Privacy Policy

Crew & Grounds runs Crew & Grounds. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, and your choices.

Two kinds of information

• Account information about you and your staff (the people who log in). We decide how this is used.
• Customer Data that your business enters about its own clients and work. You decide what to enter and why; we store and process it on your behalf and only to run the Service.

What we collect

• Account details: name, email address, business name and contact details, and your role.
• If you sign in with Google: your Google name and email address (we do not receive your Google password).
• Customer Data you enter: your clients’ names, addresses, phone numbers and emails, job, quote and invoice details, notes and payments you record.
• Technical data: sign-in sessions, IP address and basic logs needed to keep the Service secure and working.

How we use it

• To provide, secure, support and improve the Service.
• To send account emails (confirmation, password reset, invitations) and, when you ask, to email quotes and invoices to your clients on your behalf.
• To meet legal obligations and respond to your requests.

We don’t sell personal information or use Customer Data for advertising.

Who we share it with

We use trusted providers to run the Service. They may only handle data to provide their service to us:

• Supabase — database, file storage and sign-in (our database is hosted in Sydney, Australia).
• Vercel — application hosting.
• Resend — delivery of emails sent by the Service.
• Google — optional Google sign-in and address autocomplete.
• Stripe — subscription billing and card payments for your Crew & Grounds plan (we never see or store your card number).
• Sentry — error monitoring, so we can find and fix faults. It receives technical error details, not your clients’ records.

Some of these providers process data outside Australia (for example in the United States). We take reasonable steps to ensure they protect it appropriately. Your data is separated from other businesses using the Service and is only visible to people in your own business account.

Cookies

We use only the cookies required to keep you signed in and secure. We don’t use advertising or tracking cookies.

Security and retention

We use access controls, encryption in transit and per-business data separation. No system is perfectly secure; if a breach is likely to cause serious harm we will notify affected people and the OAIC as required by law. We keep information while your account is active and delete or de-identify it after you close your account, unless we must keep it for legal reasons.

Your rights

You can ask to access or correct personal information we hold about you, or to delete your account, by emailing support@crewandgrounds.com. If you are a client of a business that uses Crew & Grounds, please contact that business first — they control your information and can action your request.

Complaints

If you think we have breached the Privacy Principles, contact us and we’ll respond within a reasonable time. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We may update this policy and will change the date above when we do. Material changes will be notified by email or in the app.

Contact

Crew & Grounds — support@crewandgrounds.com