Project Royal · Serving Salem, Oregon
Website Privacy Notice
How Project Royal handles service requests, private staff records, security checks, business contact, and your privacy and storage choices.
Effective and updated October 12, 2026.
Who this notice covers
Project Royal is the Salem, Oregon cleaning business you contact through ProjectRoy.com. This notice covers the public website and information you choose to share about a cleaning request. Contact Clean@ProjectRoy.com or 971-398-6344 with privacy questions or requests.
The WebApp is created and managed by Wayne Tech Lab LLC, WayneTechLab.com. This is a website development and management credit; Project Royal is a separate business.
What information is involved
- Information you prepare: name, email, optional phone and street address, property ZIP code, property type, service or package, approximate area, timing, surface condition, and project description. Unsent entries remain in the current page while you review a request.
- Information you submit: when you choose Submit request, those contact, property, and project details, your privacy acknowledgment, and a request key are sent to Project Royal’s private Firebase staff workspace. The form returns a request reference after receipt is confirmed.
- Other business records: details you share by phone or email, optional emailed photos, inspected scope and property drawings, bids, invoices, receipt records, and related correspondence. The website request form does not upload photos.
- Connection information: technical information needed to deliver and secure the website, such as IP address, browser/request information, and requested URLs, can be processed by the hosting provider.
- Security information: submitting starts Google reCAPTCHA Enterprise and Firebase App Check to help detect abuse. Google can process browser, device, connection, and interaction information for this security check. The request endpoint keeps protected contact-based fingerprints and limited submission timing records to limit repeated requests, plus a site-wide request limit. The CRM does not store a raw IP address for this limit.
- Device storage: your privacy choice and, only if you allow it, public website files for offline access. These contain no quote-form entries or visitor advertising identifier. Request details and the website’s App Check token are not saved to this public offline cache.
Do not include payment-card information, identification documents, medical information, or other sensitive details in the quote form or ordinary email.
Reviewing and submitting a request
Preparing or reviewing a request does not send it. Submit request is the separate action that shares it with Project Royal. It requires a connection and a successful security check. A received reference confirms that the request is recorded; it does not book a visit, provide a final quote, or confirm an email was sent. If receipt is uncertain, retry the same reviewed request or contact us before sending it another way.
The form becomes available after JavaScript loads. Without JavaScript, or if the security check cannot complete, use the direct email or phone options. Your request does not require a customer account, optional offline storage, or marketing consent.
Open email draft passes the summary to your configured email app. Sending that email shares it with Project Royal and the email services involved. Copying or saving creates clipboard contents or a text file you control. Your device, email app, or backup service may retain these separately.
Unsent entries, retry keys, and the website’s security token are held in current page memory, not a persistent form queue or token store. Refreshing, closing the page, or choosing Update clears unsent entries. Copy or save them first. Submitted records remain in the private staff workspace independently of your browser. All quotes require on-site verification for accurate pricing and scope.
Purposes and recipients
Information you send is used to respond, assess the property, prepare a quote, coordinate agreed work, and handle related customer-service, recordkeeping, or legal matters. Without necessary contact and property details, we may be unable to respond or assess the work.
Google Firebase Hosting delivers this website. Firebase services process and store submitted requests and staff records. Authorized Project Royal staff can access them after secure sign-in; the public website cannot list or read customer records. Fonts and images are served here rather than through a separate Google Fonts connection. See Firebase privacy information and Google’s privacy notice.
Google reCAPTCHA Enterprise loads when you choose Submit request to protect that action. This is a security purpose, separate from optional public offline files. Google’s Privacy Policy and Terms of Service apply to the check. The website does not start an analytics or advertising service.
The separate staff workspace requires authorized Google sign-in. Firebase sign-in storage is limited to that browser tab and cleared after the server establishes the staff session. A secure, HttpOnly staff-session cookie is sent only to the private API and lasts up to eight hours. Staff request security values remain in page memory. These necessary staff controls are separate from public offline preferences and do not create customer accounts.
