Privacy Policy

Last updated: November 9, 2026

1. Who we are

Crewdle is operated by Crewdle Technologies Inc. ("Crewdle", "we", "us"), 3 Place Ville Marie #400, Montreal, Quebec, H3B 2E3. This policy covers the website crewdle.com, the sign-in portal auth.crewdle.ai, the Crewdle apps (including Connect, Chat, Build, Create, Forge, Arena and Admin), the Crewdle desktop app and the Crewdle API (the "Services").

Person in charge of the protection of personal information: Vincent Lamanna, CEO, support@crewdle.com, 3 Place Ville Marie #400, Montreal, Quebec, H3B 2E3.

2. Our role

• We decide how your information is used (we are the "controller") for your account, the website, sign-up, billing, security and our own analytics.
• For the content an organization puts into Crewdle (conversations, files, memory, data from connected services), we act on that organization's behalf and according to its instructions (we are its "service provider" or "processor"). The organization decides what goes in and who can see it. If you are a member of an organization, its administrators can access the organization's content, and you may want to read its own privacy notice. Our data processing terms are available on request.

3. What we collect

Do not put sensitive information (for example health, financial account or government identification data) into Crewdle unless it is needed and your organization allows it. Memory is designed to refuse passwords and personal, health, HR and legal details.

4. How we use it

We do not sell your personal information, and we do not share it for targeted advertising.

5. AI and your content

• No training. We do not use your content to train AI models. We use AI providers' business APIs, whose terms exclude training on the data they receive.
• What the model receives. When you or an agent ask for an answer, our AI gateway sends the model provider the context needed for that request: the message, relevant history, files and memory. It checks budgets and permissions first. Nothing is sent in the background or in bulk.
• Private AI mode. An agent or workflow in private AI mode can only use models the provider runs with zero data retention. The model still runs on the provider's infrastructure. Image, video and speech tools are not covered.
• AI guardrails. If your organization turns on AI guardrails, the text of messages and replies is checked by Fireraven, in Canada, whatever your region. Fireraven keeps the checked text for monitoring and does not train on it.
• Memory. After a reply, an automatic pass may save useful facts to memory. Memory refuses passwords and personal, health, HR, legal and client-confidential details. You can review, edit and delete notes; administrators cannot see members' personal notes.
• Automated decisions. Crewdle does not make decisions about you that have legal or similarly significant effects based solely on automated processing. If your organization uses agents to make decisions about people, it is responsible for informing them and providing human review.

6. Where your information is stored

The Crewdle website and platform are hosted in Canada. When an organization is created, it chooses a region for its data: Canada, the United States or the European Union. The region cannot be changed later. See also Data residency.

Some information is processed outside your organization's region:

• Global, in Canada: your sign-in identity and profile (name, email, phone, preferences), sign-up attribution, referral and anti-abuse records, survey answers and stop-paying reasons (stored without names), our cookieless analytics, and a directory entry per organization (name and region).
• AI models: run on the providers' infrastructure, mostly in the United States, whatever your region.
• Real-time connection service: presence and file-transfer signals for organizations in Canada and the United States are processed in the United States (Iowa).
• AI guardrails: Canada, for every region.
• Other services: email delivery, payments, web browsing for agents and server logs run where those providers operate, mostly in the United States.

Transfers. When information leaves Quebec, Canada or the European Union, we first assess the risks, and we require the recipient to protect it by contract (for transfers from the EU: the European Commission's standard contractual clauses or an equivalent mechanism). Information processed in another country may be accessible to that country's authorities under its laws.

7. The companies we work with

We share information only with service providers that need it to run the Services, under contracts that limit their use of it to that purpose, and as required by law. The current list:

We may also disclose information: to a successor if Crewdle is merged or sold, with notice to you; to professional advisers under confidentiality; or when the law requires it, to protect someone's safety, or to defend our rights. If you belong to an organization managed by a Crewdle partner (reseller), the partner can see and manage that organization, and Crewdle staff can access an organization to provide support; every such access is logged.

8. Services you connect

When you connect a service (for example Google, Microsoft 365, Slack, Shopify, HubSpot, Zoho or Xero), we store an access token and your agents read or write data in that service as you instruct. That data stays subject to the service's own privacy policy. You can disconnect at any time; we then revoke the access where the service allows it and delete the token.

Google user data. Crewdle's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you request, we do not use it for advertising, we do not sell it, and we do not use it to train AI models.

9. Analytics and experiments

• Our own cookieless analytics. We count page views and visits with our own counter. It stores nothing on your device and uses no third-party analytics service. We explain how we count visits without cookies on our blog.
  • Visitor number: computed from your IP address and browser type with a key that changes and is deleted every day, so visits cannot be linked from one day to the next.
  • Location: when a visit is recorded, we look up its approximate location (country, region such as a province or state, and city) in the DB-IP Lite database. The IP address itself is never stored, and city locations are rounded to about 10 km (0.1°). IP geolocation by DB-IP, licensed under CC BY 4.0.
  • Who sees it: Crewdle administrators only. The real-time view can show a city with a single visitor; views over a period hide places with fewer than 5 visitors.
  • Where and how long: in Canada. Individual visit records are kept for 13 months; totals by day, page or place are kept without a time limit and contain no information about individuals.
• Experiments. When we test two versions of a website page, our server picks the version from the daily visitor number above; nothing is stored on your device. If you then sign up, the experiment's id and the name of the version you saw (nothing else) travel with the record of how you first found Crewdle.
• Feedback. Answers to our short in-product surveys (for example about your first result) and the reasons you give when you stop paying are stored without your name, in Canada, whatever your organization's region.
• We do not use Google Analytics, session recording or advertising pixels. The browser items we do use, and your choices, are in section 10.

