Privacy Policy

1. Introduction

CrewSMS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SMS-email bridge service for field service teams.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Use our SMS-email bridge service
• Contact us for customer support
• Subscribe to our marketing communications

This personal information may include:

• Name and contact information (email address, phone number)
• Company information and employee details
• Payment and billing information
• Communication content and metadata
• Account preferences and settings

2.2 Usage Information

We automatically collect certain information when you use our service:

• Log data (IP address, browser type, operating system)
• Usage patterns and service interaction data
• Device information and identifiers
• Performance and error data

2.3 Communication Data

As part of our SMS-email bridge service, we process:

• Email and SMS message content
• Sender and recipient information
• Message timestamps and delivery status
• Conversation threading and history

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our service
• Process and route communications between email and SMS
• Manage your account and billing
• Provide customer support and technical assistance
• Improve and optimize our service
• Send important notices and service updates
• Comply with legal obligations
• Detect, prevent, and address technical issues and security threats

4. Information Sharing and Disclosure

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our service:

• SMS gateway providers (Twilio)
• Email service providers (Amazon SES)
• Cloud hosting providers
• Payment processors
• Analytics and monitoring services

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Legal process, such as a court order or subpoena
• Government or regulatory requests
• Protection of our rights, property, or safety
• Protection of the rights, property, or safety of others

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit and at rest
• Multi-tenant architecture with data isolation
• Regular security audits and assessments
• Access controls and employee training
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Communication data is typically retained for 12 months unless otherwise specified in your service agreement. Account information is retained until account deletion plus any required legal retention period.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to access, update, and correct your personal information. You can do this through your account dashboard or by contacting us.

7.2 Data Portability

You can request a copy of your data in a portable format.

7.3 Deletion

You can request deletion of your account and associated data, subject to legal retention requirements.

7.4 Marketing Communications

You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

11. European Privacy Rights

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Posting the new privacy policy on this page
• Sending you an email notification
• Providing notice through our service

Changes are effective when posted on this page. Your continued use of our service after any changes constitutes acceptance of the updated privacy policy.

13. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

14. Effective Date

This Privacy Policy is effective as of January 1, 2025.