Privacy Policy

Account information: Name, email address, and business details provided during registration.

Instagram data: When you connect your Instagram Business account, we access:

• Your Instagram account ID, name, and username (via instagram_business_basic)
• Direct messages sent to or from your business account (via instagram_business_manage_messages)
• Comments on your business posts (via instagram_business_manage_comments)
• The ability to publish posts on your behalf when you explicitly trigger publishing (via instagram_business_content_publish)

We also access basic profile information (name, username, profile picture) of customers who message your business, solely to display them in your inbox.

WhatsApp data: When you connect your WhatsApp Business number, we access:

• Inbound messages from customers to your business number
• Message delivery and read status
• Phone number metadata associated with your WhatsApp Business Account

Customer conversation data: Messages, contacts, and interaction history stored in your Crewio workspace to operate the inbox and CRM features.

Usage data: Browser type, IP address, pages visited, and actions taken within the platform for security and product improvement.

• To provide the Crewio platform — unified inbox, CRM, automations, and publishing features
• To send and receive messages on your behalf via Instagram and WhatsApp using your authorized credentials
• To display customer contact profiles within your workspace
• To run keyword-triggered automations and AI-powered replies that you configure
• To generate reports and analytics visible only to your workspace
• To send product and service notifications (you may opt out at any time)

Crewio accesses Instagram and WhatsApp data solely to provide features you have explicitly requested. Specifically:

• Instagram messages and comments are stored in your workspace database and are accessible only to authorized members of your workspace
• WhatsApp messages are stored in the same manner
• We do not share Instagram or WhatsApp data with third parties for advertising or profiling purposes
• We do not use Instagram or WhatsApp data to train AI models without your explicit consent
• Access tokens are stored encrypted and used only to perform actions you have authorized
• You can disconnect your Instagram or WhatsApp account at any time from Settings → Channels

Our use of Instagram data is governed by the Meta Platform Terms and Meta Developer Policies.

We do not sell your personal data. We may share data with:

• Infrastructure providers: Neon (database), Azure (hosting and email delivery), and other subprocessors required to operate Crewio — under appropriate data processing agreements
• AI providers: OpenRouter (routing to LLM providers) — only message content you have configured for AI processing, anonymized where possible
• Legal authorities: If required by law or to protect the rights and safety of our users

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time (see Section 7). Conversation history is retained to provide continuity of service; you may delete individual conversations from the inbox.

We use industry-standard security practices including encrypted connections (TLS), encrypted credentials storage, row-level security on the database, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

You have the right to access, correct, export, or delete the personal data we hold about you. To request deletion of your data:

• Email us at privacy@crewio.ai with the subject line "Data Deletion Request"
• Or submit a request at boss.crewio.ai/data-deletion

We will process deletion requests within 30 days. Note that some data may be retained as required by law or to resolve disputes.

If you connected Crewio to Instagram or WhatsApp and wish to revoke access, you can also do so directly from your Meta account settings under "Apps and Websites".

Crewio is not directed at children under 13. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of Crewio after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Crewio Ltd
Email: privacy@crewio.ai
Website: crewio.ai