KrewSynk Privacy Policy

KrewSynk ("we," "us," "our") provides a field management platform for construction companies and their crews. This Privacy Policy explains what information we collect, how we use it, how it is shared, and the rights you have.

1. Information We Collect

• Account information: Name, email address, phone number, company name, and role, provided when your company administrator creates your account.
• Location data: GPS coordinates captured only at the moment you clock in and clock out of a job. We do not perform continuous or background location tracking.
• Photos and documents: Images and files you upload to jobs, inspections, or reports.
• Usage data: Logs of actions taken in the app (for example, time entries, inspection submissions) for operational and audit purposes.
• Device information: Device type, operating system version, and push notification tokens.
• Payment information: Billing details for company subscriptions are processed by Stripe. We do not store full card numbers.

2. How We Use Information

• Provide and operate the KrewSynk service for your company
• Record time entries, verify job site attendance, and generate reports
• Send push notifications related to schedule changes, crew updates, and job activity
• Process subscription payments through Stripe
• Maintain security, prevent fraud, and comply with legal obligations

3. Location Data

KrewSynk requests "While Using App" location permission only. Your GPS coordinates are captured at two specific moments: when you clock in and when you clock out. We do not monitor your location at any other time. Location data is stored with the corresponding time entry and is visible to your company's administrators and managers.

4. How We Share Information

We do not sell your personal information. We share data only:

• Within your company: Authorized users (administrators, managers) within your company can view data relevant to their role.
• Service providers: With vendors who help us operate the service, including our hosting provider, Cloudflare R2 (file storage), Stripe (payments), Resend (email), and Firebase (push notifications).
• Legal requirements: When required by law, subpoena, or to protect rights and safety.

5. Data Retention

We retain your information while your company's account is active and as needed to provide the service. If your company cancels, we retain data for up to 90 days to support re-activation, after which it is deleted or anonymized.

6. Security

We use industry-standard encryption in transit (HTTPS) and at rest, role-based access controls, and tenant isolation to protect your data. No system is perfectly secure, but we work to safeguard your information.

7. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at the address below. If you are in the EU, UK, or California, you have additional rights under GDPR and CCPA, including the right to data portability and to object to processing.

8. Children's Privacy

KrewSynk is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date at the top.

10. Contact Us

Questions or requests can be directed to:

KrewSynk
Email: j.g.pierucci@gmail.com