Draft pending counsel review
Privacy Policy
Version 2026-11-02-draft · Effective November 2, 2026
Crewtro is an app for home-service pros (handymen and small crews) run by [to be added before launch] ("we", "us"). This policy covers two groups of people: pros and their team members who use the app ("pros"), and homeowners who ask for a quote, open a quote link or pay an invoice ("homeowners"). It explains what we collect, why, who helps us, how long we keep it and how you can use your rights.
1. The short version
- A homeowner request goes to one pro only. We do not sell it to several pros.
- Personal details (names, phone numbers, e-mails, addresses) are sealed (encrypted) with a separate key for each business.
- Homeowner photos sent for a price range are read once and never stored.
- We do not sell personal data and we do not use your data to train AI models.
- You can see, correct, export or delete your data. Section 9 says how.
2. What we collect from pros
- Account: name, e-mail, role in the business, and sign-in and session records (sign-in runs through our sign-in provider; we never see your password).
- Business: business name, hours, service area (ZIP codes), prices, fees, quotes, jobs, invoices and payments recorded in the app.
- Your customers: the names, phone numbers, e-mails, addresses and notes you keep in the app. For these records you decide what is kept; we keep them for you (see section 8).
- Connections you turn on: your Google Calendar (free/busy times and job events, which name only the job type) and your Google Business Profile (reviews and your replies).
- E-mail in, when you turn it on: e-mails you forward to Crewtro, read by our e-mail service to pull out a name, phone, address and the job. The personal details of each forwarded e-mail are wiped 90 days after it arrived.
- Your phone: a push token so we can send notifications to the app on your phone.
- Security: the address and browser of each sign-in and of each change, kept in a log of ids and field names (never the values).
3. What we collect from homeowners
- When you ask for a quote: the job type, your description, ZIP code, preferred times, first name, mobile number and your consent to receive texts about the request.
- Photos you send for a price range are read once to suggest the job type and are never stored; we keep only a fingerprint so the same photo is not processed twice.
- When you accept a quote: the name you type, the time, the version of the quote and the address and browser you used, as evidence of the agreement with the pro.
- When you sign added work (a change order) on the pro's phone or by link: the name you type, the signature you draw (kept as an image), the time, the version and price of the change, and, by link, the address and browser you used, as evidence of the agreement with the pro.
- When paying an invoice (when turned on): payment details are entered with our payment processor, not with us. We receive only whether the payment worked.
- Your address and browser, to protect the request page against abuse.
4. How we use it
- To run the app for pros: answer requests, build quotes, book jobs on the calendar, send invoices and reminders, and show reviews.
- To pass a homeowner request to one pro whose service area and job types match it.
- To send texts and place calls through our communications service, which checks consent, quiet hours and opt-outs (reply STOP to stop texts, HELP for help).
- To send notifications to pros' phones about new requests and jobs. They name the job type and area, never the homeowner's details.
- To keep the service safe: rate limits, blocking automated abuse, and security logs.
- To meet legal duties, such as tax records and answering privacy requests.
We do not make automated decisions about you that have legal or similarly significant effects.
5. AI in Crewtro
- Photos and descriptions from a homeowner are read by AI to suggest the job type. The price range comes from the pro's own prices and our price catalog, not from the AI, and the pro confirms the price. We label it "Estimate made with AI, confirmed by the pro."
- Where the app drafts text for a pro (for example a reply to a review or a summary of a forwarded e-mail), the pro reviews it before anything is sent or posted.
- AI processing runs through our platform service (see the Subprocessors page). We do not use your data to train AI models.
6. Who helps us (subprocessors) and when we share
- Service providers that run parts of Crewtro for us, listed with what they do and where on our Subprocessors page (/legal/subprocessors). They may use the data only to provide their service to us.
- The one pro your request goes to, and the pro whose quote or invoice you open.
- When the law requires it, or to protect someone's safety or stop fraud or abuse.
- If the business that runs Crewtro is sold or merged, under this policy's protections.
We do not sell personal data and we do not share it for cross-context behavioral advertising. We do not sell, rent or share phone numbers or text consent with anyone for their own marketing.
