Privacy

Privacy at a glance

The short version, with the detail in the sections that follow:

• This website holds no workforce data. It has no employee, time, location or payroll records in it at all. The only thing it asks you for is what you type into the contact form.
• The service holds your company’s records — employees, projects, time entries, schedules, leave and payroll-preparation data — because your company put them there to run its business.
• Your employer decides what is recorded about you. If your hours are in CrewAware, your employer chose that, and your employer is the right first stop for questions about it.
• Location is captured at punch events only. Clocking in and out, breaks, and project transfers. Not continuously, and not while a worker is off the clock.
• Analytics is off until you allow it. No analytics tag, cookie or request exists on this site before you say yes, and the Global Privacy Control signal is honored.
• We do not sell personal information, and we do not use workforce records for advertising or profiling.

Scope and who we are

This notice explains how information is handled by CrewAware, a product of Tradeforce Systems, LLC (“Tradeforce Systems”, “we”). It covers two connected things:

• this website — crewaware.app, the CrewAware marketing site you are reading; and
• the CrewAware service — the workforce management application at app.crewaware.app, including its account, onboarding and billing surfaces.

Other Tradeforce products and sites — including ServusOne, System 1 Build and the corporate site at buildwithtfs.com — are separate properties with their own privacy documents, and this notice does not govern them.

Your company’s role and ours

CrewAware is business software used by companies, and that shapes almost everything in this notice.

When a company creates a CrewAware workspace, that company decides which employees, projects, crews and time records exist in it, who can see them, and how long they are kept. For those workforce records the customer company is the one responsible for the decisions about the data; we process it on that company’s behalf in order to provide the service to it.

For a smaller set of information we decide the purposes ourselves — who visits this website, who creates and administers an account, who contacts us, and how subscriptions are billed. That information is described below in its own right.

If you are a worker whose hours are recorded in CrewAware, your employer is the right first contact for questions about what is recorded and why, because your employer decided it. We will still help route a request you send us, and we will be straight with you about what is actually held.

Information we handle

CrewAware does not use face or fingerprint verification, and it holds no biometric information of any kind.

Where information comes from

• From you — what you type into the contact form, and what you enter when you create an account.
• From your employer or company administrator — employee, project, crew, cost-code, schedule and leave records are created and maintained by the company that runs the workspace.
• From use of the service — time records and their location evidence are produced when a worker clocks in, takes a break, transfers project or clocks out.
• From your device and browser — the standard request data any web service receives, and, only with your consent, website analytics.
• From our payment processor — subscription and billing status for a paying company.

We do not buy personal information, and we do not enrich accounts from data brokers, advertising networks or social platforms.

This website

This website never holds employee, time, location or payroll data. The only information it asks you for is what you choose to submit through the contact form: your name, your email address, a topic, your message, and optionally your company. Contact submissions are validated and relayed to the responsible CrewAware mailbox; this website does not keep its own database of inquiries, and your submission is not added to a marketing list.

The technical processing that does happen here is limited to what is necessary to serve and protect the site:

Standard web-server request data (such as your IP address, browser characteristics and the pages requested) is processed by the website’s hosting infrastructure as needed to deliver and secure the site.

Website cookies and analytics

This website may use consent-governed analytics (Google Analytics 4) to measure how the site is used. Analytics is off by default and runs only after you allow it in the consent panel. If you refuse, withdraw, or your browser sends the Global Privacy Control signal, analytics does not run — a stored “allow” never overrides a current GPC signal.

When analytics runs, it is deliberately narrow:

• page addresses are stripped of query strings and fragments before anything is sent, and cross-site referrers are reduced to their origin;
• events are limited to a small named set (page views, scroll depth, navigation and marketing interactions) with a strict property allowlist;
• no name, email, phone number, employee identity, project name, location coordinate, time record, payroll value or free-text content is ever sent — this website never holds such data in the first place.

You can change or withdraw your choice at any time from the Your Privacy Choices control in the footer. No advertising, targeting or cross-site tracking technology runs on this site in any consent state.

The CrewAware application is a separate matter: it is not a marketing surface, and this website’s analytics choice is not shared with it.

Location and geofence evidence

When a worker clocks in or out, starts or ends a break, or transfers between projects, the service records that punch’s location and its accuracy as part of the time record, and evaluates it against the project’s geofence where one is defined.

Location is captured at punch events only. The service does not continuously track devices, does not check in periodically, and does not collect location while a worker is clocked out. There is no background location capture in CrewAware.

When a device cannot provide a location, the record says so. A denied permission, a disabled location service, an unavailable fix, a low-accuracy reading and a stale one are recorded as what they are and are never presented as evidence that someone was somewhere they should not have been.

Geofence evaluation is a company setting: a company can have CrewAware flag punches from outside a project boundary for review, or not evaluate geofences at all. There is no mode that blocks a worker from clocking in based on a location reading.

Telling a workforce that punch locations are recorded is the employer’s responsibility, and the terms say so.

Billing information

CrewAware subscriptions are billed through Stripe. Payment details are collected by Stripe’s embedded payment surface inside the service and are processed by Stripe; CrewAware receives subscription status and billing metadata rather than full card numbers. The free trial starts without any payment method.

