Privacy Policy

Account information: your name, email address and password (stored only as a secure hash), your role, whether your email is verified, and when you accepted our terms.

Profile information: phone number, date of birth, home address (street, city, state and ZIP) and gender, if you or your company add them.

Employment and qualification records your company enters: IQCS ID, position and qualification, sawyer class, experience level, certification dates (such as WCFT, FFT1, FFT2, Faller, CRWB, First Aid/CPR and MSPA), pay rate, crew, training enrollments and daily check-ins, fire history and deployments, and Incident Qualification Card details.

Uploads and signatures: employee photos, your company's emblem and card background, the owner's signature, officer signatures on Crew Time Reports, photos or PDFs of signed paper Crew Time Reports, and Resource Order Form PDFs. ROF PDFs are read automatically on our servers to fill in manifests.

Operational records: assignments, Crew Time Report times, payroll (hours, pay rates and totals), manifests (including driver names, MSPA expiration dates, vehicle make, model and year, and license plate numbers), vehicles, and invoices (billing names, addresses, phone numbers and tax rates).

Company information: company name, address and phone number.

Payment information: payments are handled by Stripe. We receive and store your Stripe customer ID, subscription status and billing history, but never your full card number.

Sign-in data: the web app uses a sign-in cookie, and the mobile app keeps its sign-in tokens in your device's secure storage. Our hosting providers keep standard server logs, such as IP address and browser type, for security and troubleshooting.

We don't collect your device's location. The fire map shows public wildfire data from the National Interagency Fire Center (NIFC). Crew dispatch addresses your company enters are converted to map coordinates using the U.S. Census Bureau geocoder and Photon (komoot).

We don't use advertising or third-party analytics trackers, and we don't sell your information. This website only stores a cookie that remembers your language choice.

To provide Crewnet: building rosters and crews, producing IQC cards, Crew Time Reports, manifests, payroll and invoices, tracking training and qualifications, and showing the fire map.

To run your account: sign-in, email verification, password resets and service emails, sent through our email provider Mailgun.

To bill subscriptions through Stripe, to keep Crewnet secure, and to answer your support requests.

Your company: owners and admins of the company you belong to can see and manage the employee records described above. Crew bosses see what they need for their crews and assignments.

Service providers who run Crewnet for us, only as needed: Vercel (hosting for the web app and this website, and file storage for uploads), Railway (hosting for our API and database), Stripe (payments), Mailgun (email delivery), Google Workspace (our support email), and the U.S. Census Bureau geocoder and Photon (converting addresses to map coordinates).

We may disclose information if the law requires it, to protect people's safety, or as part of a sale or reorganization of the business, in which case this policy would continue to apply.

We keep information while your account or your company's account is active. When you ask us to delete your account, we delete it and your personal data within 30 days, except records your company or the law requires to be kept, such as payroll.

You can view and update your profile in the app. Your company's admins can correct employment records.

You can ask us for a copy of your information or to delete your account at any time by emailing contact@crewnet.app. See the Support page for details.

Depending on where you live (for example, California), you may have additional rights to know, correct or delete your personal information. We honor these requests and never sell personal information.

Passwords are stored as secure hashes, connections use HTTPS, and access within a company is limited by role. No system is perfectly secure, but we work to protect your information.

Crewnet is a workplace tool for adults. It isn't directed at children, and we don't knowingly collect information from children under 13. If you believe a child has given us information, contact us and we'll delete it.

We may update this policy. We'll change the effective date above, and for significant changes we'll let you know in the app or by email.

Questions about privacy? Email contact@crewnet.app.