7. How we protect it
- Names, phone numbers, e-mails and addresses are sealed (encrypted) with a separate key for each business. Those keys are themselves wrapped by a key-management service.
- Each business can reach only its own data; the database enforces this, not only the app.
- Lookups by phone or e-mail use keyed references, so raw values are never searched.
- Our logs record ids and field names, never the personal values.
No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.
8. How long we keep it
Pros' customer records belong to the pro's business: they stay while the account is open and end as shown below.
These periods are drafts pending counsel review.
| Data | Kept | How it ends |
|---|---|---|
| Customer records (name, phone, e-mail, addresses, notes) | While the pro's account is open | Erased when the pro deletes the customer, or with the account (after the 7-day grace period) |
| Quotes, jobs, schedule | While the account is open | With the account: personal details removed and quote, payment, tracking and review links stopped; jobs of customers kept for invoices stay with that record |
| Invoices and payment records | 7 years after the invoice date (tax records) | Kept after account deletion with the customer's name, phone and service address only; e-mail, notes and other addresses are removed |
| Quote links | Expire after 14 days | The link key is wiped 30 days after it expires |
| Homeowner photos for a price range | Never stored (read once; only a fingerprint is kept) | — |
| Live location while "on my way" (being built) | Deleted on arrival, each point after 30 minutes, at most 2 hours | Automatic |
| Forwarded e-mails (e-mail in) | Personal details wiped 90 days after receipt | Automatic, daily |
| Push notification log | 30 days; phone push tokens dropped after 30 days unused | Automatic, daily |
| Data export files | 24 hours after they are ready | Automatic, hourly |
| Terms acceptance records | Account life + 7 years | Kept as evidence |
| Change order signatures | As the invoice (7 years) | Kept as evidence |
| Text consent records (SMS) | 5 years after the consent ends | Kept as evidence |
| Privacy (data) requests | 24 months after they are closed | Automatic, daily |
| Verification codes | 15 minutes | They expire |
| Audit log (ids and field names only) | 24 months | Automatic, daily |
| Signed webhook replay records | 30 days | Maintenance job |
| Backups | Set at production launch (not set up yet) | — |
9. Your rights and how to use them
Depending on where you live, you can ask to: see the data we hold about you (access), get a copy, correct it, delete it, and opt out of marketing. You can also appeal our answer. We will not treat you differently for using these rights.
- Pros: Settings → Your data. The owner or an admin can export the business's data (a ZIP file, kept for 24 hours after it is ready). The owner can delete the account: deletion starts after a 7-day grace period you can cancel. Invoices and payment records stay 7 years for tax law.
- Homeowners: use the form below. We text a code to your phone to confirm the request is yours, then tell you the date we will answer by. If the data is held by a pro as their customer record, we pass the request to that pro and make sure it is answered.
- By e-mail: write to [to be added before launch] from any address. We may ask you to confirm your phone number first.
- Texts: reply STOP to any text to stop texts from that number.
- Appeal: if you disagree with our answer, reply to it or write to [to be added before launch] with "Appeal" in the subject. If you are still not satisfied, you can contact your state attorney general.
An authorized agent can make a request for you with your signed permission.
Ask about your data
For homeowners. We text a code to your phone to confirm the request is yours, then tell you the date we will answer by.
Privacy e-mail: [to be added before launch]
10. Children
Crewtro is not for anyone under 18. We do not knowingly collect data from children. If you believe a child sent us data, write to [to be added before launch] and we will delete it.
11. Cookies
We use only the cookies the app needs (language, appearance and, for pros, sign-in). No advertising or analytics cookies. See the Cookie Notice (/legal/cookies).
12. Where the data is
Crewtro is hosted in [to be added before launch]. Our providers are listed on the Subprocessors page with their locations.
13. Changes to this policy
Each version has a version name and an effective date at the top of this page, and earlier versions stay available. If we make a material change, pros are asked to read it again in the app, and we update this page before the change applies.
14. Contact
Privacy questions and requests: [to be added before launch]. Other questions: [to be added before launch]. Post: [to be added before launch], [to be added before launch].