Crew & Cost
Effective date: August 14, 2026
Last updated: August 14, 2026
1. Who we are
Crew & Cost is operated by 1Site2See, LLC, an Alabama limited liability company ("1Site2See," "we," "us," or "our").
This Privacy Policy explains how we collect, use, share, and protect information in connection with the Crew & Cost website (crewandcost.com) and application (app.crewandcost.com) (the "Service").
2. Two kinds of information — an important distinction
Crew & Cost handles two categories of information, and our role differs for each.
Account Information — we are the controller. This is information about the people and companies who sign up for and use Crew & Cost. We decide how and why it is processed, and this Policy governs it directly.
Customer Content — we are the processor. This is the business data our customers enter into the Service: jobs, bids, costs, invoices, crew member records, certifications, licenses, and safety incidents. Our customer — the contracting company — controls this information and decides what to collect and why. We process it on their behalf and at their direction.
This distinction matters most for information about crew members and employees. If you are a crew member whose information appears in Crew & Cost, your employer — not 1Site2See — determines what is recorded about you. See Section 6.
3. Information we collect
Information you provide
Account and profile information: name, email address, and password (stored in hashed form — we never store passwords in plain text).
Organization information: company name and the roles you assign to users.
Billing information: we use Stripe to process payments. We do not collect, receive, or store full payment card numbers. We store a Stripe customer identifier, a subscription identifier, and your subscription status.
Communications: if you contact us for support, we retain your messages and our responses.
Waitlist and marketing: if you submit your email address on crewandcost.com, we retain it to contact you about the Service.
Customer Content you enter
Data entered into the Service, which may include: job and project records, bids and estimates, cost entries and receipts, invoices and payments, client and project details, crew member records, certifications, compensation information, contractor license records, safety incident records, and uploaded file attachments.
Information collected automatically
Usage and analytics data: we use analytics provided through our hosting platform to understand how the Service is used — including pages viewed, approximate visit counts, referring source, device type, and general geographic region (country level).
Log data: IP address, browser type, operating system, and timestamps, collected automatically when you access the Service.
Authentication cookies and local storage: required to keep you signed in and to maintain your session. These are strictly necessary for the Service to function. We do not use advertising cookies or third-party ad tracking.
4. How we use information
We use Account Information to:
- Provide, operate, and maintain the Service
- Authenticate users and secure accounts
- Process subscriptions, payments, and seat changes
- Send transactional and service emails, including license and certification expiration alerts, bid follow-up reminders, account confirmations, password resets, and billing notices
- Respond to support requests
- Monitor performance, diagnose problems, and improve the Service
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our Terms of Service
We process Customer Content only to provide the Service to the customer, as directed by that customer, and as required by law.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use Customer Content to train machine learning or AI models.
5. Sensitive information — safety incident records
The Service allows customers to record workplace safety incidents. These records may include information about injuries, medical treatment, and lost work time relating to identifiable individuals.
We recognize this information is sensitive. We:
- Process it solely to provide the Service to the customer who entered it
- Restrict access to the organization that owns the record, enforced at the database level
- Do not use it for any secondary purpose, analysis, or product development
- Do not disclose it except as described in Section 7
Customers are responsible for ensuring their collection and use of this information complies with applicable law, including any workplace privacy, medical confidentiality, and recordkeeping requirements that apply to them.
