Privacy Policy

Last updated: March 24, 2026

1. Information We Collect

We collect information you provide when using Crewmatic:

Account information from Google OAuth (name, email, profile photo)
Company information you enter (company name, phone number)
Job data (addresses, loss details, insurance information)
Photos you upload for automated scoping
Moisture readings and equipment tracking data
Usage data (features used, session duration, device type)

2. How We Use Your Information

To provide the Crewmatic service and generate automated scope data
To improve the scoping models through aggregated, anonymized training data
To build your company knowledge store (equipment preferences, common codes)
To send service-related communications
To detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies enforcing company-level isolation. Photos are stored in private storage buckets accessible only via time-limited signed URLs. All data is encrypted in transit (TLS) and at rest (AES-256). We do not store your Google password.

4. Data Sharing

We do not sell your personal data. We share data only with:

Infrastructure providers (Supabase, Vercel, Railway) as necessary to operate the Service
Model providers (Anthropic) for processing photo scope requests
Law enforcement when required by valid legal process

Photos sent to model providers are processed and not retained by them beyond the request lifecycle.

5. Multi-Tenancy

Each company workspace is fully isolated. Users in one company cannot access another company's jobs, photos, or scope data. Row-level security policies are enforced at the database level.

6. Your Rights

Access and export all your data at any time
Request deletion of your account and all associated data
Opt out of model training (your data will still be processed for scope generation)
Correct inaccurate personal information

7. Data Retention

Active account data is retained for the duration of your subscription. Upon account deletion, all data is permanently removed within 30 days. Anonymized, aggregated data used for model improvement is retained indefinitely.

8. Contact

For privacy inquiries, contact us at hello@crewmatic.ai.