Privacy Policy

CREWERC ("CREWERC," "we," "us," or "our") provides a software-as-a-service platform that helps service businesses manage leads, estimates (bids), scheduling, crews, invoicing, payments, and marketing. This Privacy Policy explains how we collect, use, disclose, and protect personal information that is processed through the Platform.

This Policy applies to two audiences: (a) the businesses that subscribe to and operate on the Platform ("Tenants" or "Customers") and their authorized users, and (b) the individuals who submit their contact or project information through Tenant-facing public forms, such as quote requests, campaign landing pages, and gift card purchases ("End Users").

By using the Platform or submitting information through any form powered by it, you acknowledge the practices described in this Policy.

From Tenants and their users: account email and password (stored as a hash), name, role, company profile details (name, logo, contact details, branding), and the business data you create — leads, customers, bids, jobs, invoices, expenses, employees, crews, vehicles, equipment, and marketing content. We also receive billing information processed by our payment partners (Stripe, Square); card numbers are tokenized by those partners and never touch our servers.

From End Users: the name, phone number, email, and property/project details you provide in a quote or lead-capture form, including any service questionnaire answers, optional promotional or referral codes, and your consent preferences for email and text communications. Public gift card purchases also collect purchaser and recipient names and email addresses.

Automatically: basic device and usage data such as IP address (used for security, rate limiting, and abuse prevention), browser type, and approximate location derived from your IP. We use cookies and similar technologies only for essential site function and, where enabled, lightweight analytics.

We use personal information to: operate, maintain, and improve the Platform; create and manage Tenant accounts; process quote requests and route leads to the relevant Tenant; send estimates, invoices, appointment reminders, and follow-up messages that a Tenant configures; process payments through the Tenant's connected Stripe or Square account; provide marketing, reporting, and AI-assisted content features; detect, prevent, and respond to fraud, spam, and security incidents; and comply with legal obligations.

Where a Tenant sends you a marketing or follow-up message, that communication is sent on the Tenant's behalf using the Tenant's own connected provider accounts. You may opt out of promotional messages at any time using the unsubscribe link or by replying STOP to any text message.

For individuals in the European Economic Area, United Kingdom, and Switzerland, we process personal data under the following legal bases: contract (to provide the services a Tenant subscribes to and to deliver quotes and services you request), consent (for optional marketing communications and cookies), legitimate interests (security, fraud prevention, and Platform improvement, balanced against your rights), and legal obligation (tax, accounting, and other regulatory requirements).

We use essential cookies required to operate the Platform (such as maintaining your session). We do not sell data to advertising networks. Where analytics are enabled, they are used in aggregate to understand Platform usage and improve performance. You can control cookies through your browser settings; disabling non-essential cookies does not prevent you from submitting a quote request.

We do not sell your personal information. We share it only as described here or as required by law. We use the following categories of sub-processors, each engaged under written agreements requiring appropriate data protection:

• Cloud infrastructure & hosting: the cloud provider that hosts the Platform and its database.
• Payments: Stripe and Square, as connected by each Tenant, to process payments and refunds. Payment card data is collected directly by these providers and never stored by us.
• Communications: the email and SMS providers each Tenant connects (e.g., Resend, SendGrid, Mailgun, Postmark, Twilio) to deliver messages on the Tenant's behalf.
• AI services: third-party large-language-model providers used to power optional content, insight, and follow-up features, processing only the data a Tenant submits to those features.
• Maps & geocoding: mapping services used to resolve addresses for scheduling and service-zone pricing.
• Advertising & social platforms: where a Tenant connects Google Ads, Meta, or social accounts, data is shared with those platforms only as the Tenant directs.

A current list of sub-processors is maintained in our Data Processing Agreement.

We retain Tenant data for as long as your account is active and for a limited period afterward to allow export and closure, after which it is deleted or anonymized unless retention is required by law (for example, tax-related invoice records). End User information submitted through public forms is retained by the relevant Tenant as part of that Tenant's business records and is governed by the Tenant's own retention practices and applicable law.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, access controls, audit logging, and per-Tenant data isolation. Each Tenant's data is segregated so that one Tenant cannot access another Tenant's records. No method of transmission or storage is fully secure, but we work to protect your information using industry-standard measures.

Subject to applicable law, individuals may have the right to: access the personal data we hold about them; request correction of inaccurate data; request deletion of their data (subject to legal retention requirements); restrict or object to certain processing; receive a portable copy of their data; and withdraw consent at any time where processing relies on consent.

For End User data submitted to a Tenant, requests are generally best directed to the Tenant whose form you used, as they control the purpose and means of that processing. You may also contact us using the details below. Residents of California and other U.S. states with privacy rights may exercise applicable rights under state law; we do not sell or share personal information for cross-context behavioral advertising.

The Platform is intended for use by businesses and the adults who request their services. We do not knowingly collect personal information from children under 16. If you believe a child has submitted information to a form powered by the Platform, please contact us and we will take steps to delete it.

Because our infrastructure and sub-processors may operate in multiple countries, personal information may be transferred to and processed in countries other than your own. Where required (for example, transfers out of the EEA/UK), we rely on appropriate safeguards such as standard contractual clauses or another lawful transfer mechanism.

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date. Material changes will be communicated to active Tenants. Continued use of the Platform after a change takes effect constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at legal@crewerc.com.