A company’s billable employee count — derived from its own active roster — is used to calculate what its subscription costs. No individual employee record is sent to the payment processor for that purpose.

How information is used

We use the information described above only to:

• provide, operate and secure the website and the service;
• operate accounts, workspaces, subscriptions and billing;
• perform the service a customer company asks for — recording time, evaluating geofences, preparing payroll-ready exports and producing the reports it runs;
• read and respond to inquiries you send us;
• prevent abuse of the website and the service;
• measure website usage where you have allowed analytics, as described above; and
• meet legal, tax and business-record obligations that apply to us.

We do not sell personal information. We do not use workforce records for advertising, profiling or automated decision-making about individuals, and we do not use them to train anything.

Service providers

We use a small number of providers to run CrewAware, each for a specific job:

• Cloudflare — serves and protects this website, processing network request data as needed to do so;
• Stripe — payment and subscription processing for the service, as described under Billing;
• email delivery providers — transmit service email such as verification messages, and (when contact-form delivery is configured) relay website inquiries to us via Resend;
• Google — website analytics only, and only where you have allowed it.

Providers act on our instructions for the purpose they are engaged for. We do not use providers to analyze, advertise to or profile workers or website visitors.

Sharing and disclosures

We do not sell information from the website or the service, and we do not share it for advertising or cross-context behavioral advertising. Information is disclosed only:

• to the service providers described above, as needed to operate CrewAware;
• within a customer company’s own workspace, according to the roles and permissions that company administers;
• to the customer company itself, which can see and export the records in its workspace;
• where we are required to disclose it by law, or to establish, exercise or defend legal claims; and
• in connection with a merger, acquisition or transfer of the business, in which case the recipient remains bound by a notice at least as protective as this one.

Retention

Workforce records in a company’s workspace are that company’s business records, and are retained for as long as the company maintains them in the service. Time records in particular are designed to persist: a time entry cannot be deleted by anyone in CrewAware, including an administrator, because a record that can be deleted is not evidence.

Account information is retained while the account exists. Contact correspondence is retained as long as needed to handle the inquiry and to meet legal or business-record obligations. This website’s security cookie is short-lived and expires on its own; the privacy choice stored in your browser remains until you clear it.

We do not publish fixed retention periods for service data, and we do not promise deletion on a schedule. Employment and wage records are subject to retention obligations that differ by jurisdiction and by employer, and a period stated here would be a promise made without knowing yours. Where you need a specific arrangement, ask, and we will tell you what is actually possible rather than what sounds reassuring.

Security

How CrewAware protects workforce data — authenticated access, company isolation, role-based permissions, auditable records and server-authoritative controls — is described in engineering terms on the security page, which states what can actually be demonstrated and nothing beyond it.

No method of transmission or storage is completely secure, and we do not promise otherwise. We hold no security certification or formal attestation, and nothing in this notice or on the security page should be read as one.

Your privacy rights and requests

The Your Privacy Choices control in the footer of every page opens the consent panel, where you can allow, refuse or withdraw optional analytics at any time. The Global Privacy Control signal is honored automatically.

Depending on where you live, you may have rights regarding personal information about you — typically to know what is held, to obtain a copy, to correct it, to ask for deletion, and not to be discriminated against for asking. Exercising a right will never be held against you, and we will not charge you for making a request.

To make a privacy request, emailprivacy@buildwithtfs.com. That mailbox is monitored by Tradeforce Systems and handles privacy requests for every Tradeforce product, because the company — not the individual product — is who a request is made to. Requests are handled by people; CrewAware has no self-service export of account or personal data, and this notice promises no machine-readable export beyond what the law requires.

The contact form remains available for ordinary questions about CrewAware, including privacy questions you would rather ask than formally request. It is a different queue from the address above, and a rights request should go to the address.

Two things worth knowing before you ask. First, if your request concerns workforce records inside an employer’s workspace, the decisions about that data are your employer’s, so we will normally need to route the request through them — we cannot delete your employer’s business records on your instruction. Second, we will verify that a request comes from the person it concerns, or from someone authorized to act for them, before acting on it.

We will respond honestly about what is actually held, including when the answer is that we hold nothing.

Where information is processed

CrewAware is operated from the United States, and the service and its providers process information there. This website is delivered through a global content network, so the request that fetched this page may have been served from a location near you.

We make no international-transfer commitment beyond that statement of fact. If your organization requires a specific transfer mechanism or data-location arrangement, ask before you subscribe rather than after.

Links to other properties

This site links to the CrewAware application and to other Tradeforce sites, and may link to external destinations. Each destination has its own privacy practices; this notice ends where those properties begin.

Children’s privacy

CrewAware is business software for companies and their workforces. It is not directed to children, we do not knowingly collect information from children, and it is not intended for anyone below the minimum working age that applies to a customer company’s workforce. If you believe a child’s information has reached us, contact us and we will deal with it.

Changes to this notice

We may update this notice from time to time; the version published on this page is the current one, and its date appears at the top. Where a change materially affects how information about you is handled, we will make that clear rather than relying on the date alone.

Contact

Privacy rights requests: privacy@buildwithtfs.com. General questions about CrewAware: the contact form. The related terms govern use of the website and the service.