Privacy Policy

This Privacy Policy explains how CrewDeck collects, uses, and protects your information when you use our service. We aim to be straightforward: we collect what we need to make the product work, nothing more.

1. Information You Provide

• Account info: name, email, password (hashed), and any profile details you add.
• Business content: clients, jobs, invoices, photos, booking requests, notes, and anything else you enter.
• Payment info: handled by Stripe — we never see or store your card numbers. We receive a customer ID and subscription status.
• Communications: messages you send us for support or feedback.

2. Information We Collect Automatically

• Usage data: pages visited, actions taken, device and browser type, IP address. Used to keep the product running smoothly and diagnose issues.
• Cookies: we use first-party cookies for authentication (staying logged in) and basic functionality. We do not use third-party advertising cookies.
• Audit logs: we record who did what in your workspace (created a job, sent an invoice, etc.) so owners can see team activity.

3. How We Use Your Information

• Operate, maintain, and improve the service.
• Send transactional emails (invoices, notifications, password resets, team invites).
• Process payments through Stripe.
• Detect and prevent fraud or abuse.
• Respond to support requests.
• Send occasional product update emails (you can opt out at any time).

3a. SMS / Text Messaging

When a customer submits a booking or quote-request form to a business that uses CrewDeckand explicitly opts in to receive text messages, that customer's phone number is used to send transactional SMS such as quote responses, appointment confirmations, scheduling updates, and service reminders. Message frequency varies based on the business's response. Message and data rates may apply. Customers can reply STOP at any time to unsubscribe, or HELP for help.

Mobile information (phone numbers and SMS opt-in data) will not be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers collected through opt-in are used solely to facilitate communication between the requesting customer and the business they contacted, and are processed by our SMS delivery subprocessor (Twilio) only for that purpose. Opt-in consent is not transferred between businesses on the platform.

4. Who We Share Data With

We don't sell your data. We share data with service providers who help us run the product:

• Stripe — payments and subscription management.
• Resend — transactional email delivery.
• Twilio — transactional SMS delivery for customers who explicitly opt in. Phone numbers shared with Twilio are used only to deliver opted-in messages and are not used for marketing.
• Hosting provider — running the application and storing your data.

We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer (acquisition, merger).

5. Data Retention

We keep your data as long as your account is active. If you cancel or delete your account, we retain business data for up to 30 days in case you change your mind, then permanently delete it. Some records (payment history, audit logs) may be retained longer to comply with legal obligations.

6. Your Rights

You can:

• Access and export your data from within the app.
• Correct inaccurate information in your profile or content.
• Delete your account at any time.
• Opt out of non-essential emails.

If you're in a jurisdiction with additional privacy rights (GDPR, CCPA, etc.), you may also have the right to object to or restrict processing. Email us at support@crew-deck.com to exercise these rights.

7. Security

We use industry-standard practices to protect your data, including encrypted connections (TLS), hashed passwords, and access controls. No system is 100% secure, but we take the responsibility seriously. If you spot a security issue, please email us.

8. Children

CrewDeckis not intended for anyone under 18. We don't knowingly collect information from children. If you think a child has given us data, email us and we'll delete it.

9. International Users

CrewDeck is operated from the United States. If you use the service from outside the U.S., your data will be transferred to and processed in the U.S. By using the service, you consent to this transfer.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or in-app before the changes take effect. The “Effective” date at the top tells you when the current version took effect.

11. Contact

Questions, concerns, or privacy requests? support@crew-deck.com