Privacy Policy

1. Who we are

CrewCaptain operates this software-as-a-service application for field service businesses ("Customer", "you"). This policy explains what data the Service handles and how, for both Customer's business data and the data of Customer's own end users (owners/employees).

2. Data we collect

• Team accounts: name, email address, role, and (if entered) pay-rate details for a Customer's owners and employees.
• Customer's business records: their customers' names, service addresses, billing email addresses, pricing, access notes, and service history.
• Work records: job check-offs, timestamps, time-on-site, and a crew device's GPS location at the moment a stop is checked off (used to confirm service visits).
• Sales leads: the name, phone number, email, address and notes a Customer records for a prospective customer who has contacted them. Visible only to that Customer's account owner.
• Accounting data: invoices, payment status, receivables, payables, and expense categories exchanged with Intuit QuickBooks Online, only after a Customer owner authorizes that connection.
• Subscription billing: when a Customer subscribes, Stripe collects and stores their payment details directly. We never receive or store card numbers; we keep only Stripe's customer and subscription identifiers and the resulting status (trialing, active, past due, canceled).
• Payout onboarding (optional): a Customer who enables online invoice payments completes Stripe's own onboarding. Stripe collects the identity and bank details it needs to verify that business and pay it out. That information goes to Stripe directly — it does not pass through CrewCaptain, and we cannot see it. We store only Stripe's account identifier and whether the account is cleared to accept payments.
• Invoice payments: for Customers using online invoicing, we store the invoice identifier, its hosted payment link, and its status. The payer's card or bank details are handled entirely by Stripe.
• Push notification tokens: a device identifier issued by Apple, used only to send that Customer's own owners alerts about their own work (for example, that finished work is ready to bill).

3. How we use it

Only to operate the Service for each Customer: scheduling, routing, confirming completed work, quoting, invoicing, tracking payment status, and reporting. We do not sell or rent data, and we do not use Customer data for advertising. Each Customer's data is isolated from every other Customer's data.

4. Where it lives and how it is protected

Data is stored with Supabase in the United States, encrypted in transit (TLS) and at rest. Access requires an authenticated account, and database-level rules restrict each Customer and each role within a Customer's team to only the records they need. QuickBooks access tokens are stored server-side only and are never present in the mobile app.

5. Sharing

Data is shared only with the services required to operate the Service:

• Intuit (QuickBooks Online): customer names, billing emails, and invoice details, only for Customers who connect it, so invoices can be created and emailed; payment status flows back. Governed by Intuit's privacy statement.
• Stripe: subscription billing for every Customer, and — for Customers who enable online invoice payments — payment processing on their own connected Stripe account. For invoicing, Stripe receives the payer's name and email address and the invoice amount so it can send and collect the invoice. Governed by Stripe's privacy policy.
• Apple: push notification delivery (device tokens only, no message contents beyond the alert itself).
• Supabase: hosting and database infrastructure.
• Mapping/geocoding providers: addresses sent for geocoding and property measurement.
• Anthropic: processes a Customer's own data on that Customer's behalf when the in-app AI assistant is used, to answer that Customer's questions.

We disclose data beyond this only if required by law.

6. Retention and deletion

Business records are kept as long as needed for the Customer's operations, bookkeeping, and legal/tax requirements, or until the Customer requests deletion. Employees whose access ends keep no access to any data. Contact us to correct or delete data using the address below.

7. Your choices and contact

A Customer owner can disconnect the QuickBooks connection at any time from within the app, which stops all data exchange with Intuit. For any privacy question, correction, or deletion request, email coltonblindsay1@gmail.com.

8. Changes

If this policy changes, we will update this page and its "Last updated" date.