Privacy
What we hold
The spreadsheet you send us, the entries your team logs, and the names, emails and phone numbers you give us so people can sign in and get notified. That's it. No tracking pixels, no ad networks, no analytics vendors watching your team work.
Isolation
Every company's data is separated at the database level by row-level security, not by application code remembering to filter. A query made on behalf of your team cannot return another company's rows even if we wrote a bug.
Who can see it
The people you invite, and the one operator who builds and maintains your app. Nobody else. We do not sell, share, or train anything on your data.
Getting it back
Any owner can export a full CSV from Settings, any time, without asking us. If you cancel, you get a complete export within a day, and we delete your data within 30 days of the request.
Deleted entries
Deleting an entry in the app hides it immediately and keeps it recoverable by the owner for 30 days, then it's gone. This is on purpose: crews delete things by accident on small screens.
Sub-processors
Supabase hosts the database, authentication and file storage. Vercel serves the site. If email delivery is enabled, a mail provider handles the five transactional emails. Payment details, when payments are enabled, are handled entirely by Stripe - they never touch our servers.
Reaching a person
Email build@crewlog.app. The same person who built your app reads it.