leestly
Legal

Privacy Policy

Effective date: 4 September 2026

This policy explains how leestly("we", "us") collects, uses and protects your personal data. leestly is a trading name of Nextorn Ltd, which is the data controller. Contact: hello@leestly.com.

1. Who we are

leestly is a marketplace that connects people who need home cleaning ("Clients") with independent cleaning professionals ("Cleaners"). We operate two mobile apps — leestly (Client) and leestly Pro (Cleaner) — a web admin panel, and an AI connector that lets you book a cleaning from inside a third-party AI assistant (e.g. Claude, ChatGPT). Payments are processed by Stripe; we never store your full card number.

The controller is Nextorn Ltd, a company registered in England and Wales, company number 16923783, registered office 4 Beckett House, Wallingford Street, Wantage, OX12 8AZ. Write to us at that address, or at hello@leestly.com.

2. What data we collect

Account & identity

  • Name (and, for Cleaners, first/last name and date of birth for identity verification).
  • Email and/or phone number. Sign in with Apple may hide your real email via Apple's private relay.
  • Password — stored only as a salted bcrypt hash, never in plain text.
  • Social sign-in identifiers if you use Google or Apple (a provider user ID, not your password).
  • Profile photo (optional).

Addresses & location

  • Cleaning addresses you save (label, full address, city, postcode, building/flat, floor, entrance, intercom, access instructions, area, room list) and their geo-coordinates.
  • For Cleaners only: a residential address for identity & payout verification (Stripe Connect / KYC).
  • The Client app geocodes a typed address into coordinates; the Cleaner app uses device location during an active job for navigation and arrival confirmation.

Orders, payments & communications

  • Order details: cleaning type, schedule, price, status, notes, intake answers, reviews and ratings.
  • Payments: your Stripe customer ID and, for saved cards, only the last 4 digits, brand and expiry. Full card data is held by Stripe, not by us.
  • In-app chat messages between Clients and Cleaners, including photos and voice messages.

Device, technical & AI connector

  • Push notification tokens; app language and timezone; notification preferences.
  • Security telemetry: last login time, IP address, device / user-agent.
  • Crash and diagnostics data and product analytics, where enabled.
  • When you connect leestly to a third-party AI assistant, we issue a separate, scoped token and record actions taken through it. The AI provider receives only minimal tool data (e.g. address list, order status) — never your password, full card number, or internal IDs.

Invite links on this website

A Cleaner can share an invite link of the form leestly.com/invite/CLN-XXXXXX so that a discount for you, and their referral reward, can be attributed to them. Opening such a page records two things, and only on those pages:

  • The page request.The page is rendered on our server, which asks our own API for the Cleaner's public profile (first name, photo, rating, number of reviews) so that we can show you whose link you followed. That server-to-server request forwards your IP address and your browser's user-agent string, and the API records the visit as a click on that invite code.
  • One message from your browser.When the page loads it sends a single message to our API containing: the invite code; whether the device is iOS, Android or a desktop browser (worked out from the user-agent string); your browser's language setting; your device's time zone (for example Europe/London); the operating-system version where the user-agent string states it; and the screen width, screen height and device pixel ratio your browser reports. It carries no name, no email address and no account identifier, it is sent without authentication, and it neither sets nor sends any cookie.

We use both to count how many people open an invite link and to match a later app install back to the Cleaner who earned it, so that the referral discount and the Cleaner's reward go to the right person, and so that we can spot abuse of the referral scheme. The signals are a matching hint, not proof of identity, and they are not used to build an advertising profile or shared with advertisers. If you would rather not send them, install the app from the App Store or Google Play directly instead of through an invite link — the only consequence is that the Cleaner is not credited.

Forms on this website

  • Support form: your name, email address and the message you write.
  • Partner application: your name, email address, social handle, platform, audience size and what you tell us about yourself.

These forms post to our own API rather than to a third-party form service.

3. How we use your data (UK GDPR legal basis)

PurposeLegal basis
Provide the service (match, schedule, navigate, chat, complete orders)Performance of a contract
Process payments via Stripe (authorize-then-capture)Performance of a contract
Identity & fraud prevention, account securityLegitimate interests / legal obligation
Notifications (order updates, chat, reminders)Contract / consent (per-category opt-out)
Marketing & promotionsConsent (opt-in / opt-out)
Improve & secure the product (crash reports, analytics)Legitimate interests
AI connectorConsent (you initiate and authorize the connection)
Referral attribution: counting invite-link clicks and matching an install to the Cleaner who earned itLegitimate interests (paying a referral to the right person and detecting abuse of the scheme)
Website forms: support messages, partner applicationsSteps towards a contract and legitimate interests (support and partner applications)

4. Cookies on this website

This website sets no non-essential cookies, which is why you are not asked to accept any. Specifically:

  • There is no analytics, no advertising pixel and no third-party tracking script on the site.
  • The fonts are served from this website. They are downloaded and bundled when the site is built, so your browser never requests a font from Google or from any other third party.
  • The only cookies we set are the partner sign-in session — lp_at and lp_rt — and they appear only if you sign in to the partner cabinet at leestly.com/partners. They are httpOnly (scripts on the page cannot read them), short-lived, and strictly necessary to keep you signed in. They carry no profile and are not used to follow you across other websites.
  • The invite-link message described in section 2 sets no cookie and sends none.

If this ever changes — if we add analytics, for example — we will say so here and ask for your consent first where the law requires it.

5. Who we share data with

We do not sell your personal data. We share it only with: Stripe(payments & payouts); cloud and infrastructure providers (hosting, database, media, email, push, maps / geocoding, error monitoring); the other party to an order (the name, address and details needed to complete the job); third-party AI providers (only if you use the connector, minimal tool data); and authorities where legally required. A full sub-processor list is available at hello@leestly.com.

6. International transfers

Some processors may store data outside the UK / EEA, protected by adequacy decisions or Standard Contractual Clauses / the UK IDTA.

7. How long we keep data

We keep your data while your account is active and as needed to provide the service. Order and financial records are retained as required for accounting, tax and dispute resolution. On account deletion, personal data is anonymized (see section 9).

8. Your rights (UK GDPR)

You may access, rectify, erase, restrict, port, and object to processing, and withdraw consent at any time — in the app or via hello@leestly.com. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Deleting your account

You can delete your account in the app (Settings → Delete account, confirmed by a code sent to your email / phone). On deletion we anonymize your personal data in place, cancel active subscriptions, remove notifications, and sever links to reviews / financial records (GDPR Article 17). Some records are retained in anonymized form where required by law. Step-by-step instructions, and the full list of what is deleted and what is kept, are on Delete your account.

10. Children

leestly is not directed at children under 18 and we do not knowingly collect their data.

11. Security

Passwords are bcrypt-hashed; card data is held by Stripe (PCI-DSS); we use TLS in transit, account lockout on repeated failed logins, scoped tokens for the AI connector, and least-privilege internal access.

12. Changes to this policy

We will post changes here and update the effective date; material changes will be notified in-app or by email.

13. Contact

leestly is a trading name of Nextorn Ltd, a company registered in England and Wales, company number 16923783. Registered office and postal address: 4 Beckett House, Wallingford Street, Wantage, OX12 8AZ.

Privacy questions and data-rights requests: hello@leestly.com. Help with a booking, payment or account: support@leestly.com. See also our Terms of Service.