Subprocessors
Last updated: [EFFECTIVE DATE]
These are the third-party services that may process personal data when a business uses Crew & Level. Each is used only for the purpose shown, and most only when the business turns the related feature on. We'll update this page before adding a new one. See also our privacy policy.
Service providers
| Service | What it does for us | Personal data involved | When it's used |
|---|---|---|---|
| [HOSTING PROVIDER AND REGION] | Hosting the application, database and files, the websites businesses build with Crew & Level Sites and their visit counts, and our own (self-hosted) analytics for this website | All service data; for visit statistics (this website's and Sites websites'), see the privacy policy | Always |
| Stripe, Inc. | Card and bank (ACH) payments on each business's own Stripe account, payouts, Tap to Pay | Payment amounts, customer email, invoice reference; card and bank details are entered directly with Stripe | When the business connects Stripe and takes payments |
| Twilio Inc. | Texts, the business phone line, browser calling, voicemail, call recording and speech recognition for the AI receptionist | Phone numbers, message text, call audio and recordings | When the business connects a number |
| Resend | Sending email (invites, sign-in links, estimates, invoices, receipts, reminders, campaigns) | Email address, message content | Always, for email |
| Anthropic, PBC | The AI receptionist and "Ask about your business" | Inbound texts, call transcripts, the customer and schedule details needed to answer, and report data the person asking can see | When the business turns the feature on or someone asks a question |
| Mapbox, Inc. | Turning addresses into map positions, drive times and arrival estimates | Service addresses and map coordinates | When addresses are added and jobs are scheduled or tracked |
| Amazon Web Services, Inc. (S3) | Storing photos, documents and signature images | Uploaded files | When files are uploaded |
| Expo (650 Industries, Inc.) | Push notifications to the tech app | Device push token, notification text (job number, description, time) | When a team member allows notifications |
| Lob.com, Inc. | Printing and mailing postcards | Recipient name and address, the business's return address, card content | When the business sends a postcard campaign |
| OpenStreetMap Foundation (tile servers) | Map images on the office map and the customer's tracking page | The viewer's IP address and the map area shown | When a map is displayed |
Services a business chooses to connect
These aren't our subprocessors: the business decides to connect them, and their own terms apply to what they receive.
| Service | What it does for us | Personal data involved | When it's used |
|---|---|---|---|
| Intuit (QuickBooks Online) | Accounting sync | Customers, invoices and payments | When the business connects QuickBooks |
| Google and Microsoft | Sign in with Google or Microsoft | Account identifier, email, name | When a person chooses to sign in that way |
| Your webhooks, API integrations and AI apps | Whatever the business sets up | What the business chooses to send or lets the integration read | When the business sets them up |
Questions: privacy@crewandlevel.com.