GlassM8 Sign In Terms Cookies

Privacy Policy

Last updated: February 2026

1. Who We Are

GlassM8 is a window cleaning business management application provided by Generative Solutions UK ("we", "us", "our"). We are the data controller for personal data processed through this application. Contact: privacy@generativesolutions.uk.

2. Information We Collect

Account Data: When you register, we collect your name, email address, username, business name, phone number, address, VAT number, and company number.

Business Data: Customer records (names, addresses, phone numbers, emails), job schedules, invoices, quotes, expenses, team member details, and communications you create within the application.

Location Data: GPS coordinates (latitude/longitude) for customer addresses, used for mapping and route planning.

Photos: Before/after job photos uploaded by you or your team.

Technical Data: Session cookies, IP addresses (via server logs), browser type.

3. How We Use Your Information

PurposeLegal Basis
Providing the GlassM8 application and featuresContract performance
Processing and sending invoices via your SMTP settingsContract performance
Storing customer records and job historyContract performance
Map visualisation and route planningContract performance
Security monitoring and fraud preventionLegitimate interest
Activity logging for audit trailLegitimate interest

4. Data Sharing & Third Parties

We use the following third-party services:

  • OpenStreetMap / Nominatim — Map tiles and postcode geocoding. Your customers' postcodes are sent to Nominatim for coordinate lookup. See OSM Privacy Policy.
  • Open-Meteo — Weather data for scheduling. Only coordinates are sent, no personal data.
  • Google Fonts — Font delivery. Your IP address may be shared with Google.
  • Bootstrap CDN (jsDelivr) — UI framework delivery.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your SMTP Settings: When you configure email sending, your SMTP credentials are stored in our database. Invoice emails are sent directly from your configured SMTP server — we act as a processor, not a sender.

5. International Data Transfers

Your application data is stored on servers in the United Kingdom. Third-party services (Google Fonts, jsDelivr) may process minimal data (IP addresses) internationally.

6. Data Retention

We retain your data for the duration of your account. See our Data Retention Policy for specific retention periods. When you delete your account, all personal data is permanently removed.

7. Your Rights (UK GDPR)

  • Right of access — Download all your data from Settings > Privacy & Data
  • Right to rectification — Update your details in Settings
  • Right to erasure — Delete your account from Settings > Privacy & Data
  • Right to data portability — Export your data in JSON format
  • Right to restrict processing — Contact us
  • Right to object — Contact us

To exercise these rights, use the self-service tools in Settings or email privacy@generativesolutions.uk.

8. Data Security

  • Passwords hashed with scrypt/pbkdf2 (werkzeug)
  • CSRF protection on all forms
  • Rate limiting on authentication endpoints
  • Session cookies: HttpOnly, SameSite=Lax, Secure in production
  • Content Security Policy headers
  • File upload validation (image verification)

9. Cookies

We use strictly necessary cookies only. See our Cookie Policy.

10. Your Customers' Data

When you store your customers' personal data (names, addresses, phone numbers, emails) in GlassM8, you are the data controller for that data and we are the data processor. You are responsible for having a lawful basis to process your customers' data and for informing them about how their data is used. We process this data solely on your instructions to provide the GlassM8 service.

11. Complaints

You can lodge a complaint with the ICO: ico.org.uk | Helpline: 0303 123 1113.

12. Changes

We may update this policy. Material changes will be notified via a banner in the application.

13. Contact

Email: privacy@generativesolutions.uk