Privacy Notice

GeoCrew ("GeoCrew", "we", "us") operates the GeoCrew field-operations service available at geocrew.org and related applications (the "Service"). GeoCrew is the data controller for personal data processed about you in connection with the Service. Contact us at privacy@geocrew.org.

We collect the following categories of personal data:

• Account data — name, email address, login credentials, company you belong to, and role (owner, manager, crew). Used to create your account, authenticate you, and provide the Service. Legal basis: performance of a contract.
• Operational data you submit — jobs, customer names and addresses, scope notes, checklists, permits, photos, and messages. Used to deliver the Service to your company. Legal basis: performance of a contract.
• Location data — your device's coordinates while the Service is open and a geofence is active. Used to trigger arrival and leave events and to log visits to job sites. Legal basis: performance of a contract; we ask your browser for permission before reading location.
• Push notification tokens — when you enable push notifications. Used to deliver job assignment and daily summary notifications. Legal basis: consent (you can disable in settings at any time).
• Usage and device data — IP address, browser type, language, pages viewed, error logs. Used for security, fraud prevention, debugging, and product improvement. Legal basis: legitimate interests in operating a reliable, secure service.
• Support messages — anything you send us by email. Used to respond and improve support. Legal basis: legitimate interests.

Payment data (card details, billing address, tax identifiers) is collected and processed by our payment provider Paddle. GeoCrew does not store full payment card details.

We share personal data only with the following categories of recipients:

• Paddle.com, our Merchant of Record, for sale of the Service, subscription management, payments, tax compliance, invoicing, and refund handling.
• Service providers and subprocessors we rely on to run the Service: cloud hosting and database, authentication, push notification delivery, email delivery, and AI model providers used to generate supervisor briefs.
• Your company — operational data (jobs, checklists, visit logs, time totals) is visible to other members of the company you belong to, scoped by their role.
• Professional advisers, such as legal and accounting, where reasonably necessary.
• Authorities, where required by law or to protect rights, safety, or property.

We do not sell personal data.

Personal data may be transferred to and processed in countries outside your country of residence, including the United States, where our subprocessors operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) to protect the data.

We retain personal data for as long as your account is active. When you delete your account or your company removes you, we delete or anonymise personal data within a reasonable period, except where we are required to keep records to comply with legal, accounting, or tax obligations (typically up to 7 years for transactional records held by Paddle on our behalf).

Depending on where you live, you have rights to access, correct, delete, restrict, or object to processing of your personal data, to portability, and to withdraw consent. EU/UK users may complain to a supervisory authority. To exercise any right, email privacy@geocrew.org. We respond within one month.

We use appropriate technical and organisational measures to protect personal data, including transport encryption (HTTPS), encryption at rest at our hosting provider, role-based access controls, and database row-level security. No system is perfectly secure — please notify us at security@geocrew.org if you suspect a security issue.

We use a small number of strictly necessary cookies and local-storage entries to keep you signed in and to remember your preferences. We do not currently use advertising cookies. If we add analytics or marketing cookies in future, we will update this notice and ask for consent where required.

The Service is not directed at children under 16 and we do not knowingly collect personal data from them.

We may update this notice. Material changes will be announced via the Service or by email. The "Last updated" date above reflects the current version.

For privacy questions, email privacy@geocrew.org.