how we work in response to “Do Not Track” browser signals.

14. How long we keep it

We keep your information while your account is open. After your plan ends, we keep your account 30 days so you can download it, email you when that starts and 7 days before the end, then delete it. You can also delete it yourself (Account → Delete my account). Either way, we delete your account and everything stored with it, except:

Consent and opt-out records: kept for 5 years after the last message sent under that consent, so a business can show it had permission and so an opt-out is never undone.
Records of messages, calls, bookings, payments and Terms acceptances: kept for 5 years, even after an account or a client is deleted, to show what was sent and with what permission. Only Branded Monthly can see them, to answer a legal request.
Billing records: kept as long as tax law requires.

Some things go sooner: voicemail recordings after 90 days, the IRS letter photo 90 days after it’s confirmed, and phone-contact codes whenever the member deletes them.

Copies may remain in our providers’ backups for a short time; they’re overwritten within weeks.

15. Your choices and rights

See and download your data: Account → Your data → Download my data gives you a file with your business details, clients, messages, consent records, cleans, calls and results.
Correct it: change your details any time in My business and Account.
Delete it: Account → Delete my account removes your account and data (see “How long we keep it” for what stays).
Emails: turn reminders and summaries on or off in Account. Service messages like password resets and receipts can’t be turned off.
Members’ clients: ask the business, which can download or delete your information from your page in Sudsy Social, or contact us. We answer within 30 days. Opt-outs are kept even after a deletion, so you’re never contacted again by mistake.
Ask us anything: use our contact form. We answer privacy requests within 30 days, and we won’t treat you differently for making one.

Depending on where you live, you may have more rights under local law, such as asking what we hold about you. Contact us and we’ll help.

16. Security

We protect information with encrypted connections, encrypted storage, hashed passwords, extra encryption for access keys, EINs, door codes and voicemails, database rules that keep each business’s data apart, access limited to the people who run the service (with every look at member data logged), and providers that follow industry security practices. No system is perfectly secure, so please use a strong password that you don’t use anywhere else.

If a breach affects personal information, we notify the people affected as Florida law requires, within 30 days. If it affects a member’s clients’ information, we tell that member within 10 days.

Found a security problem? Please tell us through our contact form (choose “A security issue”). We look into every report promptly.

17. Children

Sudsy Social is for business owners aged 18 and over. We don’t knowingly collect information from children. If you believe a child has given us information, contact us and we’ll delete it.

18. Where we store it

Sudsy Social is run from the United States, and our providers store and process information in the United States.

19. Changes to this policy

If we change this policy, we’ll post the new version here with a new date. If the change is important, we’ll also tell members by email or in the app before it takes effect.

20. Contact us

Branded Monthly LLC, operator of Sudsy Social, Tampa, Florida, United States. Questions or requests: use our contact form, or Account → Help if you’re a member.