Controller & Processor
🏢 Data Controller
Prime Clean Ops acts as Data Controller for subscriber account information — managing how your business data is collected and used on our platform.
⚙️ Data Processor
When you use Prime Clean Ops to manage your own clients and staff, you act as Data Controller and Prime Clean Ops acts as your Data Processor. A Data Processing Agreement (DPA) is available on request.
🇩🇪 EU Data Residency
All customer data is stored on Supabase infrastructure in Frankfurt, Germany — within the EU. No primary data storage outside the EEA unless covered by Standard Contractual Clauses.
🔐 Security Measures
Row Level Security (RLS) at database level, TLS 1.2+ encryption in transit, encryption at rest, hashed passwords, access controls, and audit logging for sensitive operations.
Your rights under GDPR / RGPD
The following rights apply to EU, UK, and French residents under GDPR, UK GDPR, and the French Loi Informatique et Libertés.
| Right | What it means | How to exercise it |
|---|---|---|
| Right of access (Art. 15) | Request a copy of all personal data we hold about you | Email privacy@primecleanops.com |
| Right to rectification (Art. 16) | Correct inaccurate or incomplete data | Update in account settings or contact us |
| Right to erasure (Art. 17) | Request deletion of your personal data ("right to be forgotten") | Settings → GDPR → Erase my data, or email us |
| Right to restrict processing (Art. 18) | Ask us to limit how we use your data in certain circumstances | Email privacy@primecleanops.com |
| Right to object (Art. 21) | Object to processing based on legitimate interests or for marketing | Email privacy@primecleanops.com |
| Right to portability (Art. 20) | Receive your data in a machine-readable format | Settings → Export my data (CSV / JSON) |
| Right to lodge a complaint | Complain to a supervisory authority if you believe your rights have been violated | ICO (UK): ico.org.uk · CNIL (FR): cnil.fr |
Data Retention
- Active subscription data: retained for duration of subscription
- Financial records: 7 years (UK HMRC / French tax law)
- Deleted accounts: anonymised within 30 days of request
- GPS location data: 90 days (configurable by subscriber)
- Anonymous AI Assistance sessions (no account linked): automatically deleted 30 days after creation
Anonymous session erasure: if you used the AI Assistance widget without an account and want your conversation deleted before the 30-day expiry, email privacy@primecleanops.com with the session ID shown in the widget footer. That ID is the only identifier we can use to locate an anonymous conversation.
Supervisory Authorities
UK: Information Commissioner's Office (ICO) — ico.org.uk · Tel: 0303 123 1113
France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr