Privacy Policy

Last updated: September 9, 2026

Template policy — have an attorney review before relying on it.

Who we are

Crest ("we", "us") provides a customer relationship management platform for home-service businesses. This policy explains what we collect and how we use it.

Information we collect

Account data — your name, email, company details, and password (stored only as a salted hash).
Customer data you bring — contact details, messages, appointments, and estimates your business stores in Crest. This data belongs to you; we process it only to provide the service.
Communications — SMS and call metadata processed through our telephony provider (Twilio) on your behalf.
Usage and billing — basic usage logs and, if you subscribe, billing details handled by Stripe. We never see or store full card numbers.

AI processing

Conversations may be processed by an AI assistant (Anthropic's Claude) to generate replies and recommendations. Message content is sent to the AI provider solely to provide this feature.

How we use information

To provide and improve the service, send service-related communications, and comply with law. We do not sell personal information.

Sharing

We share data only with the service providers needed to run Crest (hosting, Twilio for messaging, Stripe for payments, Anthropic for AI features), each bound to use it only on our instructions.

Text-message data

Consumers who text a Crest-powered business can opt out at any time by replying STOP. Opt-outs are honored immediately and permanently. Message frequency varies; message and data rates may apply.

Retention & deletion

We keep your data while your account is active. You may request export or deletion of your organization's data at any time by contacting us.

Security

Data is encrypted in transit, passwords are hashed, and access is restricted per organization. No method of storage is 100% secure.

Contact

Questions or data requests: email iury@iuryroi.com.