Privacy Policy
Last updated: March 24, 2026
1. Information We Collect
We collect information you provide when using Crewmatic:
- Account information from Google OAuth (name, email, profile photo)
- Company information you enter (company name, phone number)
- Job data (addresses, loss details, insurance information)
- Photos you upload for AI scoping
- Moisture readings and equipment tracking data
- Usage data (features used, session duration, device type)
2. How We Use Your Information
- To provide the Crewmatic service and generate AI-powered scope data
- To improve AI accuracy through aggregated, anonymized training data
- To build your company knowledge store (equipment preferences, common codes)
- To send service-related communications
- To detect and prevent fraud or abuse
3. Data Storage and Security
Your data is stored in Supabase (PostgreSQL) with row-level security policies enforcing company-level isolation. Photos are stored in private storage buckets accessible only via time-limited signed URLs. All data is encrypted in transit (TLS) and at rest (AES-256). We do not store your Google password.
4. Data Sharing
We do not sell your personal data. We share data only with:
- Infrastructure providers (Supabase, Vercel, Railway) as necessary to operate the Service
- AI providers (Anthropic) for processing photo scope requests
- Law enforcement when required by valid legal process
Photos sent to AI providers are processed and not retained by them beyond the request lifecycle.
5. Multi-Tenancy
Each company workspace is fully isolated. Users in one company cannot access another company's jobs, photos, or scope data. Row-level security policies are enforced at the database level.
6. Your Rights
- Access and export all your data at any time
- Request deletion of your account and all associated data
- Opt out of AI model training (your data will still be processed for scope generation)
- Correct inaccurate personal information
7. Data Retention
Active account data is retained for the duration of your subscription. Upon account deletion, all data is permanently removed within 30 days. Anonymized, aggregated data used for AI model improvement is retained indefinitely.
8. Contact
For privacy inquiries, contact us at privacy@crewmatic.ai.