In short
- No usage telemetry, no ads and no ad tracking.
- Lists of your files and programs, and your registry contents, never leave your PC.
- If you buy Pro, we keep your email, order details, license key and a one-way hashed machine ID to issue and check your license.
- Payments are handled by Stripe. We never see your full card number.
- You can ask to see, correct or delete your data, or object to how we use it, at any time: [email protected].
1. Who is responsible for your data
The data controller for https://cleansweep.tetono.com and CleanSweep is Tetono, Thailand. For anything about personal data, contact [email protected].
2. What we collect, why, and our legal basis
| Data | Used to | Legal basis |
|---|---|---|
| Email address and order details (amount, payment status, date, order ID) | Issue your license key, send the key and receipts, provide support and refunds, and keep accounts | Performance of our contract with you, and legal obligations under accounting and tax law |
| License key | Activate CleanSweep Pro and recover the key if you lose it | Performance of contract |
| One-way hashed machine ID and app version | Count the PCs using a key (up to 3), check the license and prevent misuse of keys | Performance of contract and legitimate interests |
| IP address and connection data (time, requested page, browser) in server and CDN logs | Serve the website and API, and protect them against attacks and abuse | Legitimate interests (keeping our systems secure) |
| Email entered on the key recovery page, its language preference, and messages you send to support | Send the key to the owner of that email in the right language, and answer your questions | Performance of contract and legitimate interests |
A “one-way hashed machine ID” is a value computed from your computer's identifiers and passed through a hash function. It cannot be turned back into your hardware details, computer name or user name; it only tells us whether a PC is one we have seen before.
If you don't provide the data needed to buy or activate Pro, we can't issue or check a Pro license. You can still use the free edition without giving us any data at all.
3. What we don't collect
- No usage telemetry and no analytics inside the app.
- No lists of your files or installed programs, file contents or registry data ever leave your PC. All scanning and removal happens on your own computer.
- No ads, no ad trackers, and we never sell or rent personal data to anyone.
- No full credit or debit card numbers. Those stay with Stripe, under the payment industry's security standards.
4. Data the app keeps on your PC
CleanSweep stores backups of what it removes, install logs, settings and log files in %ProgramData%\CleanSweep on your PC. This data stays on your computer and we cannot access it. When you uninstall CleanSweep, the uninstaller asks whether to delete this folder too.
5. Website, cookies and analytics
- This website does not use advertising or cross-site tracking cookies.
- We may use Cloudflare Web Analytics, which counts visits in aggregate without cookies and without identifying individuals, so we can see which pages are useful.
- Your theme and language choices on this site are stored in your browser's local storage, not sent to us.
- When you click Buy, you are taken to Stripe's checkout page, which may use cookies needed for payment and fraud prevention under Stripe's own policy.
6. Service providers we use
These providers process data on our behalf, only as needed and under contracts that require them to keep it secure and use it only on our instructions:
- Stripe: payment processing, receipts and fraud prevention.
- Cloudflare: website hosting, the license database and connection logs.
- An email delivery provider: sending license keys and key-recovery emails, once email delivery is enabled.
We may also disclose data where the law requires it, or on the lawful order of a government authority or court.
7. International transfers
Stripe, Cloudflare and the email provider may process data on servers outside Thailand. When data is sent or transferred abroad, we follow Sections 28 and 29 of the PDPA by choosing providers with appropriate data-protection safeguards, such as standard data-protection contract clauses, or where the transfer is necessary to perform our sales contract with you.
8. How long we keep data
- Orders and accounting records: for as long as Thai accounting and tax law requires, generally around 5 to 10 years.
- License data and hashed machine IDs: for as long as the license is valid, so you can recover your key and move between PCs. If you ask us to delete it, we will delete or anonymize it, except for anything the law requires us to keep.
- Server and CDN logs: kept for a short time for security and troubleshooting, then deleted on the providers' retention cycle.
- Support emails: for as long as needed to help you and follow up.
9. Security
Every connection uses HTTPS encryption. Access to data is limited to those who need it, machine IDs are stored only as one-way hashes, and the key recovery page never reveals whether an email address is in our system, to prevent anyone from probing for customers. If a personal data breach puts your rights at risk, we will notify the Personal Data Protection Committee (PDPC) and you, as the law requires.
10. Your rights under the PDPA
- The right to access your personal data and get a copy of it.
- The right to receive your data, or have it sent to another controller (data portability).
- The right to object to the collection, use or disclosure of your data.
- The right to have your data deleted, destroyed or anonymized.
- The right to restrict the use of your data.
- The right to have your data corrected and kept up to date.
- The right to withdraw consent at any time where we rely on it, without affecting processing done before you withdrew it.
- The right to complain to the Personal Data Protection Committee (PDPC) if you believe we have not complied with the law.
Some rights have legal limits. For example, we may not be able to delete proof of a sale until the period required by accounting or tax law has passed; if so, we will explain why.
11. If you are outside Thailand
Our business is based in Thailand, and your data is processed by Stripe and Cloudflare on infrastructure in several countries, as described above. Wherever you live, you can use the rights in this policy.
If you are in the European Economic Area or the United Kingdom, you also have rights under the GDPR or UK GDPR, including access, rectification, erasure, restriction of processing, data portability and objection, and you may complain to your local data protection supervisory authority. The legal bases in section 2 (contract, legal obligation, legitimate interests and consent) are the ones we rely on for these purposes too.
12. How to exercise your rights
Email [email protected] from the address you used to buy or sign up, and tell us what you need. We may ask for a little more information to confirm the data is yours. We reply within 30 days of receiving your request, free of charge.
13. Children
CleanSweep Pro should be bought by an adult, or with a parent's or guardian's consent. We don't knowingly collect data from children under 10. If you are a parent and find that we hold your child's data, please contact us and we will delete it.
14. Changes to this policy
We may update this policy when our service or the law changes, and we show the date of the latest update at the top. For significant changes, such as collecting a new type of data, we will give notice on the website or by email before they take effect, and ask for your consent again where the law requires it.
15. Contact us
Tetono · Email [email protected] · Website https://cleansweep.tetono.com