Skip to main content

Privacy Policy

Last Updated: March 25, 2026

1. Information We Collect

FullCrew.ai collects several categories of information to provide you with the best possible experience:

  • Account Information: name, email address, company name, phone number, and billing details
  • Usage Data: feature interactions, pages visited, and platform actions
  • Customer Data: information about customers entered through CRM features
  • Communications: messages, support tickets, and feedback
  • Technical Data: IP address, browser type, device information, and cookies
  • Third-Party Platform Data: when you connect external platforms (see Section 11), we access data from those platforms as described below

2. How We Use Your Information

We use your data to deliver enterprise-level tools that help your small business compete:

  • Provide, maintain, and improve CRM and marketing automation services
  • Process transactions and send related information
  • Send technical notices, updates, security alerts, and support messages
  • Respond to comments, questions, and customer service requests
  • Communicate about products, services, offers, and events
  • Monitor trends, usage, and activities for platform improvement
  • Detect, prevent, and address technical issues and fraudulent activity
  • Personalize experience with AI-powered recommendations

3. SMS Communications & Two-Factor Authentication (2FA)

By providing a mobile phone number and enabling 2FA, you expressly consent to receive SMS text messages for account security purposes.

What you agree to:

  • SMS messages containing one-time verification codes during login
  • Security alerts about unusual account activity
  • Variable message frequency based on login activity
  • Standard message and data rates from your mobile carrier may apply
  • You can disable 2FA in account settings anytime (though 2FA remains recommended for account security)

Your Rights: You can opt out of SMS 2FA by disabling it in your account security settings, though this reduces account security. We will never use your phone number for marketing without separate explicit consent.

Supported Carriers: All major US carriers including AT&T, Verizon, T-Mobile, Sprint, and others.

4. Information Sharing and Disclosure

We do not sell your personal information. We share information only in these circumstances:

  • Service Providers: Third-party vendors who help us operate the platform (see Section 12 for details)
  • Legal Requirements: When required by law, court order, or to protect rights and safety
  • Business Transfers: During mergers, acquisitions, or asset sales
  • With Consent: When you explicitly authorize information sharing
  • Connected Platforms: When you connect a third-party platform, data flows between FullCrew.ai and that platform as described in Section 11

5. Data Security

We protect your data using industry-leading security measures:

  • Industry-standard encryption (TLS 1.2+ in transit, AES-256 at rest)
  • Secure cloud servers hosted on Microsoft Azure
  • Regular security audits
  • Two-factor authentication options
  • Role-based access controls and tenant isolation

No system is completely secure, but we continuously work to protect your information and stay ahead of emerging threats.

6. Your Data Rights

You control your data and have the right to:

  • Access: Request a copy of personal information we hold
  • Correct: Update or correct inaccurate information
  • Delete: Request deletion of personal information (subject to legal obligations)
  • Export: Download your data in a portable format
  • Opt-Out: Unsubscribe from marketing communications at any time
  • Revoke Platform Access: Disconnect any third-party platform connection at any time from Platform Connections settings (see Section 11)

To exercise these rights, contact privacy@fullcrew.ai.

7. Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and personalize content. You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

8. Data Retention

We keep your information as long as your account remains active or as needed to provide services. Upon account closure, data is deleted or anonymized within 90 days, except where legal or business obligations require retention.

For connected third-party platform data (Section 11), access tokens are revoked upon disconnection and cached platform data is deleted within 30 days.

9. Children's Privacy

FullCrew.ai is designed for businesses and is not intended for children under 13. We do not knowingly collect information from children. Please contact us immediately if you believe we have collected data from a child.

10. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. Your continued use after changes constitutes acceptance of the updated policy.

11. Third-Party Platform Connections & Google API Services

FullCrew.ai allows you to connect external platforms to manage advertising, social media, and email from a single interface. This section describes how we access, use, store, and share data from these connected platforms.

11.1 Google Services

When you connect Google services (Google Ads, YouTube, Google Business Profile, or Gmail/Google Workspace), you authorize FullCrew.ai to access specific Google user data through Google's OAuth 2.0 authorization framework. You can review and revoke access at any time via your Google Account Permissions page or from Platform Connections in FullCrew.ai.

