Privacy Policy

Last updated: October 31, 2026

This Privacy Policy explains how Cloudline Software Ltd. (formerly ReviewTec Software Ltd.), an Alberta corporation ("we", "us", "our"), the owner and operator of MightyCrews (mightycrews.com), collects, uses, shares and protects personal information. MightyCrews is a registered trade name of Cloudline Software Ltd., and Cloudline Software Ltd. is the data controller for the personal information described here.

Two kinds of information:

• Account information: about the businesses that use MightyCrews and their team members. We decide how it's used, as this policy describes.
• Customer information: about a business's own customers (names, contact details, addresses, job details, messages, invoices and payments). The business enters it and controls it. We hold and process it on the business's behalf, to run MightyCrews for them.
• If you're a customer of a business that uses MightyCrews, that business's own privacy practices apply to your information. Please contact them first; we'll help them answer you.

1. Information we collect

From businesses and their teams:

• name, email, phone, business name and address;
• sign-in details: passwords are stored only in hashed form, and with Google sign-in we receive your Google account identifier, email and name, but never access to Gmail or other Google data;
• team members you invite, their roles and working hours;
• if you sign up from another business's invitation link, which business invited you; that business sees your business name and when you joined, so it knows its free month is coming;
• settings, and the plan you're on.

Billing: Stripe processes plan payments. We receive the plan, status, amounts and dates, and the card's brand and last four digits, never full card numbers.

Customer information a business enters or receives through MightyCrews:

• customers' names, emails, mobile numbers and addresses;
• quotes, jobs, visits, notes and photos;
• invoices, payments and messages;
• what customers send through online booking, the online store, estimators and the customer portal.

Used automatically:

• cookies that keep you signed in, protect forms, and remember a customer portal session;
• technical logs and error reports (IP address, browser, pages and times) kept to run and secure the service, for up to 90 days;
• Google Analytics on our own website (mightycrews.com's public pages, not the MightyCrews app or a business's customer pages), which uses cookies to count visits and show us which pages people find useful;
• how you found MightyCrews when you signed up (for example, one of our ads, a search engine or a link, and the first page you saw), saved with your business account so we can see which of our ads and pages work; it's kept only in your open browser tab until you sign up, not in a cookie;
• no advertising cookies.

2. How we use it

• to provide MightyCrews: scheduling, invoicing, payments, messages, booking, reports and connections;
• to send service messages: sign-in codes, receipts, confirmations, reminders and account notices;
• to bill paid plans;
• to keep MightyCrews secure and working, prevent fraud and abuse, and fix problems;
• to support you when you ask;
• to comply with the law.

We use customer information only to provide MightyCrews to the business it belongs to. We don't sell personal information, and we don't use customers' information for our own marketing.

3. Who we share it with

Only with:

• service providers that run parts of MightyCrews for us, under contracts that limit their use of it:
  • Microsoft Azure (hosting, storage, monitoring);
  • Stripe (payments; card details go directly to Stripe);
  • Twilio (texting);
  • SendGrid (email delivery);
  • Google (sign-in and address suggestions, if used, and Google Analytics on our own website);
  • OpenAI (writing help: only the text a user asks for help with, and never customer records, if the business has it switched on; and for a business's website, the first draft and sample pictures, from the answers the business gives).
• services a business chooses to connect, such as QuickBooks Online or Xero: when a business connects QuickBooks or Xero, the customers, items, invoices, payments and credits it syncs are sent to that business's QuickBooks company or Xero organisation;
• the business's customers, when the business sends them something (a quote, invoice, text or email);
• a buyer or successor, if MightyCrews is sold or reorganized, under this policy;
• when the law requires it, or to protect people's rights, safety or property.

4. Where it's stored

MightyCrews is run from Canada. Information is stored on Microsoft Azure in the United States, and our service providers may process it in the United States and other countries. Information held outside Canada may be accessible to that country's courts and authorities under its laws.

5. How long we keep it

• While an account is open, we keep its information so the business can use it.
• After a business cancels a paid plan or closes its account:
  • it keeps read-only access and can export for 90 days;
  • after reminders at 60 and 85 days, we delete its data;
  • payment and invoice totals are kept for our own tax and accounting records.
• A business can ask us to erase a specific person's details sooner. Personal details are removed, and financial totals stay.
• Technical logs are kept for up to 90 days.

6. Security

• connections are encrypted;
• access is limited to the people who need it;
• each business's data is kept separate;
• passwords are stored hashed;
• connection keys for other services are stored encrypted;
• MightyCrews support sees a business's data only to help it: when its owner gives us access, for as long as they allow, or when someone at the business asks us for help and we open their account to help them, for at most 60 minutes at a time, with an email to the business's owners each time. Everything we do is recorded.

No system is perfectly secure, so we can't guarantee absolute security. If a breach puts your information at real risk, we'll tell you as the law requires.

7. Your choices and rights

• You can ask to see, correct or delete your personal information, or withdraw consent, subject to legal limits.
• Team members can update most details in MightyCrews.
• Customers of a business should contact that business; we'll help it respond.
• Texts: a customer can reply STOP to any text to stop texts from that business (see the Text Messaging Terms).
• Review request emails: each one includes a way to stop them.

Depending on where you live, you may have rights under:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA);
• Alberta's Personal Information Protection Act;
• British Columbia's Personal Information Protection Act;
• US state privacy laws.

We may need to confirm who you are before acting on a request, and we'll reply within the time the law requires.

If you're not satisfied with our response, you can contact:

• the Office of the Privacy Commissioner of Canada;
• the Office of the Information and Privacy Commissioner of Alberta;
• the Office of the Information and Privacy Commissioner for British Columbia;
• or the privacy regulator where you live.

8. Children

MightyCrews is for businesses and isn't meant for children under 13. We don't knowingly collect their information.

9. Changes

We may update this policy. We'll change the "Last updated" date, and for significant changes tell account owners by email or in MightyCrews.

10. Contact

Privacy questions or requests: support@mightycrews.com.