CrewHQ CRM privacy notice

Effective version: October 14, 2026. Greyson Nardi Window Washing LLC operates CrewHQ CRM. Contact: CrewHQCRM@gmail.com.

Information handled

A business owner provides a business name, email address, and password. CrewHQ CRM stores a salted password hash, not the password itself. The owner may enter customer names, contact details, service addresses, quotes, jobs, crews, contracts, invoices, payment records, and notes. The service also records account sessions, security attempts, billing identifiers, subscription status, and operational or audit events.

Use and sharing

CrewHQ CRM uses this information to operate the owner's private workspace, authenticate users, create reports and backups, provide support, process the owner's subscription, and protect the service. Cloudflare hosts the application, database, and private backups. Stripe handles the owner's CrewHQ CRM subscription checkout, recurring charge, payment method, and billing portal. The CRM stores Stripe customer, subscription, invoice, and event identifiers needed to reconcile access; it does not receive complete card numbers. The current beta does not automatically send customer email or SMS. If optional integrations are enabled later, their data flows will be described before activation. CrewHQ CRM does not sell business customer records.

Access and security

Each business account is intended to see only its own CRM workspace. The service operator can administer hosting, support, security, and recovery. Passwords are hashed; access sessions expire after seven days. Backups are stored in a private Cloudflare R2 bucket. No system can guarantee absolute security; suspected unauthorized access can be reported to CrewHQCRM@gmail.com.

Retention, exports, and deletion

Primary CRM records and billing ledgers currently have no automatic deletion schedule. An owner can export available workspace records and can request a reasonable CRM export for 30 days after cancellation, subject to identity verification. An owner may request correction or deletion by contacting CrewHQCRM@gmail.com. The operator will verify the requester, assess any legal or accounting retention requirement, and explain what can be removed. Offsite backups retain the current day and previous 30 days; a deleted active record may remain in a backup during that period. Stripe may retain separate payment records under its own policies.

Changes and requests

Contact CrewHQCRM@gmail.com for access, correction, export, deletion, or privacy questions. Material changes to this notice will be dated and communicated to paying customers before they take effect when required by law.