Data Privacy Policy

1. Who We Are

ICrewO Inc. is the data controller responsible for the personal information collected through the Service. The Service is a cloud-based field service management platform designed for contractors, field service businesses, and trade professionals operating in the HVAC, plumbing, electrical, landscaping, and related industries.

Contact for privacy matters: privacy@iCrewO.com | Website: www.iCrewO.com

2. Information We Collect

2.1 Information You Provide to Us

When you register, use, or interact with ICrewO, we collect the following categories of information:

2.2 Information We Collect Automatically

• Usage data: pages visited, features used, buttons clicked, session duration, navigation paths
• Device information: browser type, operating system, device identifiers, screen resolution
• Log data: IP address, access times, referring URLs, error reports, performance data
• Cookies and similar tracking technologies (see Section 7 for details)
• Location data: approximate location derived from IP address; precise GPS location only if you grant explicit permission in the mobile app

2.3 Information from Third Parties

• Payment processors (PayPal): transaction status, payment confirmation codes
• SMS providers (Twilio): delivery confirmation data
• Email providers (Resend): email delivery and open tracking data
• AI service providers (OpenAI): anonymised prompts and usage for AI Lead Analysis add-on

3. How We Use Your Information

We use the personal information we collect for the following purposes:

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies to perform services on our behalf. These providers are contractually obligated to protect your data and may only use it for the purposes we specify:

4.2 Your Customers' Data

When you use ICrewO to manage your business, you input data about your own customers (homeowners, business owners). You are the data controller for your customers' personal information. ICrewO processes this data on your behalf as a data processor. You are responsible for:

• Obtaining any necessary consents from your customers for the data you input into ICrewO
• Ensuring you have a lawful basis for processing your customers' data
• Maintaining your own privacy policy covering your customers' data
• Complying with applicable data protection laws in your jurisdiction

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority; to enforce our Terms of Service; to protect the rights, property, or safety of ICrewO, our users, or the public; or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change).

4.4 With Your Consent

We may share your information for purposes not described in this Policy when you provide explicit consent.

5. Data Retention

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at: privacy@iCrewO.com. We will respond within 30 days.

7. Cookies and Tracking Technologies

ICrewO uses cookies and similar technologies for the following purposes:

You can manage cookie preferences through your browser settings or through the cookie consent banner displayed on our website. Disabling strictly necessary cookies may prevent the Service from functioning correctly.

8. Data Security

• AES-256 encryption for data at rest stored on AWS infrastructure
• TLS 1.3 encryption for all data in transit between your device and our servers
• Multi-factor authentication (MFA) for platform access via one-time passcode (OTP)
• Role-based access controls limiting data access to authorised personnel only
• Regular security audits and penetration testing
• GCP security best practices including VPC isolation, security groups, and CloudTrail logging
• Automated backup systems with point-in-time recovery capabilities
• Incident response procedures with notification obligations

Despite our security measures, no transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the security of your account credentials and for any activities conducted through your account.

9. International Data Transfers

ICrewO's infrastructure is hosted on Google Cloud Platform (GCP). Your data may be processed and stored in data centres located in the United States and other countries. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data transfer restrictions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required.

10. Children's Privacy

The ICrewO Service is intended for business use by adults aged 18 and over. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that a child under 18 has provided personal information, we will take immediate steps to delete such information.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale or sharing of personal information, and the right to non-discrimination. To exercise these rights, contact us at privacy@iCrewO.com. ICrewO does not sell personal information as defined under California law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a prominent notice within the platform at least 30 days before the changes take effect. Your continued use of the Service after the effective date of the updated Policy constitutes acceptance of the changes.

13. Contact Us