Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, and password credentials, plus company details such as company name, phone, address, logo, and branding.
• Customer and project data you enter — information you add about your own customers (such as name, email, phone, and address) and about your projects, estimates, payment requests, and notes.
• Photos and their metadata — images you upload or import, along with associated metadata such as GPS coordinates, timestamps, captions, tags, and annotations.
• Payment information — handled by our payment processor, Stripe. We do not store full card numbers; we receive limited billing and subscription details from Stripe.
• Usage and technical data — basic log and device information generated when you access the Service, used to operate, secure, and improve it.

We use information to:

• provide, maintain, and improve the Service;
• create and manage your account and authenticate logins;
• store and display your photos, projects, reports, estimates, and client portals;
• process subscriptions and payments;
• send transactional and service-related communications;
• provide support and respond to your requests; and
• protect the security and integrity of the Service and comply with legal obligations.

We may also create aggregated or de-identified data that does not identify you or any individual and use it to analyze and improve the Service. We may use content you store in the Service to develop, train, and improve our features — including machine-learning and artificial-intelligence models used to provide and enhance the Service (for example, to help tag, organize, or analyze photos). Any such models are used to operate and improve the Service and are not sold or licensed to third parties as standalone models. We do not sell your personal information, and we do not use the content of your customer or project data for advertising.

Photos you upload may include embedded metadata such as GPS location and timestamps, and the Service is designed to capture and display this information. When you share a project via a portal, report, or estimate link, the photos and associated metadata you have chosen to share become viewable by anyone with that link. You control which content is shared and when sharing is enabled.

We use cookies and similar technologies that are necessary to operate the Service — primarily to keep you signed in and maintain your session, and to support security. Certain features may also load third-party provider services (for example, Google Maps for address lookup) that can set their own cookies. We do not serve third-party advertising and do not use advertising or cross-site tracking cookies. Because the cookies we use are essential to providing the Service, disabling them may prevent the Service from working.

We do not sell your personal information. We share information only as follows:

• Service providers (subprocessors) — who process information on our behalf to operate the Service, as listed in Section 6.
• People you share with — recipients of portal, report, or estimate links you generate can view the content you choose to share.
• Legal and safety — when required by law, to enforce our Terms, or to protect the rights, property, or safety of CrewShot, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We use the following third-party providers to operate the Service. Each processes information only as needed to provide its function.

• Supabase — authentication and data/photo storage.
• Amazon Web Services — application hosting and infrastructure.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Google Maps Platform — address autocomplete and geocoding (the addresses you type are sent to Google to return suggestions and coordinates).

We may update this list as our providers change. For the current list, contact us at support@crewshot.net.

We retain your information for as long as your account is active or as needed to provide the Service. We do not delete or hide your photos and projects solely because a free trial ends. You may request deletion of your account and associated content as described below.

When you make a valid deletion request, we remove your personal information — such as your customers, projects, photos, and contact details — within thirty (30) days. We retain financial and transaction records (for example, billing and payment history) for approximately seven (7) years as required by tax and accounting law, and routine backups expire on our normal backup cycle. We may also retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update much of your information directly in your account settings. To make a request, contact us at support@crewshot.net. We will respond consistent with applicable law and will not discriminate against you for exercising these rights.

If you are an end customer of a CrewShot user (for example, a homeowner whose information a contractor added), the contractor controls that data. Please direct access or deletion requests to that contractor; we will assist them as needed.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you the following rights regarding personal information we hold as a business:

• the right to know what personal information we collect, use, and disclose;
• the right to access and to delete your personal information;
• the right to correct inaccurate personal information;
• the right to opt out of the "sale" or "sharing" of personal information; and
• the right to limit the use of sensitive personal information.

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes that require a right to limit. To exercise your rights, contact us at support@crewshot.net. You may use an authorized agent, and we will not discriminate against you for exercising your rights.

The Service is intended for US-based businesses only and is not offered to users outside the United States. The Service is operated in the United States and information may be processed and stored there or in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to and processed in jurisdictions with different data-protection laws than your own.

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

Questions about this Privacy Policy or your information? Contact us at support@crewshot.net.