Privacy Policy

Email address (entered at checkout). Intake answers (trade, state, owners, capital, services, pricing approach, and the owner decisions recorded in your founders worksheet). Anything you type into the intake chat or the Operator’s Room chat, and anything you save in your working document. Payment metadata from Stripe (last four digits and country, never full card number). Usage analytics: page views, session timing, and whether a checkout was started or completed. Your email address if you ask us to send you the example pack or the result of a free tool.

On our public pages (the marketing site, the example pack, and the free tools) we also record a replay of the browsing session so we can see where the site confuses people. Replay is off on your intake, your dashboard, your documents, and the chat, and anything typed into a form field is masked before it leaves your browser.

To assemble and deliver your document pack. To answer questions about your own documents in the Operator’s Room chat. To support your account and answer questions. To see which pages lead to a purchase and where visitors get stuck. To send you the thing you asked for, if you gave us your address on a public page. To improve the product in aggregated and anonymized form, which you can turn off in your account settings.

Stripe (payment processing). Supabase (database and auth). Anthropic (AI document generation and the Operator’s Room chat). Voyage AI (turns the text of your documents into search vectors so the chat can find the right passage). Resend (transactional email). Inngest (background job orchestration). PostHog (product analytics, session replay on our public pages, and error diagnostics). Vercel (hosting and page performance measurement). We do not sell your data. We do not share your intake answers with anyone outside of these processors, and we do not send your documents, your chat, or your intake answers to PostHog as analytics data. When a page errors, the error message and the address of the page you were on are sent to PostHog so we can fix it; an error message can occasionally quote a value you entered.

All data is encrypted in transit (HTTPS) and at rest. Access to your intake and documents is restricted by row-level security to your authenticated session.

We retain your intake answers, chat transcripts, and documents indefinitely so you can re-download them. To delete your data, email hello@crewplaybook.com. Deletion is irreversible.

If you gave us your address on a public page to have the example pack or a tool result sent to you, we keep that address until you unsubscribe. Every one of those emails carries an unsubscribe link. It opens a page with one button and no sign-in. Unsubscribing there stops the marketing email and does not touch anything you bought: your pack, your dashboard, and the emails about your own order keep working.

You have the right to access, correct, export, and delete your data. Email hello@crewplaybook.com to exercise these rights. California residents have additional rights under the CCPA; European residents have rights under the GDPR. We honor both.

We use first-party cookies for authentication and session management, and PostHog sets a first-party cookie so a returning visit counts as the same visit rather than a new one. We do not use third-party advertising trackers and we do not run advertising or remarketing pixels. Vercel Speed Insights measures page performance without cookies and without identifying you.

Privacy questions: hello@crewplaybook.com.