Crewsin Privacy Policy
Last updated: 3 November 2026
Crewsin (“we”, “us”) is invoicing software for construction businesses in Australia, operated by James John Daoud, trading as Crewsin, ABN 34 663 062 862. This policy explains what personal information we handle, why, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Who this covers
- Our customers — the construction businesses that use Crewsin, and their staff who sign in (“you”).
- Their customers — the people and companies those businesses invoice. We hold their details on the business's behalf, only to invoice them and collect payment.
What we collect
- Account details: names, email addresses, mobile numbers and roles of the people who sign in.
- Business details: business name, ABN, address, bank and payment settings, rate cards.
- Customer and job details, entered by the business or read from its Google account: customer names, email addresses, phone numbers, site addresses, job descriptions, invoices and payment records.
- Messages: invoices, reminders and receipts we send for the business, and replies such as “STOP” to a text.
- Technical information: sign-in and security logs. The public pages of this website set no cookies and use no analytics.
How we use it
Only to provide Crewsin: calculating and sending invoices, filing copies, taking payment, sending reminders, keeping the records tax law requires, securing accounts and fixing faults. We do not sell personal information. We do not use it for advertising.
Google user data
When a business connects its Google account, Crewsin asks only for what its features need:
| Access | What Crewsin does with it |
|---|---|
| Calendar list (read-only) | Lists your calendars so you can choose the one holding your jobs. |
| Events on the calendar you choose | Reads scheduled jobs to build your job list; writes the invoice number back onto a job once it's billed. |
| Gmail — send only | Sends your invoices and reminders from your address. Crewsin cannot read, search or delete your email. |
| Contacts (read-only) | Pre-fills customer details. Crewsin never changes your contacts. |
| Drive — only files Crewsin creates | Files invoice PDFs in a folder Crewsin creates. Crewsin cannot see your other files. |
| Your Google email address | Shows which Google account is connected. |
Crewsin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the features above; it is never sold, never used for advertising, never used to train AI models, and never read by people except with your permission, for security, or where the law requires.
You can disconnect Google at any time in Settings → Integrations, or from your Google account's security settings. Disconnecting deletes the access Crewsin holds.
AI
Crewsin can draft a job description from your notes using an AI service (Anthropic's Claude). Only the notes needed for that draft are sent. AI never calculates an amount and never sends anything by itself: you approve every invoice. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
Who we share it with
Only the services that run Crewsin, each only for its part:
| Service | For | Where |
|---|---|---|
| Supabase | Database, sign-in, storage | Sydney, Australia |
| Vercel | Hosting this website | Sydney, Australia; pages served worldwide |
| Fly.io | Producing invoice PDFs | Sydney, Australia |
| Calendar, Gmail, Drive | As Google stores your data | |
| Resend | Sign-in emails, and invoice emails when your Gmail isn't connected | Tokyo, Japan |
| ClickSend | Text messages | Australia, the EU and the United States |
| Stripe | Card payments | Australia, the United States and other countries |
| Anthropic | AI description drafts | United States |
Some of these are overseas. We choose providers with strong security commitments and give each only what it needs.
Keeping and deleting information
Tax invoices and payment records are kept for at least five years, because Australian tax law requires it. When a customer asks to be removed, we remove their personal details and keep only what that record-keeping requires. When a business leaves Crewsin, we delete its data 90 days after it leaves, except those records.
Security
Data is encrypted in transit and at rest. Access tokens for connected services are stored encrypted. Each business can see only its own data, enforced by the database itself.
If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner.
Your choices
You can ask to see or correct your personal information, or complain about how we handle it, by emailing jamesdaoudai@gmail.com. We reply within 30 days. If you're not satisfied, you can contact the OAIC at oaic.gov.au.
To stop text messages from a business that uses Crewsin, reply STOP.
Changes
We'll update this page and the date above when this policy changes, and tell businesses using Crewsin about significant changes.