Privacy Policy

Account details: your name, email address, password (stored as a secure hash) and sign-in records.

Workspace content: the business details, knowledge base, files, leads and instructions you add, and the content your AI teammates create.

Chats: the messages you exchange with your AI teammates and the actions they take.

Connected accounts: access tokens and basic account details for platforms you choose to connect, and the data we fetch from them to do the work you ask for.

Usage data: how you use the service, such as pages visited, features used, credits spent, device and browser type, IP address and error logs.

Billing data: your plan, invoices and payment history. Card details are collected and stored by our payment processor, not by us.

Cookies: small files that keep you signed in and remember your choices. Our Cookie Policy lists them and explains how to change your choice.

To provide the service: run your workspaces, generate replies and content, carry out actions you approve and keep your account secure.

To bill you and handle refunds.

To send you service emails, such as sign-in links, receipts and important changes. Marketing emails are optional and you can unsubscribe at any time.

To support you when you contact us, and to fix problems and improve the product.

To prevent abuse and meet our legal obligations.

Under the EU and UK GDPR, our legal bases are: performing our contract with you, our legitimate interests in running and improving a secure service, your consent (for optional cookies and marketing), and our legal obligations.

If a business that uses Crewmint has added your details to its workspace, for example as a sales prospect, that business decides how your data is used and is responsible for it. We process it on their behalf. Please contact that business to use your rights. If you cannot reach them, email help@crewmint.ai and we will pass your request on and help them respond.

To generate replies and content, we send the relevant parts of your chats, workspace content and knowledge base to Anthropic, our AI model provider. Anthropic processes this data on our behalf to return a response. It is not used to train AI models.

Your data is stored in a PostgreSQL database on our own server in Frankfurt, Germany, hosted by Hostinger. Some of our subprocessors process data in other countries, as explained under International transfers.

We do not sell your personal data. We share it only with service providers (subprocessors) that help us run the service, under contracts that require them to protect it. These include Anthropic for AI processing, Hostinger for hosting, Resend for email delivery and Stripe for payments. If you use AI images or voice, OpenAI processes those requests. If you connect Google services, Google processes the data you connect. If you connect other apps through our integration partner Composio, Composio processes the data needed for that connection.

The full list, with what each company does and where, is on our Subprocessors page. We update that page and email workspace owners 14 days before we add a new subprocessor.

We may also disclose data if the law requires it, to protect our rights or users, or as part of a sale or merger of our business, in which case this policy will continue to apply.

Access tokens for connected accounts are encrypted at rest and used only to perform the work you ask for. You can disconnect any integration at any time, and we then delete its tokens.

We keep your data for as long as your account is active. When you delete your account, we delete your account and the workspaces only you own within 30 days, apart from limited records we must keep for tax, accounting or legal reasons, and backups, which are overwritten on a rolling basis within 90 days.

If the EU or UK GDPR applies to you, you have the right to: access your personal data and get a copy; correct data that is wrong; have your data deleted; restrict how we use it; receive your data in a portable format; object to processing based on our legitimate interests, and to direct marketing at any time; and withdraw consent at any time, without affecting processing before you withdrew it.

Most of this you can do yourself in the app: go to Your account and use Export my data to download a copy, or Delete account to remove your account and data. You can update your details there too.

To use any of these rights, or if you live elsewhere and have similar rights under local law, email help@crewmint.ai. We will reply within 30 days.

You also have the right to complain to a data protection authority, such as the authority in the EU country where you live or work, or the Information Commissioner's Office (ICO) in the UK. We would appreciate the chance to help first, so please contact us.

We store your data in Frankfurt, Germany. ScaleCraft LLC is based in the United States, and some of our subprocessors process data in the United States. When personal data from the EU or UK is transferred to a country without an adequacy decision, we protect it with the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, or another lawful transfer mechanism. Email help@crewmint.ai for a copy of the relevant safeguards.

Crewmint is for business use by adults. It is not intended for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

We protect your data with encryption in transit and at rest for sensitive fields, access controls, and regular updates to our systems. No service can be perfectly secure, but if we learn of a breach that affects your data we will tell you without undue delay.

If we make significant changes to this policy we will tell you by email or in the app before they take effect.

Questions or requests about your data? Email help@crewmint.ai or write to ScaleCraft LLC, 312 W 2nd St Unit #A9117, Casper, WY 82601, USA.