Privacy Policy

Last updated: 1/11/2026

Introduction

Welcome to Crewcade. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our platform and tell you about your privacy rights and how the law protects you.

Understanding Your Crewcade Account

Important: When you create an account on any Crewcade-powered community (such as signing up through a specific workspace), you are creating a Crewcade account that works across our entire platform.

What This Means:

  • One Account, Multiple Communities: Your account credentials (email and password) can be used to access any Crewcade community, not just the one where you first signed up.
  • Separate Memberships: While your account is universal, your membership and data within each community workspace are completely separate and isolated from other workspaces.
  • Account Portability: You can join additional Crewcade communities using the same login credentials without creating a new account.

Data Isolation:

  • Each workspace administrator can only see your data within their specific workspace.
  • Your activities, memberships, and content in one workspace are not visible to other workspaces.
  • Workspace owners cannot see which other Crewcade communities you belong to.

Account Information:

Your core account information includes:

  • Authentication data: Email address, password (encrypted), OAuth connections
  • Profile basics: Name, profile picture (if provided)
  • Platform data: Account creation date, email verification status

This information is stored centrally by Crewcade to enable your account to work across all communities.

Data We Collect

1. Account & Authentication Data

We collect authentication data based on how you choose to create your account:

  • Email & Password: Email address (required) and password (stored encrypted using industry-standard bcrypt hashing)
  • Google OAuth: Email address, name, profile picture, and Google account identifier. We use Google's secure OAuth 2.0 protocol - we never see or store your Google password.
  • LINE OAuth: LINE user ID, display name, profile picture, and email (if provided). We use LINE's secure OAuth protocol - we never see or store your LINE password.
  • Email verification tokens and status (for email/password accounts)

2. Profile Information

  • Name (as provided during signup or profile updates)
  • Profile picture (optional)
  • Bio and other profile fields (workspace-specific)

3. Workspace Membership Data

  • Workspace memberships and roles within each community
  • Membership plan selections (free, paid tiers)
  • Payment information (processed securely through Stripe - we do not store card numbers)

4. Usage & Activity Data

  • Content you create within workspaces (posts, comments, uploads)
  • Interaction data (likes, follows, event RSVPs)
  • Login history and session data

5. Technical Data

  • IP address and browser information
  • Device type and operating system
  • Cookies and similar tracking technologies

How We Use Your Data

We use your personal data for the following purposes:

  • Account Management: To create and maintain your Crewcade account, verify your email, and enable authentication across communities.
  • Service Delivery: To provide access to workspace features, memberships, and community interactions.
  • Communication: To send transactional emails (verification, password resets, membership updates) and, with your consent, marketing communications.
  • Payment Processing: To process membership payments and manage subscriptions through our payment processor (Stripe).
  • Platform Improvement: To analyze usage patterns, improve our services, and develop new features.
  • Security & Fraud Prevention: To protect against unauthorized access, abuse, and fraudulent activity.
  • Legal Compliance: To comply with legal obligations and enforce our Terms of Service.

Data Sharing & Disclosure

We share your data only in the following circumstances:

Workspace Administrators

Workspace owners and administrators can access your data within their specific workspace only, including:

  • Your profile information (name, email, profile picture)
  • Your membership status and plan within their workspace
  • Content and activity you create within their workspace
  • Payment history for memberships in their workspace

Note: Workspace administrators cannot see your activities in other workspaces or your global account data.

Service Providers

We share data with trusted third-party service providers who help us operate our platform:

  • Stripe: Payment processing (PCI DSS compliant)
  • Postmark: Transactional email delivery
  • Google & LINE: OAuth authentication (if you choose to use these login methods)
  • Cloud Hosting: Infrastructure and database hosting

All service providers are bound by data protection agreements and can only process your data according to our instructions.

Legal Requirements

We may disclose your data if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to this privacy policy.

Data Retention

We retain your personal data as follows:

  • Account Data: Retained as long as your account is active. After account deletion, core account data is permanently removed within 30 days.
  • Workspace Data: Content and activity within a workspace may be retained according to that workspace's policies, even after you leave the workspace.
  • Transaction Records: Payment and subscription data is retained for 7 years for tax and accounting purposes.
  • Legal Holds: Data subject to legal holds or investigations is retained until the hold is lifted.

Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of all personal data we hold about you.
  • Correction: Update or correct inaccurate personal data.
  • Deletion: Request deletion of your account and associated data (subject to legal retention requirements).
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing of your data for certain purposes (e.g., marketing).
  • Restriction: Request restriction of processing in certain circumstances.
  • Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, please contact us at privacy@crewcade.com

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest. Passwords are hashed using bcrypt.
  • Access Controls: Strict access controls limit who can access your data internally.
  • Regular Audits: We conduct regular security audits and vulnerability assessments.
  • Secure Infrastructure: Our infrastructure is hosted with reputable cloud providers with strong security certifications.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Cookies & Tracking

We use cookies and similar technologies for:

  • Authentication: Keeping you logged in across sessions.
  • Preferences: Remembering your settings and preferences.
  • Analytics: Understanding how users interact with our platform to improve services.
  • Security: Detecting and preventing fraudulent activity.

You can control cookies through your browser settings, but disabling certain cookies may affect platform functionality.

Children's Privacy

Crewcade is not intended for users under the age of 13 (or applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at privacy@crewcade.com.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use of Crewcade after changes indicates acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

Email: privacy@crewcade.com

Support: support@crewcade.com