Privacy Policy

1. What this covers

This Privacy Policy explains what information Crewstash collects when you use trycrewstash.com, how we use it, and who we share it with. By using Crewstash, you agree to the practices described here.

2. Information we collect

Directly from you:

• Account info: email address and password (or your Google account, if you sign in with Google).
• Startup data: your startup's name, description, industry, starting capital, planned spend and revenue categories, and any answers you give during the idea-viability assessment.
• Collaborator invites: the email address of anyone you invite to your startup.
• Feature requests and support messages you send us.
• Billing info: if you subscribe to Pro, Stripe collects your payment details directly — we never see or store your full card number.

Automatically:

• Basic usage data (pages visited, actions taken) to keep the product working and improve it.

3. How we use your information

• To provide the core product: computing your burn rate, runway, and scenario projections from the numbers you enter.
• To generate your idea-viability assessment and AI chat responses, which are sent to our AI provider along with your startup's context so it can respond specifically to your numbers.
• To send transactional email — confirming your account, low-runway alerts you've opted into, and collaborator invites.
• To process subscription payments and manage your billing status.
• To respond to feature requests and support messages you send us.

We don't sell your data, and we don't use your startup's financial data to train AI models.

4. Who we share it with

We share data only with the service providers that power Crewstash:

• Supabase — hosts our database and handles authentication.
• Stripe — processes subscription payments.
• Resend — sends transactional emails on our behalf.
• Vercel AI Gateway / Anthropic — powers the Crewstash AI assistant and idea-viability assessment, using the startup context needed to answer your questions.
• Cloudflare — hosts the application.

Each provider only receives what it needs to do its job. We don't sell or rent your personal or financial data to third parties.

5. Collaborators and shared data

If you invite a collaborator to your startup, they can see (and, if given editor access, edit) the startup data you've shared — the same data described in Section 2. Removing a collaborator immediately revokes their access.

6. Data retention and deletion

We keep your data for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing us — we'll delete it within a reasonable time, except where we're required to retain billing records for legal or tax purposes.

7. Security

We use industry-standard measures — encrypted connections, row-level database access controls, and hashed passwords — to protect your data. No system is perfectly secure, but we work to keep your information safe.

8. Your rights

You can access, correct, export, or delete your data at any time from within Crewstash or by contacting us. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA — contact us to exercise them.

9. Changes to this policy

If we make material changes to this policy, we'll notify active users by email or an in-app notice before the changes take effect.

10. Contact

Questions about this policy or your data? Email us at hello@trycrewstash.com. See also our Terms of Service.