6. Information about crew members and employees
If you are an employee, crew member, or subcontractor whose information appears in Crew & Cost, please note:
- Your employer (our customer) placed that information into the Service and controls it
- We process it only on their instructions
- Requests to access, correct, or delete your information should be directed to your employer, who can fulfill them directly within the Service
- If you contact us instead, we will refer you to the relevant customer and assist them in responding, as required by law
7. When we share information
We do not sell your information. We share it only in these circumstances:
Service providers (subprocessors)
We use the following providers to operate the Service. Each processes information only as needed to provide their service to us:
| Provider | Purpose | Data involved |
|---|---|---|
| Lovable (and its underlying cloud infrastructure, including Supabase) | Application hosting, database, authentication, file storage, analytics | Account Information and Customer Content |
| Stripe, Inc. | Payment processing and subscription billing | Name, email, billing details, payment card data (collected directly by Stripe) |
| Resend | Transactional email delivery | Recipient email address and message content |
Other disclosures
- Legal requirements: when required by law, subpoena, court order, or other legal process, or to respond to a lawful government request
- Safety and rights: when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of 1Site2See, our users, or the public, or to investigate fraud or security incidents
- Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets. We will notify affected customers before their information becomes subject to a different privacy policy
- With your direction: when you ask us to share information or authorize an integration
8. Data storage, location, and security
Location. Information is stored on servers located in the United States, currently in the US West (Oregon) region. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
Security measures. We take reasonable measures to protect information, including:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest, as provided by our infrastructure providers
- Row-level security enforced at the database level, so each organization's records are isolated from every other organization
- Private, access-controlled file storage for uploaded attachments
- Role-based permissions within each organization
- Passwords stored using industry-standard hashing
No guarantee. No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you use the Service at your own risk.
Breach notification. If we become aware of a security breach affecting your personal information, we will notify you and any applicable regulator as required by law.
9. Cookies and tracking
We use:
- Strictly necessary cookies and browser local storage to authenticate you and maintain your session. The Service will not function without these.
- Analytics as described in Section 3, to understand aggregate usage of the Service.
We do not use advertising cookies, and we do not permit third-party advertising networks to track you through the Service.
Most browsers let you block or delete cookies, but blocking strictly necessary cookies will prevent you from signing in. We do not currently respond to browser Do Not Track signals, as no common standard has been adopted.
10. Data retention
- Active accounts: we retain Account Information and Customer Content for as long as your account is active.
- After cancellation or suspension: we retain organization data for 90 days, after which it may be permanently deleted. This matches the retention period stated in Section 9 of our Terms of Service.
- Data export: an Owner may export core organization records in CSV format for at least 30 days following suspension.
- Backups: residual copies may persist in encrypted backups for a limited additional period before being overwritten.
- Legal holds: we may retain information longer where required by law or to resolve disputes.
11. Your rights and choices
All users may:
- Access and update account and profile information directly in the Service
- Export organization data in CSV format
- Delete your account and organization data by contacting us, or by using in-app deletion where available
- Opt out of non-essential emails. Notification preferences for license expiry, certification expiry, and bid follow-up alerts can be managed in your account settings. Transactional emails — such as password resets, billing notices, and security alerts — cannot be opted out of while your account is active.
State privacy rights (United States)
Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws may have additional rights, including the rights to know what personal information we collect, to access and obtain a copy of it, to request correction or deletion, and to not be discriminated against for exercising these rights.
We do not sell personal information or share it for cross-context behavioral advertising, so there is no opt-out for those activities.
To exercise these rights, contact us using the details in Section 14. We will verify your identity before responding and will respond within the timeframe required by applicable law. You may designate an authorized agent to make a request on your behalf.
If you are outside the United States
The Service is intended for use by businesses in the United States.
12. Children's privacy
The Service is a business tool intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13, and the Service is not directed to children. If we learn we have collected such information, we will delete it promptly. If you believe a child has provided us information, contact us.
Note that customers may record information about employees who are minors under applicable labor law. That information is Customer Content controlled by the customer, who is responsible for the legality of collecting it.
13. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by prominent notice within the Service before the changes take effect. The "Last updated" date at the top reflects the most recent revision. We encourage you to review this Policy periodically.
14. Contact us
Questions, requests, or complaints about this Policy or your information:
1Site2See, LLC
10221 County Road 49
Heflin, AL 36264
Email: info@1site2see.com
We will respond as promptly as we can, and within any timeframe required by applicable law.
Crew & Cost is a product of 1Site2See, LLC.