Privacy Policy
Last Updated: January 31, 2026
CrewCert ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our certification management service.
Important Notice
By using CrewCert, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
Personal Information
- Full name and email address
- Organization name and details
- Tutor Perini badge numbers
- Certification information and expiration dates
- Emergency contact information (name, phone, relationship)
- Training and certification status
- Account credentials and authentication data
Automatically Collected Information
- IP address and device information
- Browser type and operating system
- Usage data and interaction with our services
- Cookies and similar tracking technologies
- Log data including access times and pages viewed
Payment Information
- Payment processing is handled securely by Stripe, Inc.
- We do not store credit card numbers or banking information
- Transaction history and subscription status
We use the information we collect for the following purposes:
- Service Delivery: To provide certification tracking, management, and notification services
- Automated Notifications: To send certification expiration reminders and alerts via email
- Account Management: To create, maintain, and secure user accounts
- Billing and Payments: To process subscription payments and maintain billing records
- Communication: To respond to inquiries, provide customer support, and send important service updates
- Compliance: To maintain accurate certification records and generate compliance reports
- Security: To protect against unauthorized access, fraud, and security threats
- Improvement: To analyze usage patterns and improve our services
- Legal Obligations: To comply with applicable laws, regulations, and legal processes
We do not sell, rent, or trade your personal information. We may share information in the following circumstances:
Service Providers
- Stripe: For payment processing (subject to Stripe's privacy policy)
- Email Services: For sending certification notifications and alerts
- Hosting Providers: For secure data storage and application hosting
- All service providers are bound by confidentiality obligations and process data on our behalf
Within Your Organization
- Organization administrators can access crew member data within their organization
- Certification information is shared with designated notification administrators
Legal Requirements
- When required by law, court order, or government regulation
- To protect our legal rights, property, or safety
- To investigate fraud, security issues, or violations of our terms
- In connection with a merger, acquisition, or sale of assets (with notice to users)
With Your Consent
We may share information with third parties when you explicitly consent to such sharing.
We implement industry-standard security measures to protect your information:
- Encryption: Data is encrypted in transit using SSL/TLS and at rest using AES-256 encryption
- Access Controls: Role-based access controls limit data access to authorized personnel only
- Authentication: Secure authentication mechanisms protect account access
- Monitoring: Continuous security monitoring and logging to detect threats
- Regular Audits: Periodic security assessments and vulnerability testing
- Data Backup: Regular encrypted backups to prevent data loss
- Vendor Security: Third-party providers must meet our security standards
While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you of any data breach as required by law.
You have the following rights regarding your personal information:
Access and Portability
- Request a copy of your personal information
- Receive your data in a structured, machine-readable format
Correction and Update
- Update your account information through your account settings
- Request correction of inaccurate or incomplete data
Deletion
- Request deletion of your personal information (subject to legal retention requirements)
- Close your account at any time
Opt-Out
- Unsubscribe from marketing emails (via link in emails)
- Note: You cannot opt out of critical service notifications regarding certifications
GDPR Rights (European Users)
- Right to restriction of processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
CCPA Rights (California Users)
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, please contact us at privacy@crewcert.com. We will respond within 30 days.
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for authentication, security, and core functionality. Cannot be disabled.
Functional Cookies
Remember your preferences and settings for improved user experience.
Analytics Cookies
Help us understand how users interact with our service to improve functionality.
You can control cookies through your browser settings. Disabling certain cookies may limit functionality.
CrewCert operates in the United States. If you access our services from outside the U.S.:
- Your information may be transferred to, stored, and processed in the United States
- We comply with applicable data protection laws for international transfers
- We implement appropriate safeguards such as Standard Contractual Clauses (SCCs) where required
- By using our services, you consent to the transfer of your information to the U.S.
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Active Accounts: Data retained while your account is active
- Closed Accounts: Data deleted within 90 days unless legal retention required
- Certification Records: Retained for 7 years for compliance and audit purposes
- Financial Records: Retained for 7 years as required by tax and financial regulations
- Email Logs: Retained for 2 years for compliance verification
- Backups: Deleted data may persist in backups for up to 90 days
CrewCert is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18.
If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
If you believe we have collected information from a child under 18, please contact us immediately at privacy@crewcert.com.
We send the following types of emails:
Service Notifications (Cannot Opt-Out)
- Certification expiration alerts at 60, 30, and 15 days
- Initial crew member welcome emails
- Account security notifications
- Critical service updates
Optional Communications (Can Opt-Out)
- Product updates and feature announcements
- Educational content and best practices
- Marketing communications
All emails include clear sender identification and, where applicable, unsubscribe options.
Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any third-party services you access through our platform.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
When we make material changes:
- We will update the "Last Updated" date at the top of this policy
- We will notify you via email or prominent notice in our service
- For significant changes, we may require your consent to continue using the service
Continued use of our services after changes become effective constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
CrewCert Privacy Team
Email: privacy@crewcert.com
Support: support@crewcert.com
We will respond to all requests within 30 days.
Powered by Myleadify