1. Introduction

CrowAbout ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our review request service.

2. Information We Collect

Account Information

Email address
Business name
Password (encrypted)
Payment information (processed securely by Stripe)

Customer Data

Customer names (provided by you)
Customer phone numbers (for SMS delivery and call tracking)
Review link click data
QR code scan data (scan counts, timestamps)
Call log entries (contact names, phone numbers, notes, follow-up dates)

Screenshot Data

Screenshots uploaded to the Call Tracker are processed entirely in your browser using on-device OCR
We do not upload, store, or transmit your screenshots to any server
Only the extracted phone numbers and contact names you choose to save are stored

Usage Data

Log data and analytics
Device and browser information
IP addresses

3. How We Use Your Information

To provide and maintain our service
To send SMS review requests on your behalf
To generate and track QR codes for your review pages
To store and manage your call log entries and follow-up reminders
To process payments and manage subscriptions
To provide customer support
To send service-related communications
To improve our service and develop new features
To detect and prevent fraud

4. Data Sharing

We share your information with:

Twilio - For SMS delivery
Stripe - For payment processing
Supabase - For data storage and authentication
Vercel - For hosting
Resend - For email delivery

We do not sell your personal information to third parties.

5. Data Retention

We retain your account data for as long as your account is active. Customer phone numbers are stored only for the purpose of sending review requests, call tracking, and delivery monitoring. QR code data is retained while your account is active and your QR codes are in use. Call log entries are retained until you delete them or your account is closed. You may request deletion of your data at any time by contacting us.

6. Your Rights (GDPR)

If you are in the UK or EU, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing of your data
Data portability
Withdraw consent at any time

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted passwords, and secure payment processing through Stripe. We also offer two-factor authentication for account security.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Contact Us

For privacy-related inquiries, please contact us at: [email protected]

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.