Privacy Policy

Last updated: March 24, 2026

1. Information We Collect

We collect information you provide when using Crewmatic:

  • Account information from Google OAuth (name, email, profile photo)
  • Company information you enter (company name, phone number)
  • Job data (addresses, loss details, insurance information)
  • Photos you upload for AI scoping
  • Moisture readings and equipment tracking data
  • Usage data (features used, session duration, device type)

2. How We Use Your Information

  • To provide the Crewmatic service and generate AI-powered scope data
  • To improve AI accuracy through aggregated, anonymized training data
  • To build your company knowledge store (equipment preferences, common codes)
  • To send service-related communications
  • To detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies enforcing company-level isolation. Photos are stored in private storage buckets accessible only via time-limited signed URLs. All data is encrypted in transit (TLS) and at rest (AES-256). We do not store your Google password.

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Infrastructure providers (Supabase, Vercel, Railway) as necessary to operate the Service
  • AI providers (Anthropic) for processing photo scope requests
  • Law enforcement when required by valid legal process

Photos sent to AI providers are processed and not retained by them beyond the request lifecycle.

5. Multi-Tenancy

Each company workspace is fully isolated. Users in one company cannot access another company's jobs, photos, or scope data. Row-level security policies are enforced at the database level.

6. Your Rights

  • Access and export all your data at any time
  • Request deletion of your account and all associated data
  • Opt out of AI model training (your data will still be processed for scope generation)
  • Correct inaccurate personal information

7. Data Retention

Active account data is retained for the duration of your subscription. Upon account deletion, all data is permanently removed within 30 days. Anonymized, aggregated data used for AI model improvement is retained indefinitely.

8. Contact

For privacy inquiries, contact us at privacy@crewmatic.ai.