10. Cookies and browser storage

• Most of what we store in your browser keeps you signed in, keeps you secure or remembers a choice you made, such as your language or theme. These are strictly necessary.
• A few items measure how our website and apps are used. We ask for your consent before using those where the law requires it.
• We do not use advertising cookies, and we do not sell your personal information.

This section explains the cookies and similar technologies (local storage, session storage and IndexedDB) used by Crewdle on crewdle.com, on the sign-in portal auth.crewdle.ai and in the Crewdle apps on *.crewdle.ai.

What these technologies are

A cookie is a small text file a website stores in your browser. Local storage, session storage and IndexedDB are similar places in your browser where a site can keep data. Session storage is erased when you close the tab. "First party" means the item belongs to the site you are visiting; "third party" means it belongs to another company.

The categories we use

• Strictly necessary: sign-in, security, fraud and bot protection, and features you asked for. The service does not work without them, so they do not require consent.
• Preferences: remember choices you made, such as language and theme.
• Measurement and testing: help us understand where visitors come from and attribute sign-ups to the people who refer them. These are not necessary, and we ask for your consent where the law requires it.

We do not use advertising or cross-site profiling cookies, Google Analytics or session recording.

crewdle.com (our website)

crewdle.com shows no cookie banner because it sets no non-essential cookies: our website sets no cookies at all. What it keeps in your browser is strictly necessary (resending a form) or functional (your language, blog and venue preferences), plus two session-storage items that remember the campaign you arrived from and are erased when you close the tab.

Website experiments (testing two versions of a page) use a variant chosen on our server from the daily visitor number described in section 9 above, with no cookie or storage on your device.

Our page counter (/pulse.js) counts page views without any cookie, storage or identifier on your device. See "Our own cookieless analytics" in section 9 above.

The chat window on the website sends your messages to our servers to generate an answer. It does not store anything in your browser.

auth.crewdle.ai (sign-in) and the Crewdle apps (*.crewdle.ai)

Your choices

• Consent: where the law requires it, we ask before using measurement and testing items, and you can change your choice at any time. There's nothing to set: crewdle.com doesn't use optional cookies. You can clear what's stored in your browser's settings at any time.
• Your browser: you can block or delete cookies and site data in your browser settings. If you block strictly necessary items, signing in will not work.

We update this section when we add, change or remove a cookie or storage item.

11. How long we keep information

When you delete your account, we delete your profile, your agents, your personal chats, conversations where you were the only participant, your files, your connections and your Build projects. Messages you wrote in shared conversations stay with the organization and are shown as written by "Deleted user". You must first delete any organization you own, or transfer it.

12. Security

Data is encrypted in transit and at rest; agent storage is encrypted, and knowledge indexes use a dedicated key in each region. Organizations are separated by access rules on every record, and each agent runs in its own container. Agents ask before sensitive actions. Server logs are designed to keep metadata only, not the content of prompts, replies or emails. Access by Crewdle staff is limited to what is needed and logged. No system is perfectly secure: if an incident creates a risk of serious harm to you, we will notify you and the competent authorities as the law requires, and we keep a register of incidents.

13. Your rights

Depending on where you live, you can:

• know whether we hold information about you, and get a copy of it;
• have it corrected, or completed;
• have it deleted (you can delete your account yourself under Account, Danger zone);
• get it in a structured, commonly used format (portability);
• withdraw your consent, for example to cookies or marketing emails;
• object to or restrict some uses, including processing based on our legitimate interests;
• be informed about, and submit observations on, a decision based solely on automated processing.

Write to support@crewdle.com. We answer within 30 days. We may need to confirm your identity. If your request concerns content held by an organization, we will forward it to that organization or help it answer.

If you are not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada, or, in the European Union or the United Kingdom, your local data protection authority.

California and other US states. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics. You can exercise the rights above, and we will not treat you differently for doing so.

14. Children

The Services are not meant for children. You must be at least 18 years old to create an account. If you believe a child has given us personal information, contact us and we will delete it.

15. Emails we send

We send emails needed for the Services (sign-in codes, invitations, billing, security and important changes). With your consent or as the law allows, we also send product updates, tips and offers; every such email has an unsubscribe link, and you can manage your email preferences in your account.

16. Changes to this policy

We update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we will tell you in the Services or by email before it takes effect.

17. Contact

Questions or requests: Vincent Lamanna, CEO, support@crewdle.com, Crewdle Technologies Inc., 3 Place Ville Marie #400, Montreal, Quebec, H3B 2E3.