Privacy Policy
Effective date: [EFFECTIVE DATE] · Last updated: [DATE]
1. Who This Policy Covers
This Privacy Policy explains how [CREWSPLIT LEGAL ENTITY NAME] ("Crewsplit," "we," "us") collects, uses, and protects information when you visit crewsplit.com or use the Crewsplit application (together, the "Service").
Crewsplit is used by trade contractor companies ("Customer") to calculate and manage pay for their crews. Most personal information in the Service — names, pay rates, hours, tier assignments — is entered by Customer about its own employees or contractors ("Workers"). For that data, Customer is the data controller and Crewsplit acts as a data processor on Customer's behalf. Workers who have questions about their own pay data should contact their employer directly; Crewsplit does not have a direct relationship with Workers.
2. Data We Collect
| Category | Examples |
|---|---|
| Account & company data | Company name, address, state, contact name, email, login credentials |
| Worker data entered by Customer | Employee/installer names, tier assignments, pay rates, hours worked, job assignments, pay history |
| Job & payroll configuration data | Job revenue, square footage, comp percentages, crew splits, pay period records |
| Usage data | Log data, device/browser information, pages visited within the app |
| Billing data | Billing contact and payment information, processed via [PAYMENT PROCESSOR NAME] |
[Confirm: does Crewsplit collect or store Social Security Numbers, bank account numbers, or other highly sensitive identifiers? If so, this section and the security section below need to reflect that explicitly, and additional safeguards/compliance obligations likely apply.]
3. How We Use Data
- To provide, maintain, and improve the Service, including running payroll calculations Customer configures
- To authenticate accounts and enforce access controls between companies
- To communicate with Customer about the account, billing, or service updates
- To provide customer support
- To detect, prevent, and address fraud, security, or technical issues
We do not sell Customer Data or Worker data to third parties.
4. Data Security
Crewsplit is built on a database architecture that uses Row-Level Security (RLS), so that each company's data is isolated and can only be accessed by authenticated users associated with that company. We use industry-standard practices to protect data in transit and at rest. No system is completely secure, and Crewsplit cannot guarantee absolute security.
5. How We Share Data
We share data only as needed to operate the Service:
- Service providers / subprocessors — including our hosting provider ([Vercel]), database provider ([Supabase]), and payment processor, each bound by their own data protection obligations
- Legal requirements — if required by law, subpoena, or to protect Crewsplit's or others' rights and safety
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to Customer
6. Data Retention
We retain Customer Data and Worker data for as long as the account is active, and for a reasonable period after termination to allow data export, unless a longer retention period is required by law or Customer requests earlier deletion. [Specify exact retention window, e.g., 90 days post-cancellation, once decided.]
7. Your Rights & Choices
Depending on where you or your Workers are located, you may have rights to access, correct, export, or delete personal data, and to opt out of certain data uses (for example, under California's CCPA/CPRA or similar laws in other states). Requests can be directed to support@crewsplit.com. Because Customer controls Worker data entered into the Service, Worker-specific requests are typically routed through the employer (Customer).
[Counsel should confirm which state privacy laws apply based on Customer/Worker locations and add any required specific disclosures — e.g., a "Do Not Sell or Share My Personal Information" mechanism if applicable.]
8. Cookies & Analytics
[List actual cookies/analytics tools in use, e.g., Google Analytics, and whether a cookie consent banner is needed for your visitor base.]
9. Children's Privacy
The Service is intended for business use by adults and is not directed to children under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice before taking effect.
11. Contact
Questions about this Privacy Policy can be sent to support@crewsplit.com.