Privacy Policy

Information We Collect

Information You Provide

When you create an account, set up a workspace, or use JamCrew, you provide us with information directly. This includes your name, email address, phone number, job role, profile photo, and workspace configuration details such as company name, logo, and branding preferences. If you use paid features, we collect billing information through our payment processor. We also collect the content of messages you send through the platform and any files or documents you upload.

Information Collected Automatically

When you use JamCrew, we automatically collect certain information about your device and usage. This includes your IP address, browser type, operating system, device identifiers, page views, feature interactions, session duration, and referral URLs. We use cookies and similar technologies to collect some of this information, as described in the Cookies section below. We also collect performance data such as page load times and error logs to maintain and improve the platform.

How We Use Your Information

We use the information we collect to:

• Operate the service: Authenticate your identity, resolve your workspace, deliver crew management features, process gig assignments, and facilitate communication between crew members and administrators.
• Improve the platform: Analyze usage patterns to identify bugs, optimize performance, and develop new features that serve crew management workflows.
• Communicate with you: Send transactional notifications (gig offers, schedule changes, payment confirmations), respond to support requests, and share product updates when you have opted in.
• Ensure security: Detect and prevent fraud, unauthorized access, and abuse of the platform. Monitor for suspicious activity and enforce our Terms of Service.
• Legal compliance: Fulfill our legal obligations, resolve disputes, and enforce our agreements.

Cookies

We use essential cookies to maintain your session and authentication state. With your consent, we also use analytics cookies (Google Analytics 4, PostHog) to understand how you use JamCrew, marketing cookies for ad targeting, and personalization cookies for A/B testing and feature flags. You can manage your cookie preferences at any time through our cookie settings panel. For a complete list of cookies we use, see our Cookie Declaration.

Third Parties

JamCrew uses third-party services to operate the platform. These include Convex for database, Clerk for authentication, Vercel for hosting and analytics, Google Analytics for traffic analysis, and PostHog for session recording and feature flags. Each provider processes data in accordance with their own privacy policies and our data processing agreements.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. When you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. If your workspace is downgraded from a paid plan, we retain workspace data for 90 days before it may be permanently deleted. Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

Data Security

We implement industry-standard security measures to protect your data. All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256 encryption. Access to personal data is restricted to authorized personnel on a need-to-know basis. We use Row-Level Security (RLS) policies in our database to ensure strict data isolation between workspaces. We conduct regular security reviews and are working toward SOC 2 Type II compliance.

International Data Transfers

JamCrew is hosted on infrastructure provided by Vercel and Convex, with servers primarily located in the United States. If you access JamCrew from outside the United States, your data will be transferred to and processed in the United States. We rely on standard contractual clauses and the EU-US Data Privacy Framework to ensure that international transfers of personal data meet applicable legal requirements.

Your Rights

Under GDPR, CCPA, and applicable privacy laws, you have the right to access, correct, delete, or export your personal data. You can also object to processing or restrict how we use your information. California residents have the additional right to opt out of the sale of personal information. To exercise any of these rights, contact us at privacy@jamcrew.io.

Children's Privacy

JamCrew is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@jamcrew.io.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. For material changes, we will notify you by email or through a prominent notice on the platform at least 30 days before the changes take effect. Your continued use of JamCrew after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically.

Contact

JamCrew is operated by Made by Jam LLC, based in Gainesville, Georgia. For privacy-related inquiries, reach us at privacy@jamcrew.io. We aim to respond to all requests within 30 days.