Privacy Policy

CrewSynk Ltd, a company registered in England and Wales (company number 17194182), operates CrewSynk at crewsynk.co.uk. We are the data controller for the personal data described in this policy.

Registered office: Flat 1, 2 Hoffmans Road
London
E17 6ZF
United Kingdom
Contact: support@crewsynk.co.uk

Account data

When you register: your name, email address, and password (stored in hashed form).

Profile data

Business name, address, phone number, VAT number, company number, UTR number, and bank details provided for invoice purposes.

Job and invoice data

Job details, client information, and invoices you create on the Platform.

Usage data

Login timestamps, pages visited, and actions taken, used to operate and improve the service.

Payment data

Subscription payments are processed by Stripe. We do not store your full card details. We receive and store subscription status and billing history from Stripe.

Communications

If you contact us, we retain that correspondence.

We do not independently verify the accuracy of data entered by users and are not responsible for any incorrect, incomplete, or misleading information provided by users.

We use your data to:

We do not use your data for automated decision-making or profiling.

We only process personal data where we have a lawful basis to do so under UK GDPR.

We share data only where necessary:

Supabase

Our database and authentication provider. Your data is stored on Supabase infrastructure. Supabase acts as a data processor on our behalf.

Stripe

Our payment processor. When you subscribe, your payment information is handled directly by Stripe. We receive confirmation of payment status only. See: stripe.com/gb/privacy

Resend

Our email delivery service used for invoice emails and notifications. Email content and recipient addresses are transmitted to Resend for delivery. See: resend.com/legal/privacy-policy

PostHog (EU)

We use PostHog (EU region) to collect anonymous usage counts for our public landing page — for example, how many visitors start the interactive demo, reach the invoice stage, or click a sign-up call-to-action. No cookies or similar storage are set on your device, no visitor-entered demo content is transmitted, and no user identification is performed. Each pageload generates a fresh in-memory identifier that is not persisted or linked to any other visit or to your account. See: posthog.com/privacy

Other users in your workspace

If you are invited to a workspace, the workspace Owner can see your name and the jobs you are assigned to.

Legal requirements

We may disclose your data where required by law, court order, or to protect the rights and safety of others.

We do not sell your personal data to any third party.

Some third-party processors may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses.

We retain your data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal, tax, or accounting purposes (typically up to 7 years for financial records).

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data, subject to legal retention obligations
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where we rely on consent, you may withdraw it at any time

To exercise any of these rights, email support@crewsynk.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We take reasonable technical and organisational measures to protect your data, including encrypted data storage, secure HTTPS connections, and access controls. No system is completely secure and we cannot guarantee absolute security.

We implement access controls and technical safeguards to ensure that users can only access data relevant to their own account or workspace.

CrewSynk is not intended for use by anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notice. The "Last updated" date at the top of this page will always reflect the current version.

For any privacy-related questions: support@crewsynk.co.uk
Or write to: Flat 1, 2 Hoffmans Road
London
E17 6ZF
United Kingdom