Privacy Policy

• Earlier waitlist — people who joined our pre-launch waitlist gave us their name and email. The waitlist is closed and we no longer collect new entries; we keep the old ones only until we delete them or you ask us to.
• Contact form — when you message us we store your name, email, and message so we can reply and provide support.
• Link counts — some of our links carry a short tag naming the email or post they came from (for example ?src=email_restaurant_w1). When you open a page from such a link, we count the visit: only the tag, the page and the time. No cookie, no IP address, no device details and nothing that identifies you. We keep the tag in your browser’s session storage until you close the tab, so that our visit and button-click counts can tell which link brought you.
• Analytics — if, and only if, you accept our cookie banner, we use PostHog to collect anonymous usage events (such as page views and button clicks) to understand what’s useful and improve BizCrew. Analytics is off by default — apart from the anonymous link count above, nothing is collected until you accept.

• Supabase — secure database that stores contact messages and the entries from the closed waitlist.
• PostHog — privacy-friendly product analytics (only after consent).
• Resend — delivers contact-form messages to our support inbox.
• Vercel — hosts this website.
• Paddle — our Merchant of Record: it takes subscription payments, handles tax and sends receipts. Paddle collects the card and billing details itself; we never see your full card number.

When you or your business use the BizCrew app, we handle more than the website does. Here is all of it.

• Your account — your name and email address, used to sign you in (by an emailed code, Google or Apple). Sign-in is run for us by Clerk.
• Your business’s content — the business name, its crew, roles and reporting lines, tasks, comments and chats, and anything you attach: photos, files, voice notes and, only when you choose to attach it to a task, your location. People in your business can see what is shared with them; your business owner can see the business’s content.
• Your profile picture — if you add one, it is shown to the people in your team. A photo is kept at a public web address with a long random name, so anyone who has that exact address can open it. An emoji you pick is stored as plain text. If you choose to make an emoji avatar from your photo, the photo is sent to Google’s AI (Gemini, through Google Cloud Vertex AI) for that moment only; we do not keep the photo, only the drawing you save. When you remove your picture, or erase your account, we delete it; a copy may stay visible at its address for a short time afterwards.
• AI features — the assistant, voice input, the morning digest and file reading are powered by AI. The assistant’s main model is an open-source DeepSeek model, reached through OpenRouter (United States), which chooses which AI hosting provider runs the model for each request. Those providers’ servers can be in several countries, including the United States and China. Your voice is turned into text in the web app by Microsoft’s MAI-Transcribe model, also through OpenRouter; in the mobile app, Google Gemini reads your voice. Google Gemini (through Google Cloud Vertex AI) also reads scanned files and photos it can, answers when the main model is unavailable, and is the backup for voice. What you type or say to the assistant, photos you attach, your business’s crew, roles and tasks, and the files you ask it to read are sent to them only to produce the answer or the feature. If you do not want your assistant messages processed this way, please do not use the assistant. The app asks for your permission before it sends anything, the first time you open it.
• Notifications — if you allow them, your phone’s push token, so we can tell you about tasks and mentions. Pushes go through Expo and Apple or Google.
• Usage analytics — only if you accept, in the app we record which screens and features are used (with PostHog), linked to your account, to improve BizCrew. Nothing is sent until you accept, and you can change your mind in Settings → Privacy. We never use it for advertising and we never track you across other companies’ apps or websites.
• Crash and error reports — if the app crashes or hits an error, a report is sent to PostHog (in the United States) so we can find and fix the problem. This happens always, even if you decline usage analytics. A report includes the error message and stack trace, the app name, version and build, your device, operating system and browser, and the pattern of the screen or page where it happened. It does not include your user id, your business id, anything you typed, or the content of your screens, and it is not linked to you or used for advertising or tracking. PostHog may also receive your connection’s IP address when the report is sent.

Who processes it for us: Clerk (sign-in), Supabase (database and file storage), OpenRouter and the DeepSeek model hosts it chooses (the assistant), Microsoft Azure Speech through OpenRouter (voice to text in the web app), Google Cloud Vertex AI (voice in the mobile app, scanned files and backup AI), PostHog (usage analytics, only if you accept, and crash and error reports), Expo, Apple and Google (push notifications), Resend (email) and Paddle (billing, as our Merchant of Record). We choose providers who process data to deliver their service to us; each one also has its own privacy terms.

Deleting your data: in the app, go to Settings → Account. A member can delete their own account; the owner can delete the whole business. You have 14 days to change your mind, and then a daily job erases your sign-in and your data from our database and file storage. Things you wrote in shared chats and tasks stay, shown as “Former member”. Records already held by our providers follow their own retention. You can also email us and we will do it for you. See Delete your account.

We do not sell your data, and we do not show ads.