Privacy Policy

Dotcrew is a personal crew of AI agents. You tell the Director what you need and it hands the work to agents that can read and draft your email, work on your code, and help around the house. This policy explains what information Dotcrew handles, why, and the choices you have. It covers the website at dotcrew.app and the app at app.dotcrew.app.

What we collect

• Your account. Your email address, your name if you give one, your language and a hashed password if you set one. Sign-in is handled by our authentication provider.
• What you ask your crew. Your conversations with the Director and the agents, the tasks they run, what they remember about your preferences, and a log of every action an agent took, so you can review it.
• Your AI keys. The API keys you add for AI providers. They are encrypted before they are stored and are never shown again after you save them.
• Accounts you connect. When you connect Gmail, Outlook, Telegram or an MCP server, we store the access tokens that service gives us, encrypted, plus the account's email address or name so you can tell your connections apart.
• Usage. How many AI tokens each request used and with which model, so you can see your consumption, and basic technical logs (such as errors and request times) to keep the service running.

We do not sell your information, we do not show ads, and we do not use your data to build advertising profiles.

Google user data

If you choose to connect a Google account, Dotcrew asks for these permissions on your Gmail:

• Read your email (gmail.readonly), so the Mail agent can search and read the messages it needs for a task you asked for, such as finding a quote or summarizing a thread.
• Write drafts and send email (gmail.compose), so the Mail agent can prepare replies for you. Dotcrew asks for your explicit approval in the app before any email is sent.

Email content is read only when an agent needs it to do something you asked for. The parts of a message the agent reads are sent to the AI provider you configured with your own API key (for example Anthropic, OpenAI or Google) so the model can do the task, and the result is shown to you in your conversation. Dotcrew does not keep a copy of your mailbox; it keeps only what ends up in your conversation and the encrypted access tokens.

We do not use Google user data for advertising, we do not sell it, we do not use it to train general AI models, and no person at Dotcrew reads it unless you ask us to for support, it is needed for security or abuse investigations, or the law requires it.

Dotcrew's use and transfer to any other app of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.

You can disconnect your Google account at any time in Dotcrew under Connections, which deletes the stored tokens, and you can also revoke access from yourGoogle account settings.

Microsoft and other connections

Connecting Outlook works the same way: Dotcrew asks to read, draft and send email through Microsoft Graph, uses it only for tasks you request, and asks for your approval before sending. Telegram lets you talk to your crew from a chat; we store the chat identifier so replies reach you. MCP servers you add receive only the requests an agent makes to them, and each tool asks you first.

Who processes your data

We use a small number of providers to run Dotcrew. Each one only gets what it needs to do its job:

• Supabase: database and sign-in.
• Render: hosting for the app and the server.
• Resend: sending sign-in and account emails.
• The AI providers you choose: they receive the prompts your agents send, under your own API key and their own terms.
• Google, Microsoft and Telegram: only if you connect them.

Your data may be processed in the United States and other countries where these providers operate.

Security

Traffic is encrypted in transit. API keys and connection tokens are encrypted at rest with per-record keys. Access to your data is limited to your own account, and anything that sends, pays or deletes waits for your approval.

How long we keep it

We keep your information while your account is active. Disconnecting an account deletes its tokens right away, and removing an AI key deletes it. If you ask us to delete your account, we delete your data within 30 days, except what we must keep by law.

Your choices and rights

You can see and edit what your crew remembers, review the log of agent actions, and disconnect any account. You can ask us for a copy of your data, to correct it or to delete it by writing tosupport@dotcrew.app. Depending on where you live you may have other rights, such as objecting to processing or complaining to your data protection authority.

Children

Dotcrew is not meant for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and for important changes we will tell you in the app or by email before they take effect.

Contact

Questions about privacy? Write to support@dotcrew.app.