Privacy Policy

Krewfield (“we”, “us”) runs krewfield.com and the Krewfield apps. Contact: support@krewfield.com.

Krewfield is software that field-service businesses (plumbers, HVAC, electricians, cleaners and similar trades) use to manage clients, quotes, jobs, schedules and invoices. This policy explains what information we collect, why, who we share it with, and the choices you have. It covers our website at krewfield.com, the Krewfield web app, and the Krewfield mobile app.

• Our customers are the businesses that sign up for Krewfield, and the people on their team. For the information we collect about you (your account, your team’s logins, how you use the service), we decide how it is used. That is what most of this policy describes.
• Our customers’ clients are the homeowners, tenants and companies a business serves. A business enters its clients’ names, phone numbers, emails, addresses and job history into Krewfield. For that information we act as a service provider on the business’s behalf: we store and process it only to run Krewfield for that business, and the business decides what to enter and how to use it.

If you are a client of one of our customers and want to see, correct or delete your information, please contact that business first. If you can’t reach them, write to us at support@krewfield.com and we will pass your request to them.

Account and team information. Business name, industry, address, license number (if you add it), time zone, and logo. For each team member: name, email, phone (if given), role, optional profile photo, and an hourly cost rate if the business enters one.

Sign-in. You can sign in with an email and password or with Google. If you choose Google, we receive only your email address (and whether Google has verified it). We do not store your Google name, profile picture, contacts, or any other Google data. Passwords are handled by our sign-in provider (Amazon Cognito); we never see them in readable form.

Your clients’ information. Whatever you enter or import: names, emails, phone numbers, property addresses (including map coordinates from address search), contacts, notes, equipment, quotes, jobs, visits, invoices, payment records (such as cash or check), and attachments you upload.

Requests from your website form. If a business turns on the Krewfield request form, the person filling it in may provide their name, email, phone, address and a description of the work. That information goes to the business, not to us for our own use.

Photos, files and location. Photos and files you attach to visits, jobs or support messages are stored for you. In the mobile app, when you take a new photo with the camera, the app asks for permission to stamp it with the phone’s current location (only while the app is in use). Location is optional, is never collected in the background, and we do not track your device. Photos taken from your library carry no location. We strip embedded camera metadata from uploaded images.

Time and work records. Clock-in and clock-out times on visits, visit assignments, time-off entries, and an activity log that records who changed what and when.

Quote approvals. When a client approves a quote online, we record the typed name, the time, and the client’s IP address and browser details as evidence of the approval.

Support messages. What you write to us, any screenshot you attach, and basic context such as the page you were on, your platform and app version.

Technical information. Like any web service, our servers and hosting providers see IP addresses, browser or device type and request details when you use Krewfield. We keep service logs to run, secure and debug the service.

Cookies and local storage. We use only what the service needs to work: a sign-in cookie that keeps you signed in (up to 30 days) and a short-lived cookie during sign-in. Your browser also stores your saved list filters. We do not use advertising, analytics or tracking cookies, and the mobile app contains no advertising or analytics tools.

• To provide, secure and support Krewfield, including sending the emails the service needs (invitations, quote and invoice notices, trial and account notices, password resets).
• To look up addresses as you type them (see “Address search” below).
• To respond to support requests and to detect and prevent abuse.
• To meet legal obligations and enforce our Terms.

We do not sell personal information, we do not share it for advertising, and we do not use customer or client data to train AI models. We do not send marketing emails today; if we ever do, you will be able to opt out.

Krewfield’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms: we ask Google only for basic sign-in information. We keep your email address to identify your account, we use it only to sign you in and to send you service emails, and we do not sell it, use it for advertising, or share it with anyone except the service providers listed below that run Krewfield for us.

We share information only with the providers that help us run the service, with integrations you switch on, and where the law requires.

Integrations you enable. If you connect QuickBooks Online, we send client, invoice and payment data to Intuit and receive accounting updates, under Intuit’s terms. If you add a webhook or create an API token, event data (which can include client and job details) is sent to the address you choose or to whoever holds the token. Those recipients are your responsibility, and you can turn them off at any time in Settings.

Within your business. Team members see only what their role and department permissions allow. Photos and location stamps on a visit are visible to people who can open that visit. Team profile photos and business logos are served from a public web address, so anyone with the link can view them.

Legal and safety. We may disclose information if required by law or to protect people’s safety or our rights. If Krewfield is sold or merged, information may transfer to the new owner under this policy.

When you type an address, the text is sent through our servers to LocationIQ so it can suggest matches (United States and Canada). The saved address and map coordinates are then stored with the client’s property. Typed text is not linked to your name or account on LocationIQ’s side.

• While your account is active, we keep your data so the service works. Archiving a record in Krewfield hides it but does not erase it.
• If you want your data deleted, ask us (see section 9). Information held in system logs or backups may remain there after deletion.
• Webhook delivery logs are kept for 30 days. Quote links stop working after 90 days.
• We may keep limited information longer where the law requires (for example, billing records) or to resolve disputes.

We protect information with encryption in transit (HTTPS), encryption of the database at rest, role-based access so each business sees only its own data, and hashed storage of API tokens. No online service can promise perfect security. If we learn of a breach affecting your information, we will tell you as the law requires.

You can:

• Access and export. Export your clients, properties, contacts, equipment, price list, invoices and payments as CSV from the app at any time. For anything else, ask us.
• Correct. Edit most information directly in the app.
• Delete. Ask us to delete your account and its data. We will respond and confirm once it is done.
• Remove a teammate. Account owners and managers can remove a team member; they can no longer use the business’s account.
• Control integrations. Disconnect QuickBooks and revoke webhooks and API tokens in Settings.
• Permissions on your phone. You can withdraw camera, photo or location access in your phone’s settings; the app keeps working.

To use any of these, email support@krewfield.com from the address on your account. We may need to verify it is you. Residents of California and certain other places have additional rights, such as knowing what we collect and requesting deletion. We honor those requests for the information we hold about you; we do not sell or share personal information for advertising.

Krewfield is a business tool for people 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Krewfield is hosted in the United States. If you use it from elsewhere, your information is transferred to and stored in the United States.

If we make a material change, we will update the date above and let account owners know by email. When we add features that change how information is used, we will update this policy.

Questions or requests: support@krewfield.com