Google Ads

  • Data Accessed: Ad campaigns, ad groups, keywords, ad creatives, performance metrics (impressions, clicks, conversions, spend), billing account information, and audience targeting data
  • How We Use It: To display campaign performance dashboards, enable campaign management (create, edit, pause campaigns), provide AI-powered optimization recommendations, and generate performance reports within FullCrew.ai
  • Scope Requested: https://www.googleapis.com/auth/adwords (Google Ads management)

YouTube

  • Data Accessed: Channel information, video metadata, and publishing capabilities
  • How We Use It: To publish and schedule video content from our content management tools

Google Business Profile

  • Data Accessed: Business listing information, posts, and reviews
  • How We Use It: To publish local business updates and manage your Google Business presence

Gmail / Google Workspace (Email Sync)

  • Data Accessed: Email messages, metadata (sender, recipient, subject, date), and conversation threads — only for the connected mailbox
  • How We Use It: To sync email conversations with CRM contact records, enable the Outreach Agent to send emails through your connected inbox (with your explicit approval for each email), and detect replies to outreach emails. We access only emails relevant to your CRM contacts; we do not read, analyze, or store the full contents of your entire mailbox.
  • Scope Requested: Gmail read and send scopes as authorized during connection

11.2 How We Handle Connected Platform Data

For all connected platforms (Google, Microsoft, Meta, LinkedIn, TikTok, Pinterest, X, Snapchat, BlueSky):

  • Access: We access only the data necessary to provide the features you use. We request the minimum scopes required for each platform's functionality.
  • Use: Connected platform data is used solely to provide FullCrew.ai features you have enabled — displaying dashboards, managing campaigns, publishing content, and syncing communications with your CRM. We do not use your connected platform data to train AI models, build advertising profiles, or for any purpose unrelated to providing our services to you.
  • Storage: OAuth access tokens and refresh tokens are stored encrypted. Platform data (campaign metrics, ad content, email metadata) is cached in your tenant's isolated database to provide responsive dashboards and reporting. Cached data is refreshed periodically and deleted within 30 days of disconnection.
  • Sharing: We do not share your connected platform data with any third parties. Data from one connected platform is never shared with another platform. Your data is isolated to your tenant and accessible only to authorized users within your organization.
  • Revocation: You can disconnect any platform at any time from Admin > Platform Connections. Upon disconnection, we revoke our access tokens and delete cached platform data within 30 days.

11.3 FullCrew.ai's Use of Google API Services

FullCrew.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

11.4 Microsoft Services

When you connect Microsoft services (Microsoft Ads, Microsoft 365 / Outlook):

  • Microsoft Ads: We access campaign data, performance metrics, and billing information to provide advertising management features.
  • Outlook / Microsoft 365 (Email Sync): We access email messages and metadata from your connected mailbox to sync conversations with CRM contacts and enable outreach email sending through your inbox.

11.5 Social Media Platforms

When you connect social media platforms (Facebook, Instagram, LinkedIn, TikTok, Pinterest, X, Snapchat, BlueSky):

  • Data Accessed: Business/creator account information, page/profile metadata, post history, engagement metrics, and publishing capabilities as authorized during connection
  • How We Use It: To publish and schedule social media content, display engagement analytics, and manage your social presence from a unified dashboard
  • We do not: Access your personal social media profiles, private messages (unless explicitly part of a business inbox feature), or friend/follower personal data beyond aggregate counts

12. Third-Party Service Providers

We use the following categories of third-party service providers to operate FullCrew.ai:

Provider Category Purpose Data Shared
Cloud Infrastructure (Microsoft Azure) Hosting, storage, compute All platform data (encrypted)
Email Delivery (SendGrid) Transactional and marketing email sending Recipient email addresses, email content
Payment Processing (Stripe) Subscription billing Billing details, payment method tokens
AI Services (Anthropic Claude, Google Gemini, xAI Grok) AI-powered content generation, agent automation Prompts and context data (not stored by providers beyond processing)
Data Enrichment (People Data Labs) Contact and company data enrichment Business contact information (name, email, company)
Video Generation (ShotStack, Creatify) AI video creation Content assets provided by user

All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

13. Contact

Have questions or need to exercise your data rights? We're here to help:

FullCrew.AI LLC — Committed to transparency, security, and empowering American small businesses