AI and data processors

1. Who handles data for us

These companies handle personal information on our behalf to run Crewzy. Each one gets only what its job needs. We will update this list and email account owners at least 30 days before adding or replacing one that handles a business's data.

Our hosting provider, [hosting provider and server location]

Runs the server that holds the database, the files you upload and the backups.

What it receives: Everything kept in Crewzy.

Where: Australia (to confirm)

Clerk

Sign-in, accounts and two-step sign-in.

What it receives: Name, email address, phone number if given, password (held by Clerk, never by us), sign-in history and device details.

Where: United States (to confirm)

Stripe

Our own subscription billing, and card payments from your customers when you connect your own Stripe account.

What it receives: Billing contact and card details (entered on Stripe, never seen by us), invoice amounts and the customer details on a payment.

Where: Australia, the United States and other countries (to confirm)

Anthropic

Runs the AI assistant, the help assistant and AI drafts. Only what a feature needs is sent. Under Anthropic's commercial terms, data sent through its API is not used to train its models by default.

What it receives: The question or request, and the records, photos or documents a feature needs to answer it.

Where: United States (to confirm)

ClickSend

Text messages to and from your customers, when you turn texts on.

What it receives: The customer's mobile number, the text and any reply.

Where: Australia, and possibly other countries (to confirm)

The email sending service, [email service]

Delivers quotes, invoices, receipts, reminders and account emails.

What it receives: The recipient's name and email address, and the email itself.

Where: [location] (to confirm)

The transcription service, [transcription service]

Turns a recorded job sheet into words when the phone cannot do it itself. The recording is not kept by us after it is turned into words.

What it receives: The voice recording.

Where: [location] (to confirm)

2. Services you choose to connect

These receive data only when a business connects them, because the business asked us to send it. They handle it under the business's own agreement with them.

Xero

Only when you connect it: invoices, payments, credit notes, bills and contacts sent to your books.

What it receives: Customer and supplier names and contact details, and the amounts on each record.

Where: United States (to confirm)

Stripe (your own account)

Only when you connect it: your customers pay your invoices by card on your own Stripe account.

What it receives: The invoice, the amount and the customer's payment details, entered on Stripe.

Where: Australia, the United States and other countries (to confirm)

Head contractor systems such as Simpro

Only when you connect one: work orders come in, and time and completion go back.

What it receives: The job, the site, the time worked and the completion details.

Where: Wherever that system's provider holds it

3. Other services a visit or a phone touches

Google Fonts

The website, the help centre and the app load their fonts from Google, so Google receives the visitor's IP address and browser details when a page loads. No cookie is set for it.

Phone and browser push services

Notifications to a phone pass through the push service of that phone's browser (such as Google's or Apple's). The message is encrypted so the push service cannot read it.

Phone speech services

When a worker speaks a job sheet and the phone turns speech into words itself, the phone's own speech service (such as Google's or Apple's) handles the audio under its own terms. We receive only the words.

Business registers

Looking up an ABN or NZBN at sign-up sends the business name or number to the Australian Business Register or the New Zealand Business Number register.

Calendar apps

A calendar link someone adds to their calendar app is fetched by that app: the booking times, the site address and the customer's first name or business name.

4. How the AI works with your data

The assistant only drafts. Nothing it writes is sent to a customer, saved to a job or posted to your books until a person presses the button. An owner can switch AI off for the whole business.

We send Anthropic only what a feature needs, and keep the size and cost of each request, not what was typed. We do not use your records to train AI models. More is in the privacy policy.

5. Outside Australia

Where a provider above holds data outside Australia, that is a disclosure overseas under the Australian Privacy Principles. The privacy policy explains how we handle it.