Privacy Policy

Last updated: June 29, 2026. This policy explains what CrewChat & ShiftBoard (“CrewChat”) collects, why, how long we keep it, and your rights. It is written for the crews and managers who use the app at small property and maintenance sites.

1. Data we collect

• Account details — your name, email, role, and the org you belong to.
• Messages — text, photos, and voice notes you send in channels and direct messages.
• Photos — images you attach to chat and the completion photo required to close a task.
• Voice notes — audio recordings (up to 2 minutes) you record in chat.
• GPS location stamps — a single coordinate captured at the moment you change your Quick Status, only if you grant location consent.
• Task completions — which tasks you completed, when, and the photo proof.
• Shift activity — shifts assigned to you and your availability responses.
• Walkie (push-to-talk) transmissions — voice you send on a talkgroup is delivered live to that group and saved so it can be replayed.

2. Electronic monitoring notice (NY Civil Rights Law §52-c)

CrewChat records messages, Quick Status location stamps, and task completion photos. This information is visible to your manager and used for operational coordination. When you first sign in you are shown this notice and asked to acknowledge it. Your acknowledgment and its timestamp are stored.

3. How we use your data

We use your data solely to operate the service: routing chat, scheduling shifts, tracking tasks, showing the live status board to your manager, and sending the notifications you opt into. We do not use your data for advertising.

4. Retention

• Messages and photos: retained for 90 days, then deleted.
• Walkie (push-to-talk) voice: retained for 7 days, then deleted.
• GPS location stamps: retained for 30 days, then deleted.
• Task records: retained for 1 year.
• Account records: retained while your account is active.

5. Sharing (NYC Local Law 3 / SHIELD Act)

Your voice and photo data are never sold or shared with third parties for their own purposes. Data is processed only by the infrastructure providers required to run CrewChat (our hosting and database provider). We follow the data-security requirements of the New York SHIELD Act.

6. Security & encryption

Data is encrypted at rest using AES-256 and in transit using TLS. Photos and voice notes are stored in a private bucket and served only through short-lived signed links — never public URLs. Access is restricted by row-level security so members can only ever see their own organization’s data.

7. Your rights

You can request a copy of your data or its deletion by contacting your manager or emailing support@crewchat.app. You can revoke location consent at any time in Settings; future status changes will then be recorded without a location.

8. Contact

Questions about this policy: support@crewchat.app.