Draft. This policy is currently a draft and will be finalised before public launch. If you're a design partner, you've agreed to use the product under the terms of the design partner agreement.

Privacy Policy

Who we are

CrewKeep is a software tool for Australian construction subcontractors, operated by CrewKeep (ABN 34 580 154 022). Mailing address: Sydney, NSW, Australia.

What we collect

Account information: email, name, role within your organisation
Organisation information: business name, ABN, state, primary trade, staff count band
Phone number if you opt into SMS critical alerts
Financial data sourced from your accounting integrations (Xero, MYOB, Tradify, simPRO) with your explicit OAuth authorisation
Licence wallet data you upload
Usage data (pages visited, features used, AI assistant questions)
Audit log of sensitive operations (claims served, health checks generated, data exported)
IP address and user-agent for security and audit

We don't collect bank account or credit card numbers (Stripe handles all payment data). We don't collect government identifiers unless you upload them as part of licence wallet content. We don't collect sensitive information as defined under the Privacy Act 1988.

How we use it

To provide the product features, compute the financial indicators, send notifications you've opted into, bill you for paid tiers (via Stripe), detect and respond to abuse or technical issues, and comply with our legal obligations. We don't sell your data, share it for marketing, or use it to train AI models.

Where it lives

Primary database and file storage: Supabase (Sydney region, Australia). Application hosting: Vercel (United States). Email delivery: Resend (United States). SMS delivery: Twilio (United States). AI processing: Anthropic (United States). Payment processing: Stripe (Australia / United States). Optional error monitoring (Sentry) and analytics (PostHog) are US-based.

By using the product you consent to your information being transferred to and processed in these countries.

How long we keep it

Active account data: kept while your account is active
Audit log: retained as evidentiary record (organisation reference preserved across hard-delete)
Soft-deleted accounts: hard-deleted after 30 days
Financial transaction records: 7 years per AU tax law

Your rights

Under the Privacy Act 1988 you can request a copy of your personal information (Settings > Account > Export data), request correction, request deletion (Settings > Account > Delete account; 30-day reversal), or lodge a complaint with the OAIC at oaic.gov.au if unresolved.

Data breach notification

We follow the Notifiable Data Breach scheme. If a serious breach occurs, we'll notify affected individuals and the OAIC as soon as practicable.

AFSL non-position

We don't hold an Australian Financial Services Licence. The product is software that displays your data and computes indicators. It's not a financial product, and outputs are not financial product advice. For decisions, consult your registered tax agent, accountant, or a registered insolvency practitioner.

Contact

privacy@crewkeep.com.au. Mailing address: Sydney, NSW, Australia.

Last updated: draft.