Privacy Policy

Krew is a business software platform for customer relationship management, job operations, quotes, invoices, team management, payroll workflows, communications, analytics, marketing, and connected integrations.

When a business uses Krew to manage its own customers, employees, leads, jobs, invoices, messages, and marketing activity, that business controls the information it enters into Krew. Krew processes that information to provide the service to the business. If you are a customer, employee, lead, or contact of a business that uses Krew, please contact that business first for questions about its privacy practices.

We collect information directly from users, automatically through the service, and from connected third-party services.

• ✓Provide, operate, secure, and maintain the Krew platform.
• ✓Create and manage accounts, workspaces, roles, permissions, authentication, and subscriptions.
• ✓Support CRM, customer management, job scheduling, quotes, invoices, payroll workflows, analytics, marketing, and communications.
• ✓Send service messages, account notices, support responses, billing notices, and product updates.
• ✓Process payments, trials, subscription status, invoices, and billing support through payment providers.
• ✓Connect and operate integrations requested by users, including Google, Meta, Stripe, Square, Twilio, Resend, and related services.
• ✓Generate AI-assisted content, replies, summaries, and operational insights when users request those features.
• ✓Monitor, troubleshoot, test, improve, and develop the service.
• ✓Prevent fraud, abuse, unauthorized access, and violations of our Terms of Service.
• ✓Comply with legal obligations, enforce agreements, and protect the rights, safety, and property of Krew, customers, users, and others.

We use cookies, local storage, and similar technologies to keep users signed in, secure accounts, remember preferences, operate the application, and understand how the service is used. Some cookies are required for authentication and security. If you block cookies, parts of the service may not work.

We may collect product analytics and diagnostic information to understand feature usage, performance, and reliability. We do not use customer CRM data to sell advertising.

Krew supports SMS and other communications between businesses, their teams, and their customers. Message content, sender/recipient numbers, delivery status, timestamps, and related metadata may be processed by Krew and our communications providers to send, receive, troubleshoot, and log messages.

Businesses using Krew are responsible for obtaining any legally required consent before sending messages to customers or team members. Recipients may opt out of SMS where supported by replying with standard commands such as STOP, or by contacting the business that sent the message.

Subscription payments are processed by Stripe. Customer invoice payments may be processed through Stripe, Square, or another configured payment provider. Krew does not store full card numbers. Payment providers process payment details under their own terms and privacy notices.

We store billing-related identifiers and status information, such as customer IDs, subscription IDs, payment status, invoice metadata, and transaction references, so we can manage access, subscriptions, invoices, and support.

If you connect third-party services, Krew stores the tokens, identifiers, and data needed to provide the requested integration. You can disconnect integrations from the applicable settings area or by contacting support.

• ✓Google Calendar may be used to create, update, sync, or delete job-related calendar events.
• ✓Google Search Console or Google Business-related features may be used to display search, listing, review, or business profile information when connected.
• ✓Meta, Facebook, and Instagram integrations may store access tokens, connected account identifiers, post data, and review or publishing data needed for marketing workflows.
• ✓Stripe, Square, Twilio, and Resend may process payment, communications, or email delivery data needed for enabled features.

Krew uses Google user data only to provide and improve user-facing features that users authorize. We do not sell Google user data or use it for unrelated advertising. If we materially change how we use Google user data, we will update this policy and request any consent required by Google or applicable law.

Krew may offer AI-assisted features such as social post generation, review-reply drafting, marketing content, summaries, and analytics insights. When a user requests an AI feature, relevant prompts and context may be sent to AI service providers, such as OpenAI or Anthropic, to generate the requested output.

Users should avoid entering sensitive personal information, payment card details, government identifiers, health information, or other highly sensitive data into AI prompts unless the feature specifically requires it and the business has appropriate rights and consent.

We do not sell personal information. We may share information in the following limited ways:

• ✓With service providers and subprocessors that help us host, secure, operate, support, analyze, bill, message, email, and improve the service.
• ✓With third-party integrations that users choose to connect or use.
• ✓Within a customer workspace, according to roles, permissions, and account settings configured by the business.
• ✓With payment processors and financial service providers for billing and payment processing.
• ✓With professional advisers, auditors, insurers, or legal authorities when reasonably necessary.
• ✓In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.
• ✓When required to comply with law, legal process, enforce agreements, prevent abuse, or protect rights, safety, and security.

Krew relies on third-party providers to operate the service. Depending on the features enabled, these may include providers for hosting, database, authentication, payments, communications, email, analytics, integrations, and AI processing.

Current provider categories include Supabase, Vercel or hosting infrastructure providers, Stripe, Square, Twilio, Resend, Google APIs, Meta APIs, OpenAI, Anthropic, and operational tools used for security, monitoring, support, and product delivery.

We use administrative, technical, and organizational safeguards designed to protect information, including authentication, role-based access controls, service-role separation, secure provider infrastructure, and monitoring. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

Customers are responsible for maintaining strong passwords, controlling workspace access, reviewing team permissions, and promptly removing users who should no longer have access.

We retain information for as long as needed to provide the service, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, and protect the service. Workspace records are generally retained while the account is active unless deleted by the customer or subject to a valid deletion request.

If a workspace owner requests deletion, we will take reasonable steps to delete or de-identify applicable account and workspace data, subject to legal, security, backup, billing, fraud-prevention, and legitimate business record requirements. Backups and logs may persist for a limited period before deletion or rotation.

Depending on where you live and your relationship to a Krew customer, you may have rights to:

• ✓Request access to personal information.
• ✓Request correction of inaccurate information.
• ✓Request deletion of certain information.
• ✓Request a copy or export of certain information.
• ✓Object to or restrict certain processing where applicable.
• ✓Opt out of certain communications.
• ✓Appeal or complain to a regulator where applicable law provides that right.

Workspace users should contact their account owner or administrator first for workspace data requests. You may also contact Krew at support@joinkrew.co. We may need to verify your identity and authority before responding.

Some U.S. state privacy laws require disclosures about categories of personal information collected, sources, purposes, sharing, retention, and rights. The categories listed in Section 2 describe the types of information Krew may collect. We collect this information from users, customers, customer administrators, connected integrations, service providers, devices, and product usage.

Krew does not sell personal information for money. Krew does not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will update this policy and provide any required choices.

Krew is operated from the United States. If you access the service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where Krew and its service providers operate. Those countries may have privacy laws different from your location.

Krew is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Krew, contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify customers, such as by updating the effective date, posting a notice, or sending an account notification where appropriate. Continued use of Krew after an update means the updated policy applies to information processed after the effective date.

For privacy questions, requests, or complaints, contact Krew at support@joinkrew.co.

For Meta, Facebook, or Instagram data deletion requests, see our Data Deletion Instructions.