Privacy Policy

1. What we collect

CrewSignals collects information you provide when creating an account and using the service:

• Account data: name, email address, and a hashed password (we never store plain-text passwords).
• Team and workspace data: team names, your role, membership records, and invite codes you create.
• Handover content: shift labels, handover items, acknowledgments (who acknowledged and when), and issue resolution status.
• Contact form submissions: name, email, optional company, and message when you reach out via our contact page.
• Technical data: session identifiers, basic usage events (such as signups and handover activity), and IP addresses used for rate limiting and security.

Team members in the same workspace can see each other's names and email addresses. Handover authors' names are visible to other team members.

2. How we use it

We use your data to operate CrewSignals: authenticating you, displaying handovers to your team, managing memberships and invites, processing subscriptions, sending transactional email (such as team invites), and providing the features described on our website. We do not sell, rent, or share your data with third parties for their own marketing purposes.

3. Service providers

We use trusted providers to run the service. They process data on our behalf only as needed to deliver CrewSignals:

• Hosting and database — to run the application and store your data securely.
• Payment processor — subscription billing when you upgrade to a paid plan.
• Resend — delivery of contact-form messages and optional team-invite emails.
• Google Analytics 4 — page-view and traffic-source analytics to understand how visitors find the site.
• PostHog (EU data region) — product analytics and session recordings, used to understand how the app is used and improve it. Session recordings mask password fields.
• Google Fonts — delivery of the Sora typeface used in the interface.

4. Data retention

Handover and account data is retained while your account is active. On the Free plan, the app displays handover history from the last 7 days; older records may remain stored but are not shown in the app until you upgrade. On paid plans, full history is available while the subscription is active.

You may request deletion of your account and associated data at any time by contacting us. We will process deletion requests within a reasonable timeframe.

5. Cookies and analytics

We use a secure, httpOnly session cookie to keep you signed in — this is essential and cannot be disabled without also signing you out.

Google Analytics and PostHog run for all visitors to help us understand how the site and app are used. They may set cookies or similar identifiers to measure page views and product usage, and PostHog may record app sessions with password fields masked. We do not use advertising or cross-site tracking cookies. If you would like your activity excluded, contact us using the details below.

6. Security

Passwords are hashed using scrypt with per-user salts. Sessions are managed via secure, httpOnly cookies. All data is transmitted over TLS. While we follow industry standards, no system is 100% secure.

7. Your choices

You can log out at any time to end your session. To delete your account and associated personal data, email us at hello@crewsignals.com or contact us.

8. Contact

If you have questions about this policy, please contact us.