Privacy Policy

1. Introduction

Crew App ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

By using Crew App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, company name, and job title
• Profile Information: User profiles, certifications, training records, and credentials
• Content You Upload: Company policies, safety documents, inspection records, training certificates, and other files
• Communications: Messages, support requests, and feedback you send to us
• Payment Information: Billing details (processed securely by our payment processor)

2.2 Information Collected Automatically

When you use Crew App, we automatically collect:

• Usage Data: Features accessed, pages viewed, time spent, and actions taken
• Device Information: Browser type, operating system, device identifiers, and IP address
• Log Data: Access times, error logs, and system activity

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve Crew App services
• Process your transactions and manage your account
• Send you technical notices, updates, security alerts, and support messages
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues or security vulnerabilities
• Comply with legal obligations and enforce our Terms of Use
• Send you marketing communications (with your consent where required)

4. Third-Party Service Providers

We use trusted third-party service providers to help us operate Crew App. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information.

4.1 Infrastructure & Hosting

• Cloudflare (USA): Web hosting, content delivery, and security services. Data may be processed in Cloudflare's global network.
  Cloudflare Privacy Policy
• Supabase (USA): Database management and storage. User data, documents, and application data are stored on Supabase servers.
  Supabase Privacy Policy

4.2 AI-Powered Features

• OpenAI (USA): Powers Norman AI, our safety assistant. When you use Norman AI, your queries are sent to OpenAI's API for processing. OpenAI does not use data submitted via their API to train their models.
  OpenAI Privacy Policy

4.3 Development & Communication

• GitHub (USA): Version control and code deployment. No sensitive customer data is stored in our repositories.
  GitHub Privacy Policy
• Microsoft (USA): Email services for business communications.
  Microsoft Privacy Policy

5. Data Storage and International Transfers

While Crew App is based in Nova Scotia, Canada, some of our service providers are located in the United States. When we transfer your personal information outside of Canada, we ensure appropriate safeguards are in place as required by PIPEDA.

Please note that data stored or processed in the United States may be subject to U.S. laws, including government access under the USA PATRIOT Act and other legislation.

6. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account or request deletion of your data, we will delete or anonymize your information within a reasonable timeframe, unless we are required to retain it for legal or regulatory purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest in our databases
• Regular security assessments and monitoring
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Under Canadian privacy law, you have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a copy of your data in a structured, commonly used format
• Withdrawal of Consent: Withdraw consent for marketing communications or certain data processing activities
• Objection: Object to processing of your personal information in certain circumstances

To exercise any of these rights, please contact us at privacy@crewapp.ca. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide security features

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of Crew App.

10. Children's Privacy

Crew App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Marketing Communications

With your consent, we may send you marketing emails about new features, updates, and promotional offers. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at maggie@crewapp.ca or nick@crewapp.ca
• Updating your preferences in your account settings

Note that you will continue to receive transactional and account-related emails even if you opt out of marketing communications.

12. Business Transfers

If Crew App is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our platform of any change in ownership or use of your personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

15. Privacy Commissioner

If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada: