Privacy Policy

1. Introduction & Scope

CrewCommand ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and Service.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. If you have any questions, contact us at privacy@crewcommand.app.

2. Information We Collect

2.1 Account Information

When you create a CrewCommand account, we collect:

• Name and email address
• Company name and phone number
• Billing address and contact information
• Password (encrypted)

2.2 Customer Data

CrewCommand allows you to upload and store customer information, including:

• Customer names, email addresses, and phone numbers
• Address and location information
• Job details, service histories, and notes
• Invoice and payment information
• Service tags and customer segments

You are responsible for ensuring you have proper consent and legal authority to store this information.

2.3 Usage Data

We automatically collect certain information about your interactions with the Service:

• IP address and browser type
• Pages visited, time spent on pages, and navigation patterns
• Device information (operating system, device type)
• Referring website URLs
• Features used and actions taken within the Service

2.4 Payment Information

Payment processing is handled by Stripe. We do not store full credit card numbers or sensitive payment data. Stripe may retain payment method details according to their own privacy policy. We receive transaction confirmations and billing information from Stripe.

2.5 Communication Data

If you contact our support team, we may collect:

• Email messages and attachments
• Chat or support ticket conversations
• Feedback, complaints, or feature requests

2.6 Cookies & Similar Technologies

We use cookies, web beacons, and similar tracking technologies to:

• Remember your preferences and login information
• Understand how you use the Service
• Measure the effectiveness of marketing campaigns
• Prevent fraud and improve security

Most browsers allow you to refuse cookies or alert you when they are being sent. Please note that blocking cookies may affect your ability to use certain features.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service
• Account Management: To verify your identity, manage your account, and process transactions
• Communication: To send billing notifications, security alerts, and support responses
• Marketing: To send promotional emails and updates (you can opt out anytime)
• Compliance: To comply with legal obligations and enforce our agreements
• Analytics: To analyze trends, improve user experience, and develop new features
• Security: To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity

4. Third-Party Service Providers

We may share your information with third-party service providers who assist us in operating the Service:

4.1 Supabase

Your account data, customer data, and usage data are stored on Supabase (PostgreSQL database). Supabase servers are located in the United States. Supabase is subject to standard data processor agreements.

4.2 Stripe

Payment processing and billing information are processed through Stripe. Stripe operates under its own privacy policy and is PCI-DSS compliant.

4.3 Resend

Transactional emails (password resets, invoice notifications) and marketing emails are sent via Resend. Resend may process your email address and email preferences.

4.4 Inngest

Background jobs, automations, and scheduled tasks are processed via Inngest. Inngest may temporarily access data necessary to execute these operations.

4.5 QuickBooks Online

If you connect your QuickBooks Online account, your QB-related data is processed by Intuit and governed by the QuickBooks Data Use Addendum and Intuit's privacy policy. We store only your QB access tokens (encrypted), not your QB company data.

4.6 Other Service Providers

We may use other third-party vendors for hosting, analytics, customer support, or other business functions. All service providers are contractually obligated to protect your data.

We do not sell or share your personal information with third parties for their own marketing purposes without your consent.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account Information: Retained for the duration of your subscription, then deleted within 30 days of account termination
• Customer Data: Retained according to your subscription and business needs. Upon account termination, deleted within 30 days unless legally required to retain
• Usage & Analytics Data: Retained for 12 months for analytics purposes
• Backups: Automated backups may retain data for up to 90 days for disaster recovery
• Communication Logs: Retained for 1 year for support and dispute resolution

Some data may be retained longer if required by law or if reasonably necessary for legal claims or compliance purposes.

6. Your Privacy Rights (PIPEDA & GDPR)

In Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) grants you the following rights:

• Right to Access: You have the right to request access to your personal information
• Right to Correction: You may request correction of inaccurate information
• Right to Deletion: You may request deletion of your personal information (subject to legal retention requirements)
• Right to Withdraw Consent: You may withdraw your consent to data collection at any time

If you are located in the European Union, you also have rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your data protection authority.

To exercise any of these rights, contact us at privacy@crewcommand.app.

7. SMS Communications

If you opt in to SMS communications, we will send transactional SMS messages (scheduling confirmations, payment notifications) to your phone number. Standard message and data rates from your carrier apply. You may opt out of SMS at any time by replying "STOP" or updating your preferences in your account settings.

8. Marketing Email & Opt-Out

We may send you promotional emails and marketing updates about new features, industry tips, or special offers. You can opt out of marketing emails at any time by:

• Clicking the "Unsubscribe" link in any email we send
• Updating your email preferences in your account settings
• Contacting us at support@crewcommand.app

Opting out of marketing emails does not affect transactional communications (billing, support, security alerts).

9. Analytics & Tracking

We use analytics tools to understand how users interact with our Service and website. These tools may collect information about your browsing behavior, including pages visited and actions taken. This information is used to improve the Service and understand user needs.

You may disable certain tracking features through your browser settings, though this may limit the functionality of the Service.

10. Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing
• Regular security audits and penetration testing
• Access controls and authentication mechanisms

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

11. Children's Privacy

CrewCommand is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information and terminate the child's account.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your home country. By using CrewCommand, you consent to the transfer of your information to countries outside your country of residence, which may provide different levels of data protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or a prominent notice on the Service. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy. The "Last updated" date above indicates when this policy was last revised.

14. Contact Information & Privacy Officer

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact:

CrewCommand Privacy Team
Email: privacy@crewcommand.app

We will respond to all privacy requests within 30 days or as otherwise required by law.