Privacy Policy

1. Who operates CrewHouse

CrewHouse LLP (“CrewHouse”, “we”, “us”, or “our”) is the data fiduciary or controller responsible for the personal data described in this policy. This policy applies when you use CrewHouse as a worker, organiser, business contact, website visitor, or other user of our services.

CrewHouse is operated from India and may be made available to users in other countries. Local privacy rights may apply based on where you live.

2. Information we collect

Account and contact information

We may collect your name, email address, mobile number, role, login identifiers, verification status, support communications, notification preferences, ratings, reviews, and records needed to prevent fraud or resolve disputes.

Worker information

Worker information may include date of birth, gender, address, location, profile photo, selfie, skills, education, college email, certificates, Aadhaar or other identity and eligibility documents. We may process applications, offers, attendance, check-in and check-out records, completed gigs, ratings, reviews, and earnings records.

Organiser and business information

Organiser information may include business and authorised-contact details, business address and location, logos, venue photos, licences, registration documents, GST and PAN information, bank account and IFSC details, and KYC documents. We may process events, staffing requirements, applications, offers, attendance, ratings, and payment or spending records.

Device permissions and technical information

With permission, CrewHouse may access your camera, selected photos, location, and notifications. Face ID is handled by Apple on your device; CrewHouse does not receive or store your Face ID template. CrewHouse and its service providers may process IP address, device, browser, page, referral, campaign, request, diagnostic, and security-log information when you use the apps or website.

Website enquiries

When you contact CrewHouse through the website, you may provide your name, email address, optional phone number, city, audience type, organisation, and message. Do not submit passwords, one-time verification codes, identity documents, or banking documents through the public website contact form or unsolicited email.

3. How we collect information

We collect information:

• Directly from you during registration, verification, profile editing, enquiries, and use of CrewHouse;
• Automatically when the apps or website communicate with our systems or when you permit access to device features;
• From workers or organisers involved in the same application, offer, gig, attendance record, rating, or dispute; and
• From authentication, hosting, mapping, analytics, storage, and email-delivery providers used to operate the service.

4. Why we use information

We use personal data to:

• Create, authenticate, maintain, and secure accounts;
• Verify identity, age, education, eligibility, business, and payment information;
• Match workers and organisers and manage gigs, applications, offers, communications, attendance, check-in, and safety;
• Maintain earnings, spending, payment, tax, accounting, and operational records;
• Send service, account, application, offer, gig, security, and support communications;
• Detect misuse, prevent fraud, resolve disputes, enforce agreements, and improve reliability;
• Understand website performance and approved campaign activity; and
• Comply with legal, regulatory, and lawful requests.

We do not use Face ID data for advertising, sell personal data, or use personal data for third-party targeted advertising.

5. Legal grounds and consent

Depending on the service and where you live, we process personal data based on your consent, steps you request before entering an agreement, performance of our agreement with you, compliance with legal obligations, protection of users or the public, and legitimate interests that do not override your rights.

Where processing requires consent, you may withdraw it through the app, device settings, or by contacting us. Withdrawal does not affect processing already lawfully completed and may prevent features that require the relevant information from working.

6. When information is shared

We share only what is reasonably necessary with workers and organisers participating in matching, applications, offers, and gigs. For example, an organiser may receive relevant worker profile and application information, while a worker may receive relevant organiser, venue, role, and gig information.

We use Supabase for authentication, databases, file storage, realtime updates, and server functions; Google for Google Sign-In; Apple services such as MapKit and device authentication; Vercel for website hosting and analytics; and Resend or other configured email providers for service messages. These providers process information on our behalf under their applicable terms and safeguards.

We may also disclose information to professional advisers, authorities, regulators, or courts where legally required, or to protect rights and safety. A successor may receive relevant data during a genuine merger, financing, restructuring, or business transfer, subject to appropriate safeguards and applicable law.

7. International processing

CrewHouse is operated from India and uses providers that may process information in other countries. Privacy laws may differ across locations. Where required, we use contractual, organisational, and technical safeguards for international processing and honour transfer restrictions imposed by applicable law.

8. Retention and deletion

Account and profile information is generally retained while your account is active. One-time verification codes expire after 10 minutes. Gig, attendance, payment, tax, accounting, verification, safety, fraud-prevention, and dispute records are retained for their purpose and for any longer period required by applicable law.

You can request permanent account deletion inside the CrewHouse app or through our public account deletion page. We aim to complete a verified deletion request within seven days. The account and data that are not legally required are deleted or irreversibly anonymised.

Records retained for legal, tax, accounting, safety, fraud-prevention, or dispute purposes are isolated, access restricted, and deleted or anonymised when the applicable obligation ends. Residual encrypted backups may remain temporarily until they rotate under our providers' backup schedules.

9. Your privacy rights

Subject to applicable law, you may request access to your personal data, correction or completion, deletion, restriction, objection, or portability. You may withdraw consent, request information about processing or sharing, raise a grievance, nominate another person where local law provides that right, and complain to the competent privacy authority.

We may verify your identity before acting on a request and may retain information where applicable law permits or requires it. We will not ask you to disclose your password or one-time verification code to exercise a privacy right.

10. Permissions and choices

• Camera access supports QR scanning and capturing verification images.
• Photo access allows selection of profile, identity, and business documents.
• Location supports address selection and active-gig attendance or check-in verification, including background updates where enabled.
• Notifications provide account, application, offer, gig, and security updates.
• Face ID may confirm identity before a gig and remains controlled by your device operating system.

You can change optional permissions in your device settings, although related features may stop working.

11. Security

We use authenticated connections, access controls, role-based database rules, operational safeguards, and service-provider protections designed to secure personal data. No internet transmission or storage system can be guaranteed to be completely secure.

If a breach creates a legally reportable risk, we will notify affected users and authorities as required. Never share your password or verification code with another person.

12. Age requirement

CrewHouse accounts and gig services are intended only for people aged 18 or older. We do not knowingly permit children to create worker or organiser accounts. Contact us if you believe a person under 18 has provided personal data.

13. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. We will update the effective date and provide additional notice or obtain consent where applicable law requires it. Material changes apply prospectively unless law permits otherwise.

14. Contact and grievances

Data Fiduciary / Controller: CrewHouse LLP, India.

For privacy questions, rights requests, account deletion, or grievances, contact the CrewHouse Privacy and Grievance Contact at crewhouselimited@gmail.com. We will acknowledge and handle requests within the period required by applicable law.