Start Free Trial

Privacy Policy

Last updated: June 26, 2026

Crew Rivet ("we," "us," or "our") is operated by Avion LLC, a California limited liability company. This Privacy Policy describes how we collect, use, and share information when you use our platform at crewrivet.com and related services (the "Service").

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, phone number, business name, and trade when you create an account.
  • Customer Data: Contact information (names, phone numbers, email addresses, addresses) for your customers that you add to the Service.
  • Financial Information: Invoice amounts, payment records, line item descriptions, expense records, and receipt photos. Payment processing is handled by Stripe; we do not store credit card numbers. If you enable instant payouts via Stripe Connect, Stripe collects your banking information directly — we never access or store your bank account details.
  • Communications: Text messages sent and received through the Service, voice notes uploaded for quote generation.

Information Collected Automatically

  • Usage Data: Pages visited, features used, and actions taken within the Service.
  • Device Information: Browser type, operating system, and IP address.
  • Message Delivery Data: Delivery status, timestamps, and carrier information for SMS messages sent through the Service.

2. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To send SMS messages, invoices, quotes, reminders, and review requests on your behalf to your customers.
  • To process payments through our payment processor (Stripe).
  • To classify inbound messages using AI to route them appropriately.
  • To transcribe voice notes for quote generation.
  • To send you account notifications and support communications.
  • To monitor service health and prevent fraud or abuse.

3. How We Share Your Information

We do not sell your personal information. We share information only with:

  • Service Providers: Stripe (payments and payouts), Telnyx (SMS/voice), Amazon SES (transactional and notification email), Chatwoot (live chat support), Groq (voice transcription), Google Gemini (message classification fallback), and Wisetack or Hearth (consumer financing, if enabled by you). These providers process data solely to perform services on our behalf.
  • Your Customers: When you use the Service to send invoices, quotes, reminders, or review requests, your business information is shared with the recipients.
  • Legal Requirements: When required by law, subpoena, or to protect our rights.

4. SMS/Messaging Consent

When you use Crew Rivet to send messages to your customers:

  • You are responsible for obtaining proper consent from your customers before sending them messages through the Service.
  • Recipients can opt out at any time by replying STOP to any message. We automatically process opt-outs and cease all messaging to that number.
  • We comply with TCPA, CTIA, and carrier guidelines for SMS messaging.
  • Message frequency varies based on the sequences you configure (e.g., invoice reminders, review requests).
  • Standard message and data rates may apply to recipients.

5. Data Retention

  • Account data is retained while your account is active and for 30 days after cancellation.
  • Message records are retained for 1 year for compliance purposes.
  • Audit logs are retained for 2 years.
  • You can export your data or permanently delete your account at any time from Settings in the app, or by contacting us.

6. Cookies

We use cookies and similar technologies to:

  • Essential Cookies: Maintain your login session and remember your preferences (theme, language). These are required for the Service to function.
  • Analytics: Within the app, we use privacy-respecting product analytics and error monitoring to understand how the Service is used and to fix problems. We do not use this data for advertising. Our marketing website (crewrivet.com) does not load Google Analytics, advertising pixels (such as the Meta Pixel), or any cross-site advertising trackers.

We do not use advertising cookies, run advertising pixels, or share cookie data with third parties for advertising. You can manage cookies in your browser settings, but disabling essential cookies may affect your ability to use the Service.

7. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS) and at rest.
  • Row-level security for multi-tenant data isolation.
  • Scrypt password hashing with per-user salts.
  • Webhook signature verification for all inbound events.
  • Regular automated backups to encrypted cloud storage.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your information.
  • Export your data in a portable format.
  • Opt out of certain data processing activities.

9. Location Data

For users of the crew tracking feature, we collect GPS location data:

  • Location is collected only during active work sessions when tracking is enabled by the account owner.
  • Location data is used for dispatch, route optimization, and customer-facing technician tracking.
  • GPS data is retained for 12 months, then automatically deleted.
  • Employees and contractors can see when tracking is active via the Service interface.
  • Account owners are responsible for informing their workers about location tracking and obtaining any required consent.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Categories of Personal Information We Collect

  • Identifiers: Name, email, phone number, IP address.
  • Customer Records (Cal. Civ. Code 1798.80(e)): Name, address, phone number.
  • Commercial Information: Transaction records, subscription data, invoice history.
  • Internet/Electronic Activity: Pages visited, features used, interactions with the Service.
  • Geolocation Data: GPS coordinates (crew tracking feature only, when enabled).
  • Professional/Employment Information: Job title, business name, trade.

Your CCPA Rights

  • Right to Know: Request what personal information we collect, use, disclose, and the sources and purposes of collection.
  • Right to Delete: Request deletion of your personal information, subject to certain legal exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out: Opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to Limit: Limit use of sensitive personal information (such as precise geolocation) to what is necessary to provide the Service.
  • Right to Non-Discrimination: We will not deny you the Service, charge different prices, or provide a different quality of service for exercising your rights.

How to Exercise Your Rights

Submit a request by emailing [email protected] with the subject line "CCPA Request." We will verify your identity and respond within 45 days (with a possible 45-day extension if needed).

11. Do Not Sell or Share My Personal Information

Avion LLC does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising, and we do not run advertising pixels or trackers on our website. Our third-party service providers (such as Stripe, Telnyx, and Amazon SES) receive information only as necessary to provide their services under contractual obligations.

12. Data Processing Responsibilities

When you use the Service to collect and manage information about your customers, employees, and contractors:

  • You are the data controller for that information. CrewRivet processes it on your behalf.
  • You are responsible for providing privacy notices to your end users about how their data is used.
  • You are responsible for obtaining any required consents for data collection through the Service.
  • We will cooperate with you in responding to data subject requests from your end users.

13. Children's Privacy

The Service is not directed to individuals under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly. Contact us at [email protected] if you believe a child has provided us with personal information.

14. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States. By using the Service, you consent to such transfer.

15. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or in-app notification. The "Last updated" date at the top indicates when changes were last made.

16. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Avion LLC
Email: [email protected]
For CCPA requests: email [email protected] with subject "CCPA Request"
Website: crewrivet.com