Privacy Notice

Cain Family Insurance operates CleanIQ. For account, billing, product-usage, security, and support data, CleanIQ generally decides why and how the data is used. For CRM data a customer connects, CleanIQ acts on that customer’s instructions as a service provider or processor.

We collect account and team information; authentication and security events; organization and subscription records; device, IP, and request logs; encrypted connector credentials; CRM identifiers and data needed for scans; findings, approvals, write-back, audit and job history; support tickets; and Calia conversations, proposed actions, and approvals. Stripe provides billing identifiers and status; CleanIQ does not store full payment-card numbers.

Data comes from you and your team, connected CRM providers, authentication providers, Stripe, service logs, and communications with support or Calia.

We use data to create and secure accounts; connect CRMs; run scans and approved corrections; enforce plan limits; process billing; send transactional messages; provide support; investigate incidents; prevent fraud and abuse; comply with law; and improve and develop reliability and customer experience. Where GDPR or similar law applies, the lawful basis may be performance of a contract, steps requested before entering a contract, compliance with a legal obligation, or legitimate interests such as securing, operating, supporting, and improving the service. Consent is used where required and may be withdrawn without affecting prior lawful processing.

We disclose only the data reasonably necessary to providers listed on the Subprocessor List. Customer-selected CRMs are customer-directed integrations. We may also disclose data when legally required, to protect rights or safety, or during a business transaction subject to appropriate safeguards.

Calia sends a limited, credential-free task context and recent conversation to the OpenAI API. CleanIQ requests that Responses API content not be stored by setting store: false. OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in, although limited abuse-monitoring retention may apply under OpenAI’s terms. Do not place secrets or restricted data in Calia prompts.

CleanIQ does not sell personal information and does not share it for cross-context behavioral advertising. CleanIQ does not use third-party advertising cookies. Necessary cookies and similar storage support authentication, security, preferences, and checkout flow.

CleanIQ retains data only as reasonably necessary for the service, security, audit, billing, dispute, and legal purposes. Retention varies by record type and contract. A verified account-deletion request removes or de-identifies eligible data, subject to legal obligations, security logs, payment records, active disputes, and customer instructions. Audit and security logs may be retained after account deletion when reasonably necessary for security, fraud prevention, legal compliance, or dispute evidence. The CRM remains the system of record.

CleanIQ uses TLS in transit, server-side encryption for connector credentials, access controls, tenant-scoped authorization, audit logging, rate controls, approval gates, secure cookies, and secret-management practices. No security measure eliminates all risk. See the Security Overview.

Depending on where you live and applicable law, you may request access, correction, deletion, or portability; object to or restrict certain processing; appeal a denied request; or opt out of sale, sharing, or targeted advertising. CleanIQ does not currently sell or share data for targeted advertising. We may verify identity and authority before acting and will not discriminate for exercising applicable rights.

California residents may have rights to know, correct, delete, and receive information about categories of collection and disclosure. CleanIQ does not sell or share personal information as those terms are used for cross-context behavioral advertising. Authorized agents may submit requests subject to identity and authority verification.

CleanIQ is a business service for users 18 and older and is not directed to children. Do not connect or submit children’s data unless you have first obtained written confirmation that the use is supported and lawful.

CleanIQ and its providers may process data in the United States and other locations where they operate. Where applicable and available, CleanIQ may use recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or another lawful safeguard. Customers are responsible for determining whether their use requires a Data Processing Addendum or additional transfer terms.

Send privacy requests to [email protected]. We may update this Notice as the service or law changes and will post the updated date and provide additional notice when legally required.