Norton Crewfit › Security
Your customer list, invoices and payments are the heart of your business. Here's exactly how Crewfit keeps them safe, in plain English.
You own everything you put in, including your customers' information. Download all of it any time from Settings, Your data. We never sell it or use it for anyone else.
The database itself checks every request, so a login can only ever see its own company's records. One client can never see another's.
Crew logins see their jobs. They can't see prices, payments or billing.
Every page and every phone talks to Crewfit over HTTPS, the same encryption your bank's website uses.
Data is backed up every night and backups are kept for 35 days, so a bad day can be undone.
If you turn on card payments, customers pay on Stripe's secure page and the money goes to your own Stripe account. Crewfit never sees or stores card numbers.
The admin accounts that run Crewfit use two-factor sign-in.
If the daily email run fails or something breaks, Taylor gets an alert, and when you report a problem he starts fixing it within one business day.
You keep a full export of your customers, invoices and payments. We keep your data for 60 days after your agreement ends, then permanently delete it.
No system is perfect. If we ever learn of a breach that affects your information, we'll tell you promptly. Details are in the Privacy Policy.
Your logins, and Taylor when you ask for help or a change. No other client can, and we don't sell or share it for marketing.
On Supabase (database, logins and files, United States), with the app hosted on Cloudflare. The full list of providers is in the Privacy Policy.
Tell us right away and we'll change that login's password so the phone can't get back in. Your data lives on the server, not just on the phone.