Privacy Policy
Last updated: June 17, 2026 · Effective: June 17, 2026
CrewSplit (“we,” “our,” or “us”) operates crewsplit.io. This policy explains what information we collect, how we use it, and what rights you have. If anything here is unclear, email us at privacy@getcrewsplit.com and we'll explain it in plain terms.
1. Information We Collect
1.1 Account Information
When you create a CrewSplit account, we collect:
- Your name and email address
- Your company name and billing address
- Payment method details — handled securely by Stripe. We never store credit card numbers on our infrastructure.
1.2 Connected Platform Data
When you connect an FSM or payroll platform via OAuth, we access and store the data needed to calculate and distribute tip allocations:
- Invoice and payment records (amounts, dates, tip amounts)
- Job and visit records (IDs, dates, assigned crew members)
- Team member profiles (names, emails, employee types)
- Timesheet records (hours logged per visit, if the hours-worked split model is active)
- Payroll run identifiers (to identify which open run to write allocations into)
We access this data using each platform's official OAuth API. We do not access records or scopes beyond what you explicitly approve during the authorization flow.
1.3 Usage and Technical Data
- Browser type and operating system
- Pages and features used within your dashboard
- IP address — collected for security and fraud prevention only, never for behavioral tracking
- Webhook event logs — used to debug sync issues
We do not use third-party advertising trackers or behavioral targeting software.
2. How We Use Your Information
We use your information to:
- Authenticate your account and maintain your session
- Receive and process invoice payment events from your connected FSM platform
- Calculate tip allocations based on the split rules and eligibility settings you configure
- Write tip allocation line items to your connected payroll system
- Detect and prevent duplicate payroll writes using our idempotency records
- Send transactional notifications — run completions, sync errors, and billing receipts
- Identify bugs and improve platform reliability
Data Protection Commitments
- We never sell your data or share it with commercial data brokers.
- We do not use your data to build advertising profiles.
- Financial and payroll data is used only to write allocations to your connected account — it is never shared with any other party.
3. Data Sharing
We may disclose your data if required by law, court order, or a valid legal process. Where permitted, we will notify you before complying with such a request.
4. Data Retention
- Active accounts: All data is retained for as long as your account is active.
- Allocation history: Processed tip allocations and audit logs are retained for 7 years to support payroll audit requirements under applicable tax law.
- After cancellation: Personal account data is deleted within 30 days. Anonymized, non-identifiable usage data may be retained for product improvement.
5. Security
- All data in transit is encrypted via TLS 1.2 or higher.
- OAuth tokens are encrypted at rest using AES-256 via
pgcrypto. - Row-level security policies in the database ensure one account cannot access another's data.
- We never store passwords directly — authentication is handled through Supabase Auth using secure tokens.
- Multi-factor authentication is available from your account settings.
Found a vulnerability? Report it to security@crewsplit.io. Please do not disclose vulnerabilities publicly before we've had a chance to address them.
6. Your Rights
You have the right to:
- Access: Request a copy of the data we hold about you.
- Correction: Update inaccurate account or profile information at any time from your dashboard.
- Deletion: Request deletion of your account and personal data. Note that allocation records required for tax compliance are retained per the schedule in Section 4.
- Portability: Export your full allocation history as CSV at any time from your dashboard.
- Revocation: Disconnect any connected FSM or payroll platform at any time from your dashboard settings.
To submit a data request, contact us at privacy@getcrewsplit.com. We will respond within 30 days.
8. Children's Privacy
CrewSplit is a business platform intended for use by adults operating field service companies. We do not knowingly collect personal information from anyone under 16. If we discover that an account belongs to a minor, we will delete it immediately.
9. Changes to This Policy
We will notify you of material changes to this policy at least 14 days before they take effect via email and an in-dashboard notice. The updated effective date will always be shown at the top of this page.