Privacy policy

Last updated: July 18, 2026

This policy explains how Mount Dora Holdings NC LLC (“crewmuster,” “we”) handles personal information for visitors to crewmuster.com and for the account holders who use our app.

One important distinction. When an operator uses crewmuster to manage their crew, the personal data about those employees is controlled by the operator, not by us — we process it on the operator’s behalf as described in our Data processing agreement. This privacy policy covers the information we handle as a controller: data about our website visitors, prospects, and the people who administer crewmuster accounts.

1. Information we collect

• Account information — name, email, business name, and login details when you sign up.
• Billing information — plan, number of locations, and payment details (handled by our payment processor; we don’t store full card numbers).
• Usage information — how you interact with the service, device and browser data, and log data such as IP address and timestamps.
• Communications — messages you send us (for example, support requests at hello@crewmuster.com).
• Cookies and similar technologies — used to keep you signed in, remember preferences, and understand usage. See “Cookies and analytics” below.

2. How we use information

• provide, maintain, and secure the service;
• process payments and manage your subscription;
• respond to your requests and provide support;
• improve the service and develop new features;
• send service and, where permitted, marketing communications (you can opt out of marketing at any time);
• comply with legal obligations and enforce our terms.

3. Legal bases (where applicable)

Where data protection law (such as the GDPR) applies, we rely on these bases: performance of a contract (to provide the service), legitimate interests (to operate and improve the service and keep it secure), consent (for certain communications and cookies), and legal obligation.

4. How we share information

• Service providers (sub-processors) — hosting, payments, analytics, and similar vendors who process data on our behalf under contract. A current list is maintained with our DPA.
• Legal and safety — when required by law or to protect rights, safety, and the integrity of the service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We don’t sell your personal information.

5. Cookies and analytics

We use a small number of cookies and similar technologies to run the app and keep you signed in. You can control cookies through your browser settings; blocking some may affect functionality.

On our marketing site we use Cloudflare Web Analytics, a privacy-first measurement tool that does not use cookies and does not fingerprint or track individuals across sites. It collects only aggregate metrics such as page views, referrers, and general location.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the service, then for a reasonable period to meet legal, accounting, or reporting requirements. Customer data (including crew data) is retained and deleted as described in the DPA.

7. Security

We use technical and organizational measures appropriate to the risk — including encryption in transit, role-based access controls, and database-level separation of each customer’s data — to protect personal information. No method of transmission or storage is completely secure, and we can’t guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, email hello@crewmuster.com. If your request concerns crew data held on an operator’s behalf, we’ll refer you to that operator (the controller) and assist them as described in the DPA.

9. California privacy rights (CCPA/CPRA)

If you’re a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you specific rights over the personal information we hold about you. This section describes those rights and how to use them. It covers the information we handle as a controller; where we process crew data on an operator’s behalf, that operator is the controller and our DPA governs, so we’ll refer your request to them.

• Right to know. You can request the categories of personal information we’ve collected about you, the categories of sources, the business or commercial purposes for collecting it, the categories of third parties we disclose it to, and the specific pieces of personal information we hold about you.
• Right to delete. You can request that we delete personal information we collected from you, subject to the exceptions the law allows (for example, to complete a transaction, provide the service, or meet a legal obligation).
• Right to correct. You can request that we correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we don’t do either, there’s nothing for you to opt out of — but if that ever changes, we’ll update this policy and provide a “Do Not Sell or Share My Personal Information” option first.
• Right to non-discrimination. We won’t discriminate against you for exercising any of these rights — for example, by denying you the service, charging a different price, or providing a different level of quality.

How to submit a request. Email hello@crewmuster.com with your request. We’ll take reasonable steps to verify your identity by matching details we already hold, and we’ll respond within the timeframes the CCPA requires. You may use an authorized agent to submit a request on your behalf, subject to verification.

Appeals. If we deny your request, you can appeal by replying to our decision, or by emailing hello@crewmuster.com with “Appeal” in the subject line. If you’re still not satisfied, you may contact the California Privacy Protection Agency or the California Attorney General’s office.

10. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

11. Children’s privacy

The service isn’t directed to children under 16, and we don’t knowingly collect their personal information.

Where an operator uses crewmuster to manage crew who are minors, the operator acts as the controller of that data, and the operator is responsible for providing any notices and obtaining any consents the law requires for those minors — consistent with the controller/processor split in our DPA and the operator’s responsibilities in our Terms of service (section 5).

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll provide notice (for example, by email or in the app) and update the “last updated” date above.

13. Contact

Questions or requests about privacy? Email hello@crewmuster.com or see our contact page.