Privacy Policy
Last updated: May 28, 2026
This Privacy Policy explains how CrewShot ("CrewShot," "we," "us," or "our") collects, uses, and shares information when you use our photo-documentation and project-management service (the "Service"). By using the Service, you agree to the practices described here.
Our role. When you use the Service to manage your own customers and projects, you act as the controller of that information and we process it on your behalf as a service provider/processor. For your own account and billing information, we act as the controller. If you are an end customer of a CrewShot user (for example, a homeowner whose contractor added you), see Section 8.
1. Information We Collect
We collect the following categories of information:
- Account information — your name, email address, and password credentials, plus company details such as company name, phone, address, logo, and branding.
- Customer and project data you enter — information you add about your own customers (such as name, email, phone, and address) and about your projects, estimates, payment requests, and notes.
- Photos and their metadata — images you upload or import, along with associated metadata such as GPS coordinates, timestamps, captions, tags, and annotations.
- Payment information — handled by our payment processor, Stripe. We do not store full card numbers; we receive limited billing and subscription details from Stripe.
- Usage and technical data — basic log and device information generated when you access the Service, used to operate, secure, and improve it.
2. How We Use Information
We use information to:
- provide, maintain, and improve the Service;
- create and manage your account and authenticate logins;
- store and display your photos, projects, reports, estimates, and client portals;
- process subscriptions and payments;
- send transactional and service-related communications;
- provide support and respond to your requests; and
- protect the security and integrity of the Service and comply with legal obligations.
We may also create aggregated or de-identified data that does not identify you or any individual and use it to analyze and improve the Service. We do not sell your personal information, and we do not use the content of your customer or project data for advertising.
3. Photo Metadata & GPS
Photos you upload may include embedded metadata such as GPS location and timestamps, and the Service is designed to capture and display this information. When you share a project via a portal, report, or estimate link, the photos and associated metadata you have chosen to share become viewable by anyone with that link. You control which content is shared and when sharing is enabled.
4. Cookies & Similar Technologies
We use cookies and similar technologies that are necessary to operate the Service — primarily to keep you signed in and maintain your session, and to support security. We do not use the Service to serve third-party advertising. Because the cookies we use are essential to providing the Service, disabling them may prevent the Service from working.
5. How We Share Information
We do not sell your personal information. We share information only as follows:
- Service providers (subprocessors) — who process information on our behalf to operate the Service, as listed in Section 6.
- People you share with — recipients of portal, report, or estimate links you generate can view the content you choose to share.
- Legal and safety — when required by law, to enforce our Terms, or to protect the rights, property, or safety of CrewShot, our users, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6. Subprocessors
We use the following third-party providers to operate the Service. Each processes information only as needed to provide its function.
- Supabase — authentication and data/photo storage.
- Amazon Web Services — application hosting and infrastructure.
- Stripe — payment processing and subscription billing.
- Resend — transactional email delivery.
We may update this list as our providers change. For the current list, contact us at support@crewshot.net.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. We do not delete or hide your photos and projects solely because a free trial ends. We may retain certain information as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated content as described below.
8. Security
We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
9. Your Rights & Choices
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update much of your information directly in your account settings. To make a request, contact us at support@crewshot.net. We will respond consistent with applicable law and will not discriminate against you for exercising these rights.
If you are an end customer of a CrewShot user (for example, a homeowner whose information a contractor added), the contractor controls that data. Please direct access or deletion requests to that contractor; we will assist them as needed.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you the following rights regarding personal information we hold as a business:
- the right to know what personal information we collect, use, and disclose;
- the right to access and to delete your personal information;
- the right to correct inaccurate personal information;
- the right to opt out of the "sale" or "sharing" of personal information; and
- the right to limit the use of sensitive personal information.
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes that require a right to limit. To exercise your rights, contact us at support@crewshot.net. You may use an authorized agent, and we will not discriminate against you for exercising your rights.
11. International Users
The Service is operated in the United States and information may be processed and stored there or in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to and processed in jurisdictions with different data-protection laws than your own.
12. Children's Privacy
The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
14. Contact
Questions about this Privacy Policy or your information? Contact us at support@crewshot.net.