Privacy Policy

1. Introduction

This Privacy Policy explains how Crewly AI ("we", "us", or "our") collects, uses, and protects information when you use the Crewly platform at crewlyai.com and the "Crewly in Chrome" browser extension (collectively, the "Services").

2. Information We Collect

2.1 Account Information

When you sign in via Google OAuth, we receive your name, email address, and profile picture to create and manage your account. We do not store your Google password.

2.2 Chrome Extension Data

The "Crewly in Chrome" extension requests the following permissions:

• tabs — To read tab URLs and titles so Crewly agents can navigate and interact with web pages on your behalf.
• tabGroups — To organize browser tabs into groups when agents work on multiple tasks simultaneously.
• activeTab — To interact with the currently focused tab when you invoke an agent action.
• scripting — To inject content scripts that enable agents to read page content and perform UI interactions (clicking, typing, scrolling).
• storage — To persist your connection settings and authentication token locally in the browser.
• cookies — To manage authentication session cookies for secure communication between the extension and Crewly Cloud services.
• debugger — To use the Chrome DevTools Protocol for advanced page inspection and interaction capabilities required by agent automation.
• identity — To authenticate you with your Google account via Chrome's built-in identity API.
• offscreen — To create offscreen documents for processing tasks that cannot run in the service worker (e.g., clipboard operations).
• host_permissions (<all_urls>) — To allow agents to interact with any website you direct them to. The extension only activates on pages when you explicitly start an agent task.

2.3 Usage Data

We may collect anonymized usage analytics (page views, feature usage) to improve the Services. We do not track your browsing history or the content of pages you visit outside of active agent tasks.

3. How We Use Your Information

• To authenticate you and manage your account
• To relay commands between Crewly Cloud and your browser extension
• To improve and maintain the Services
• To provide customer support

4. Data Sharing & Third Parties

We do not sell your personal information. We may share data with:

• Google — For OAuth authentication (governed by Google's Privacy Policy)
• AI Provider APIs — Agent commands may be processed through third-party AI services (Anthropic, Google, OpenAI). Page content accessed during agent tasks may be sent to these providers to execute your instructions.

5. Data Storage & Security

Authentication tokens are stored locally in your browser via Chrome's storage API. Communication between the extension and Crewly Cloud uses end-to-end encryption (E2EE) over secure WebSocket connections. We use industry-standard security measures to protect your data in transit and at rest.

6. Data Retention

Account data is retained while your account is active. You can request deletion of your account and associated data at any time by contacting us. Extension-local data (tokens, settings) is removed when you uninstall the extension.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent at any time by uninstalling the extension or deleting your account
• Export your data in a portable format

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or through the extension.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected]