Privacy policy

Who we are

Crewmate, Inc. (“Crewmate”, “we”) makes AI crewmates that work inside the tools your team already uses. This policy explains what personal data we handle when you visit this website, start a trial or use the product.

For data inside your workspace, your company is the controller and we act as its processor under our data processing agreement.

What we collect

Information you give us: your name, work email, company, team size and anything you write in a form or an email.

Information we collect automatically: pages visited, approximate location from your IP address, browser and device type, and the date and time of your visit.

Account information: the users, roles and settings of your workspace, and billing details handled by our payment provider.

Data inside your workspace

Crewmates read and change records in the tools you connect, only within the permissions you grant. That content stays in your workspace.

We never use your workspace content to train models, ours or anyone else’s. This is written into our customer agreement.

Why we use it

To run the product and the trial you asked for (performance of a contract).

To reply to your requests and send the emails you signed up for (legitimate interest or consent).

To keep the service secure, prevent abuse and meet legal obligations (legitimate interest and legal obligation).

To understand how the website is used, in aggregate (consent, where required).

How long we keep it

Website and contact data: up to 24 months after our last exchange.

Workspace data: for as long as your workspace exists, then deleted within 30 days of closing it. Audit log retention follows the setting you choose, from 30 days to unlimited.

Billing records: as long as tax law requires, usually 10 years.

Who we share it with

Service providers that help us run Crewmate, such as hosting, email delivery, payment and analytics, each bound by a written agreement.

The tools you connect, only to perform the tasks you approve.

Authorities, when the law requires it. We never sell personal data.

Your rights

You can ask to access, correct, delete or export your personal data, object to or restrict some uses, and withdraw consent at any time.

You can also complain to your local data protection authority. We’d like the chance to fix things first, through the contact page.

Security and transfers

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production is limited, logged and reviewed.

Where data leaves the European Economic Area, we rely on standard contractual clauses or an adequacy decision.

Changes and contact

We’ll update this page when our practices change and note the date at the top. Significant changes are announced by email to workspace owners.

Questions about this policy: write to us through the contact page.