Privacy Policy

1. Who we are

CrewPilot is a product and brand operated by Pascal Blue, a Sole proprietorship in India. In this policy, “we”, “us”, and “our” refer to Pascal Blue in connection with the CrewPilot service.

2. Scope

This policy describes how personal data is handled when the marketing website is visited, when an account is created, when the CrewPilot application is used, or when there is other online interaction. It applies to visitors and registered users unless a separate agreement (for example an enterprise contract) states otherwise.

3. Categories of personal data

Depending on use of the service, categories processed may include:

• Identity & account: name, email address, password (stored using one-way hashing—not in plain text), organization name, role, and profile details provided voluntarily.
• Workspace & operational content: data entered into CrewPilot (e.g. tasks, assets, incidents, chat messages, files, logs), which may include personal data relating to team members or third parties.
• Technical & usage: IP address, device/browser type, approximate location derived from IP, timestamps, diagnostic logs, cookies and similar technologies (see the Cookie Policy).
• Billing: for paid plans, payment-related identifiers and billing data as processed by payment partners (full card numbers are not stored on application servers when handled solely by the payment gateway).
• Support & communications: content submitted in support or incident reports.

4. Purposes & legal bases (India)

Personal data is used to:

• Provide, secure, and improve the CrewPilot service;
• Authenticate accounts, enforce limits, and prevent abuse;
• Communicate about the service, including transactional and (where permitted) product messages;
• Meet legal, regulatory, and tax obligations in India;
• Analyse aggregated or de-identified usage to improve reliability and experience.

Where the Digital Personal Data Protection Act, 2023 (India) and related rules apply, processing may rely on consent (where required), legitimate uses for delivering the requested service, and compliance with law. Optional marketing communications require consent where mandated and may be withdrawn.

5. Sharing & processors

Personal data is not sold. It may be shared with:

• Customer organizations: administrators and members see workspace content according to product permissions.
• Service providers: hosting, email delivery, analytics, payment processing, support tooling, and security vendors—under arrangements requiring confidentiality and appropriate security.
• Legal & safety: regulators, courts, or others when required by law or to protect rights, safety, and integrity of the service and its users.

6. International transfers

Infrastructure or subprocessors may be located outside India. Cross-border transfers use measures consistent with applicable law (e.g. contractual safeguards or consent where required).

7. Retention

Data is retained only as long as needed for the purposes above, including legal, accounting, and dispute resolution. Workspace administrators may delete or export certain data subject to product capabilities; backups may retain records for a limited period.

8. Security

Reasonable technical and organisational measures are applied—such as encryption in transit (HTTPS), access controls, and monitoring. No transmission or storage method is fully risk-free; use of strong passwords and careful handling of invite links and session cookies is recommended.

9. Rights

Under applicable law in India, rights may include access, correction, update, or deletion of personal data; withdrawal of consent where processing is consent-based; and complaint to a relevant authority. Requests may be submitted via the Contact page. Identity verification may be required before responding.

10. Children

CrewPilot is intended for business use and is not directed at children. Personal data from children is not knowingly collected without appropriate authority. Contact the address above if such data is believed to have been collected in error.

11. Changes

This policy may be updated from time to time. Revised versions will be posted on this page and the “Last updated” date adjusted. Material changes may be communicated through the product or by email where appropriate.

12. Contact

Further questions: Contact & business details.