Legal

Privacy Policy

Your data belongs to you. Here's exactly how we handle it.

Last updated: 10 May 2026

This Privacy Policy explains how Crewinx ("we", "us", "our") collects, uses, and protects the personal information of users ("you") of our platform at crewinx.co.za and this website. We are committed to complying with the Protection of Personal Information Act, 2013 (POPIA) and all applicable South African privacy legislation.

1. Who We Are

Crewinx is a South African software company providing crew management tools for construction contractors. For the purposes of POPIA, Crewinx acts as the responsible party for personal information collected through our platform and this website.

Contact: hello@crewinx.co.za

2. What Information We Collect

2.1 Account Information

When you create a Crewinx account, we collect:

  • Your name and email address
  • Your company name and details
  • Billing information (processed securely via Stripe — we do not store card numbers)
  • A password (stored in hashed form — we never see it in plain text)

2.2 Business Data You Enter

As you use Crewinx, you enter business operational data including:

  • Worker names, trades, and daily attendance records
  • Subcontractor names, contact numbers, and payment records
  • Project names, locations, and associated costs
  • Payroll and wage information
  • Uploaded files (sign-offs, quotes, payroll reports)

This data is owned by you. We process it on your behalf to deliver the service.

2.3 Usage Data

We automatically collect basic usage information such as:

  • Pages visited and features used
  • Device type, browser, and operating system
  • IP address (anonymised for analytics)
  • Session duration and interaction data

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Crewinx service
  • Process payments and manage your subscription
  • Send transactional emails (receipts, account alerts, payroll reports)
  • Respond to your support requests
  • Diagnose technical problems and improve service reliability
  • Comply with legal obligations

We do not sell your personal information. We do not use your business data to train AI models or for advertising purposes.

4. Who We Share Information With

We share information only with the following categories of third parties, all of whom are bound by appropriate data protection agreements:

  • Supabase — database and authentication infrastructure
  • Stripe — payment processing
  • Vercel — application hosting
  • Resend / email provider — transactional email delivery

We do not share your data with any other third parties unless required by law or with your explicit consent.

5. Data Storage and Security

Your data is stored on servers located within the European Economic Area (Supabase) and is subject to industry-standard security practices including:

  • Encryption in transit (TLS) and at rest
  • Row-Level Security (RLS) policies ensuring you can only access your own company's data
  • Regular automated backups
  • Access controls limiting which staff can view production data

While we take all reasonable steps to protect your information, no method of internet transmission is 100% secure. We will notify you promptly in the event of a data breach that materially affects your personal information.

6. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request correction of inaccurate or incomplete information
  • Deletion — request deletion of your personal information, subject to our legal obligations
  • Objection — object to the processing of your personal information
  • Portability — request your business data in a portable format (we provide CSV/Excel export)
  • Lodge a complaint — with the Information Regulator of South Africa if you believe we have violated your privacy rights

To exercise any of these rights, contact us at hello@crewinx.co.za. We will respond within 30 days.

7. Data Retention

We retain your account and business data for as long as your account is active. If you cancel your subscription:

  • Your account is paused — data is retained for 12 months in case you return
  • After 12 months of inactivity, we may permanently delete your data
  • You can request immediate deletion at any time by contacting us

Payment records are retained for 7 years as required by South African tax law.

8. Cookies

This marketing website uses minimal cookies:

  • Strictly necessary — session management and security (cannot be disabled)
  • Analytics — anonymous usage data to improve the site (you can opt out)

We do not use advertising or tracking cookies.

9. Children's Privacy

Crewinx is a business platform not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email at least 14 days before taking effect. Continued use of the service after that date constitutes acceptance of the updated policy.

11. Contact and Complaints

For privacy-related queries, contact our Information Officer at:

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa: