Legal
Privacy Policy
Last updated: 27 July 2026
In plain language
- We store your certificates and ID documents encrypted, on Cloudflare's servers — not on a shared drive.
- Agencies only see the profile fields and documents you choose to make visible. You control this in your settings.
- We never sell your data to advertisers or data brokers.
- You can download or permanently delete your account and all associated data at any time from account settings.
1. Who We Are
CrewVal (“CrewVal”, “we”, “us”) operates the CrewVal platform — a web and mobile application that helps offshore workers manage certificates, availability, and job search, and helps agencies find qualified crew. This Privacy Policy explains what personal data we collect, why, how it is stored, and what rights you have over it.
This policy should be read together with our Terms & Conditions and Cookie Policy.
2. What Data We Collect
2.1 Account data
Name, email address, password (hashed — we never store it in plain text), and role (worker or agency).
2.2 Worker profile data
Job keywords, availability status, rotation schedule, position type, geolocation preferences (if enabled), and CV/work-experience details you choose to add.
2.3 Certificates and personal documents
Files you upload (e.g., BOSIET, STCW, medical certificates, passports, seaman's books) plus the structured data our system extracts from them (certificate type, issue date, expiry date) so we can send you renewal reminders.
2.4 Usage data
Pages visited, features used, device/browser type, and approximate location derived from IP address — collected via analytics cookies only if you accept them (see our Cookie Policy).
2.5 Communications
Emails you send us (support, feedback), and — for agency users — messages exchanged with workers through the platform.
3. How We Use Your Data
- To create and maintain your account and let you sign in.
- To extract certificate type/dates from uploaded documents (using an AI document-processing service) so we can display expiry status and send reminders.
- To match your profile against public job listings and, if you opt in, notify you by push or email.
- To let agencies you have authorised discover and contact you for relevant vacancies.
- To send transactional email (verification, password reset, reminders, job-match digests).
- To improve the platform, using aggregated and anonymised analytics.
- To detect fraud, abuse, or violations of our Terms.
4. Who Can See Your Data
4.1 Agencies
Agencies can only see the profile information and documents you choose to make visible. You control this from your profile visibility settings, and you can set your profile to hidden at any time. Certificates and personal documents are private by default and are only shared if you generate a share link or approve a specific agency's access.
4.2 Service providers (data processors)
We share data with the following providers, solely to operate the Service:
- Cloudflare (R2) — encrypted storage for uploaded certificates and documents.
- Anthropic — processes uploaded certificate images/PDFs to extract certificate type and dates. Documents are not used to train third-party models.
- Resend — delivers transactional and reminder emails.
- Google — if you choose “Continue with Google” to sign in.
- Railway — hosts our database, backend, and background job infrastructure.
- Google Analytics — aggregated usage analytics, only after you accept analytics cookies.
Each provider is contractually restricted to using your data only to deliver the service we've engaged them for.
4.3 We do not sell your data
We do not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for marketing purposes.
4.4 Legal disclosure
We may disclose data if required by law, court order, or governmental request, or to protect the rights, property, or safety of CrewVal, our users, or the public.
5. Data Storage and Security
- Documents and certificates are stored encrypted at rest via Cloudflare R2.
- Passwords are hashed; we never store or have access to your plain-text password.
- Access to production data is restricted to engineers who need it to operate the Service.
- All traffic between your device and CrewVal is encrypted with HTTPS/TLS.
No system is 100% secure. If we become aware of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by applicable law.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we permanently delete your profile, certificates, and personal documents from active systems within 30 days, except where we are required to retain limited records (e.g., for fraud prevention or legal compliance). Backups are rotated out within a further 90 days.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data (available directly in account settings).
- Export your data in a portable format.
- Withdraw consent for optional processing (e.g., analytics cookies, marketing emails) at any time.
- Object to or restrict certain processing.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at privacy@crewval.com — we will respond within 30 days.
8. International Transfers
CrewVal and its service providers operate infrastructure in the European Union and the United States. Where personal data is transferred outside your home jurisdiction, we rely on our providers' standard contractual clauses and equivalent safeguards required under applicable data protection law (including GDPR, where it applies).
9. Children's Privacy
CrewVal is not directed at individuals under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice before they take effect. The “Last updated” date at the top of this page always reflects the current version.
11. Contact Us
Questions about this policy or how your data is handled:
CrewVal Privacy Team
Email: privacy@crewval.com