Email providers handle messages you send. Website support providers may handle technical information during authorized maintenance. Information may also be disclosed where required by law or needed to protect legal rights. The public form does not create a customer sign-in account, collect a payment, or automatically send a confirmation email. Authorized staff can review and send invoice and receipt PDFs to the email address recorded with an accepted bid. These business emails use Project Royal’s privately managed mail server, with noreply@projectroy.com as sender and Clean@ProjectRoy.com for replies. The CRM retains the message, exact PDF attachment and submission status; a mail-server acceptance does not guarantee inbox delivery. Mock receipt emails clearly state that no actual payment was collected. Stripe uses mock data and its SDK only; there are no real online charges or monthly customer subscriptions in this release. No feature sells personal information or shares it for targeted advertising.
External links open providers with their own privacy practices; they are not embedded tracking widgets.
Cookies, storage, and signals
This WebApp does not set advertising or analytics cookies. The banner offers Continue online or Allow offline files. Optional offline files are off until you allow them. A preference without a visitor identifier is remembered for up to 180 days. Reopen Privacy & cookie choices in the footer to turn offline storage off. Google’s submission security service can use its own essential security cookies or storage under its provider terms; these are not the optional offline files controlled by this banner.
If you opt in, the offline worker also keeps a minimal copy of that version, choice, and timestamp so a saved site can reopen offline. It expires under the same 180-day rule; existing files alone are not treated as consent.
Turning it off removes this WebApp’s saved offline files and unregisters its offline worker. Downloaded files, ordinary browser HTTP caching, and other websites’ data remain under your browser or device controls. The site remains available online.
An already-open page from an older installed version can keep its earlier worker and storage behavior until it updates or refreshes. Save or copy unsent details before using Update or refreshing to finish that transition; privacy controls do not automatically discard your request.
Global Privacy Control is recognized locally when exposed by your browser. No sale, targeted-advertising, or significant-decision profiling feature is enabled, and this WebApp does not override that signal. Do Not Track is not permission to track. See Cookies & storage for details.
Retention and international processing
Unsent entries last for the current page session. Preferences expire after 180 days and can be replaced through the footer or removed in browser settings. Optional public files remain until withdrawal, clearing site data, or browser eviction. Updates may retain earlier public files while other pages remain open.
Submitted requests and other Project Royal records are retained according to the inquiry, agreed work, and applicable recordkeeping or legal needs. Contact us about your records and applicable deletion options. Clearing offline files does not delete submitted business records. Hosting, security, and email providers apply their own retention arrangements.
The business is based in Oregon, United States. Providers may process information in the United States and other countries under their applicable terms and safeguards. This notice does not represent that all provider processing occurs solely in Oregon or the EU.
Privacy requests — Oregon and other US states
Email Clean@ProjectRoy.com with Privacy request in the subject, or call 971-398-6344. We may need proportionate information to verify a request or authorized agent. Avoid sending identity documents unless a secure, necessary method has been agreed.
Where applicable law grants them, rights may include access/copy, correction, deletion, information about specific recipients, and opt-out of sale, targeted advertising, or certain profiling. Eligibility, verification, and exceptions depend on the law. Optional offline files are not required to request a quote or exercise a right.
For Oregon Consumer Privacy Act covered requests, the usual response period is 45 days, with a permitted additional 45 days when necessary and with notice. If a covered request is denied, reply with Privacy appeal; the appeal decision is due within 45 days. If an appeal is denied, you may contact the Oregon Department of Justice. Other applicable state laws may have different procedures or deadlines.
Visitors in the European Economic Area
Cleaning services are offered for Salem, Oregon properties. If EU/EEA data-protection law applies to a processing activity, applicable rights may include access, correction, deletion, restriction, portability, objection, and withdrawal of consent without affecting earlier lawful processing. You may complain to the relevant data-protection authority.
Where those laws apply, requested quotes or agreed work can involve requested pre-contract steps or contract performance; delivery, security, and maintenance can involve legitimate interests; recordkeeping can involve legal obligations. Optional offline storage uses your affirmative choice, withdrawable in the footer. GDPR requests are generally answered within one month, with extensions or exceptions only as allowed by law. This WebApp makes no automated decision producing legal or similarly significant effects.
Children, security, and updates
This property-service website is not directed to children under 13. Contact us if you believe a child has sent personal information. HTTPS protects website connections; no internet or email system is guaranteed completely secure.
We will update this notice when website practices change and show the revised date. New optional purposes require an updated choice rather than being enabled by continued browsing.