Privacy Policy

We collect the following categories of information:

• Account information. Your email address, and any public display name and profile photo you choose to add. We use passwordless sign-in, so we do not collect or store passwords.
• Address and location information. When you add a home, you provide a street address. Your exact street address and its precise geocoded coordinates are stored privately and are never published; we use them only to derive your neighborhood, place an approximate neighborhood-level map pin, and enforce our one-account-per-home rule. Public pages show only neighborhood-level location.
• Content you submit. Project details, contractor names and contact information you enter, ratings, notes, and photos. Photos may contain embedded metadata (such as EXIF GPS coordinates); we may read this metadata to flag content whose location appears mismatched with a listing for moderation review.
• Verification documents. If you request a Verified Home badge, you may submit proof of residence (such as a utility bill or ID). These are stored in restricted, non-public storage and are automatically deleted after review, and in any event within 30 days.
• Usage and technical information. IP address, browser and device information, and log data. We record authentication attempts (including IP address) for security, abuse prevention, and rate limiting.
• Locally stored identifiers. To let you react to projects (“kudos”) and save homes without an account, and to remember your feed layout, we store small identifiers and preferences in your browser's local storage. These stay on your device.

• Operate and provide the Service, including creating listings, placing approximate map pins, and enforcing listing uniqueness.
• Authenticate you and secure your account, and prevent fraud, abuse, and spam (including rate limiting).
• Review Verified Home requests and moderate reported content.
• Send you communications about the Service (see Section 4 below).
• Analyze and improve the Service.
• Comply with law and enforce our Terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers. Companies that help us run the Service, under contracts limiting their use of your data: Vercel (hosting, file storage, and privacy-focused analytics), Mapbox (address geocoding), and Resend (email delivery). Sending an address to Mapbox for geocoding and an email to Resend for delivery are the main data transfers involved.
• At your direction. Content you post to a public listing (neighborhood-level location, display name, ratings, notes, and photos) is, by design, publicly visible.
• Legal and safety. When we believe disclosure is required by law, or reasonably necessary to protect the rights, safety, or property of WhichCrew, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We send transactional and service messages that are necessary to operate your account — such as sign-in links, security and account notices, and updates about your listings or claims. You cannot opt out of these while you maintain an account.

We may also send optional “neighborly” update emails (such as summaries of activity on your projects). You can turn these off at any time using the unsubscribe link in the email or in your account settings, without affecting transactional messages.

Public: your neighborhood-level location, public display name and avatar, project details, ratings, notes, and photos, and contractor information you enter.

Private (never published): your exact street address and precise coordinates, your email address, verification documents, and technical data such as IP addresses.

We keep account and content information for as long as your account is active or as needed to provide the Service. Verification documents are deleted after review, and in any event within 30 days. When you delete content or your account, we remove it from the live Service, though residual copies may persist in routine backups for a limited period before being overwritten. We retain certain records (such as authentication logs) as needed for security and legal compliance.

If you are a California resident, you have the right to:

• Know and access the personal information we have collected about you, and the categories of sources and recipients.
• Request deletion of your personal information, subject to legal exceptions.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of your personal information — though we do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
• Not be discriminated against for exercising these rights.

To exercise any of these rights, email us at hello@whichcrew.com. We will verify your request using the email associated with your account and respond as required by law. You may use an authorized agent to submit a request on your behalf.

We use strictly necessary cookies to keep you signed in and to secure your session. We use Vercel's privacy-focused analytics to understand aggregate usage; it does not use cookies to track you across other sites. As noted above, we also store small preference identifiers in your browser's local storage. Most browsers let you control or delete cookies and local storage through their settings.

We take reasonable measures to protect your information, including storing exact addresses and verification documents in restricted, non-public storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children, and is intended only for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

Questions about this Privacy Policy or your information may be directed to hello@whichcrew.com.