Privacy policy
Last updated
Plain-language summary first; the full terms follow.
The short version
- We collect what the crew needs to work. Your account details, the Slack threads a teammate is part of, and what it reads in the tools you connect.
- Your data does not train AI models. Model providers get the text needed to write a reply. Our agreements with them do not allow training on it.
- Conversation history is deleted after 90 days. If you remove CrewOS from Slack, your workspace's data is deleted within 30 days.
- We don't sell your data. We share it only with the providers listed on our subprocessors page, to run the service.
- You can see, export, or delete it. Email privacy@crewos.ai and a person will handle it.
- Your business owns its content. We process it on your behalf and only to run CrewOS for you.
On this page
Who we are
CrewOS ("CrewOS", "we", "us") makes AI teammates that work inside a business's Slack workspace. This policy explains what personal information we handle when you visit crewos.ai, sign up, or use CrewOS, and what choices you have.
When a business uses CrewOS, that business decides what its teammates do and which tools they connect. For the content in its Slack threads and connected tools, the business is in charge of the data and we process it on the business's behalf. For account, billing, and website data, we decide how it is used, and this policy describes how.
What we collect
In short: who you are, what your crew works on, and how the service is running.
Account information
Your name, work email, company name, and role when you sign up or are invited. Sign-in is handled by WorkOS, so we receive your identity from them and do not store your password.
Slack workspace information
When you add CrewOS to Slack, we receive your workspace name and ID, the names and IDs of channels a teammate is added to, and the names and IDs of people in those channels. A teammate reads messages in the threads and channels it is part of, so it can answer and remember the conversation. It does not read channels it has not been added to, or direct messages between other people.
Content from connected tools
When you connect a tool such as Gmail, Outlook, QuickBooks, Jobber, Stripe, or GitHub, a teammate reads what it needs from that tool to do the job you gave it. For example, Front Desk may read a job record to draft a quote reply. We store the result in the thread history, not a copy of the whole tool.
Approvals and activity
A record of each step a teammate takes: what it read, which tools it used, what it drafted, who approved, edited, or held it, what was sent, and what it cost. This is the audit log your team sees in the console.
Billing information
Your plan, invoices, and spending cap. Payments are handled by Stripe. We never see or store your full card number.
Website and service data
Standard request logs when you visit crewos.ai or the console: IP address, browser type, pages requested, and times. We use them to keep the service running and to stop abuse.
Why we use it
- To run CrewOS: read the thread, draft replies, run routines, and hold actions for your ok.
- To show your team what each teammate did, through the audit log and usage view.
- To bill you correctly and enforce the spending cap you set.
- To keep the service secure, find and fix problems, and stop misuse.
- To reply when you contact support, and to send notices about your account or this policy.
- To meet legal obligations, such as tax records.
We do not sell personal information, and we do not use your content for advertising. We do not use your content to train AI models, ours or anyone else's.
AI model providers
To write a reply or a draft, a teammate sends the parts of the conversation and tool data it needs to an AI model provider: Anthropic, OpenAI, or Google. The provider returns the text, and the teammate uses it in the thread.
Our agreements with these providers do not allow them to use your content to train their models. Enterprise customers can bring their own model keys, so those requests run under the customer's own provider account and terms.
Who we share it with
We share personal information only with service providers that help us run CrewOS, such as hosting, database, sign-in, billing, and AI model providers. Each one is listed, with what it handles and where, on our subprocessors page. They may use the data only to provide their service to us.
We may also share information if the law requires it, to protect people from harm, or as part of a merger or sale of CrewOS. If that happens, this policy keeps applying to the data we already hold, and we will tell you before it becomes subject to a different policy.
How long we keep it
- Conversation history: 90 days, then deleted.
- After you remove CrewOS from Slack: your workspace's data is deleted within 30 days.
- Account information: while your account is open, and deleted with your workspace data.
- Billing records: as long as tax and accounting law requires.
- Request logs: up to 30 days, unless we need them to look into a security problem.
Enterprise customers can agree to a different retention period in their contract.
Deleting your data
Remove the CrewOS app from your Slack workspace and your workspace's data is deleted within 30 days. To delete it sooner, or to delete one person's information, email privacy@crewos.ai from an address on the account. We confirm when it is done.
Deleting data from CrewOS does not delete messages in Slack or records in your connected tools. Those stay in those tools under your control.
How we protect it
Every record is stored under your company and checked on each read and write, so one company cannot see another's data. Anything a teammate wants to send outside Slack waits for a person's ok. Data travels encrypted, and our hosting and database providers encrypt it at rest. Our security page has the details.
Your rights
Depending on where you live, you may have the right to:
- See the personal information we hold about you and get a copy.
- Correct information that is wrong.
- Have your information deleted.
- Object to or limit how we use it.
- Take your information to another service in a common format.
Email privacy@crewos.ai to use any of these. We reply within 30 days and may ask you to confirm your identity first. If your request is about content your employer controls in CrewOS, we will pass it to them and help them answer it. You can also complain to your local data protection authority.
Cookies
crewos.ai does not use advertising or cross-site tracking cookies. The console uses cookies that keep you signed in and protect your session. You can block cookies in your browser, but the console will not work without them.
Children
CrewOS is a tool for businesses and is not meant for anyone under 16. We do not knowingly collect information from children. If you think a child has given us information, email us and we will delete it.
Changes to this policy
If we change this policy, we update the date at the top. If a change affects how we use your information in a meaningful way, we email account owners at least 30 days before it takes effect.
Contact
Questions or requests about privacy: privacy@crewos.ai. Security reports: security@crewos.ai. Everything else: support@crewos.ai.