DoneCrew Privacy Policy

Information we process

When you sign in with Google, we process the account identifier, name, email address, profile image, and verified-email status Google provides with your permission.

When you use DoneCrew, we process workspace settings, business context, approved sources, uploaded asset metadata, prompts, drafts, decisions, activity records, and the configuration needed to operate your AI employees.

How we use information

We use this information to authenticate you, enforce workspace permissions, train and operate the AI employees you configure, preserve evidence and approval history, secure the service, and respond to support or reliability issues.

DoneCrew does not sell personal information. We do not use Google account data for advertising, and Google account access is limited to the basic openid, email, and profile scopes.

Cookies and website analytics

We use Microsoft Clarity on the public pages and on the signed-in workspace to understand how the product is used. Clarity records sessions and builds heatmaps and aggregate insights. It sets first-party cookies (such as _clck and _clsk) when your browser allows them. We do not use Clarity for advertising or to sell data.

Sensitive content is masked before it reaches Clarity. All input fields are masked by default, and the entire signed-in workspace shell — workspaces, campaigns, chat, approvals, documents, and account surfaces — is excluded from recording, so your business content is not captured. If you block or delete analytics cookies, Clarity stops persisting a session, and the product keeps working normally.

Our infrastructure providers (for example Cloudflare) process request-level operational and security data under their own terms. Those logs are separate from Clarity and are used for availability, abuse prevention, and diagnostics.

AI providers and connected services

A requested AI task may send the minimum relevant workspace context to configured model, media, research, or infrastructure providers. External publication and other write actions remain subject to the controls shown in the product.

If you connect a social network or another third-party service, that provider also processes data under its own terms. Connection credentials are stored only as needed to operate the integration and are protected separately from ordinary workspace content.

Workspace boundaries

A DoneCrew account may belong to multiple workspaces. Memberships and roles determine which workspace data a signed-in user may access; workspaces are not made public by default.

You are responsible for confirming that you are authorized to provide websites, accounts, files, customer information, and other source material to a workspace.

Retention, security, and your choices

You may prepare a portable account export from the product. An account deletion request immediately pauses new work, then asynchronously removes connection credentials and workspace content and detaches personal identifiers.

Billing ledger, security, abuse-prevention, dispute, backup, and legally required records may be retained after deletion for the applicable retention period. Retained records are separated from direct personal identifiers where operationally possible.

Children and policy changes

DoneCrew is a business productivity service and is not directed to children under 13.

We may update this policy as the service changes. The effective date on this page identifies the current version.