Data Export and GDPR Compliance

Your Data Ownership

All data you enter into CrewBrix — customers, jobs, invoices, photos, notes — belongs to you. CrewBrix processes your data on your behalf and does not sell it to third parties.

Exporting Your Data

To download a complete copy of your account data:

1. Go to Settings → Data & Privacy → Export Data.
2. Select the data types to include:

• Customers and contacts
• Jobs and job history
• Invoices and payments
• Team members
• Notes and photos

1. Choose the format: CSV (for spreadsheet / database import) or JSON (for developer use).
2. Tap Request Export. You'll receive an email when the export is ready (typically within 1 hour for most accounts).

Exports are encrypted and the download link expires after 72 hours.

Deleting Your Account

To permanently delete your account and all associated data:

1. Go to Settings → Data & Privacy → Delete Account.
2. Read the confirmation screen — deletion is permanent and irreversible.
3. Type your business name to confirm.
4. Tap Delete Account.

Account deletion is processed within 30 days per our data retention policy. Backups are purged within 90 days. Financial transaction records required for legal compliance (e.g. Stripe transaction history) are retained for the legally required period.

GDPR — Data Subject Requests

If a customer requests access to, correction of, or deletion of their personal data (their right under GDPR Article 15, 16, and 17):

Right of Access / Data Portability:

1. Go to the customer's profile.
2. Tap ··· (more options) → Export Customer Data.
3. You receive a CSV of all data held for that customer.

Right to Erasure:

1. Go to the customer's profile.
2. Tap ··· → Delete Customer → confirm.
3. All personally identifiable information is removed from active records. Anonymised data (e.g. job counts) may be retained for aggregate reporting.

CCPA Compliance

California residents have similar rights under the CCPA. CrewBrix's data handling for CCPA follows the same process as GDPR above.

Data Security

• All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
• Payments are handled by Stripe — no card data ever reaches CrewBrix servers.
• Row-level security ensures each account's data is logically isolated.
• CrewBrix undergoes regular third-party security audits.

For a full description of our data practices, see our Data Practices page.