Security

Your data stays yours

Each cleaning business has its own private space in Extero. We do not sell your data, and we never hold your customers' money.

Your business is separate

Every company has its own space. Customers, jobs, invoices and photos belong to that business only. Staff only see what you allow.

Secure sign-in

Accounts use email and password, with checks to block bots on sign-up. Connections use HTTPS. Password reset links expire.

Encrypted connections

Traffic to our sites and API is encrypted. We do not run advertising trackers on the marketing site.

Payments stay with you

Stripe and GoCardless run under your own accounts. Money goes to your bank on their schedule — Extero never holds customer funds. How Direct Debit works.

Photo storage

Job photos are stored privately, with limits based on your plan. Delete a photo and the space frees up.

Export and leave

Download customers, jobs and invoices as CSV. You can take your data with you — no support ticket required.

What we do not claim

We are a growing product in private beta. We do not currently have SOC 2 or ISO 27001 badges. If you need a formal security questionnaire, email [email protected] and we will answer honestly.

Responsible disclosure

If you find a security issue, email [email protected] with steps to reproduce. Please give us a reasonable window before public disclosure so we can fix it.