Skip to content

Privacy Policy

Last updated September 11, 2026

This Privacy Policy explains how Unified Software Solutions LLC (“Airocrew”, “we”, “us” or “our”), 262 Chapman Rd, Ste 240, Newark, DE 19702, USA, collects, uses, shares and protects personal data when you visit airocrew.com, use the Airocrew dashboard and the services it provides (the “Service”), or interact with a business that uses Airocrew.

It covers three groups of people:

  • Customers — the owners and team members who sign in to Airocrew and run a crew for their business.
  • Contacts of our customers — people whose details a customer uploads or the crew finds, who receive email from a customer’s mailbox, or who reply to it.
  • Visitors — people who browse airocrew.com or a website we host for a customer.

For the personal data in a customer’s outreach lists, inbox and connected accounts, the customer is the data controller and Airocrew is a processor acting on the customer’s instructions (see Section 5). For everything else described here, Airocrew is the controller.

1. Data we collect

1.1 From customers

  • Account data. Your email address, sign-in method (Google or magic link), name and profile picture if you sign in with Google, timezone, and the accounts and companies you belong to. We never see or store a password.
  • Business data you give us. Your company brief (description, ideal customer, tone of voice, business type), postal address, website URL, brand colours, logo, photos, video and other media you upload, guardrail and priority settings, and the company profile the crew builds from those inputs and from your public website.
  • Content you and the crew create. Social posts, email drafts and threads, website content and versions, images and video, reports, and your conversations with the in-app assistant.
  • Connected-account data. If you connect social accounts we store the account’s platform, username, channel list and a provider token reference. If you connect Stripe we store your Stripe account identifier and a periodic snapshot of your revenue: balance, charges, refunds, subscriptions, products and customer records (which can include your customers’ names and email addresses) for the last 90 days.
  • Billing data. Your plan, billing interval, subscription status, credit balance and ledger, top-up history and Stripe customer and subscription identifiers. Card numbers are entered directly with Stripe and never touch our systems.
  • Activity and audit data. Every action taken in the dashboard and every action the crew takes for you — with timestamps, the agent involved, what it did and its cost in credits — kept as an audit log you can read in the dashboard.
  • Team data. The email addresses of people you invite, the companies you share with them, and when invitations are accepted.
  • Support and correspondence. Emails and messages you send us.

1.2 About contacts of our customers

  • Lists customers upload. Names, email addresses, company, role and any other columns in a CSV a customer uploads.
  • Contacts the crew finds. For plans with outreach, the Scout agent searches publicly available web pages (company websites, team pages, professional directories) for business contacts that match the customer’s ideal-customer description and records name, role, company, business email address, the source page and a short note on why the person fits. Personal (free-mail) addresses are refused by the software. Before a lead is saved, the software may check that the address’s mail domain exists and accepts mail.
  • Email conversations. Email sent from a customer’s mailbox and replies received there, including headers, body text and delivery events (delivered, bounced, complained).
  • Opt-outs. Email addresses that have unsubscribed, bounced or complained, kept on a per-customer suppression list so they are never emailed again by that customer.
  • Customer-of-customer records synced from a connected Stripe account, as described above.

1.3 From visitors

  • airocrew.com and the dashboard. Standard server logs (IP address, browser, pages requested, referrer) and Google Analytics measurements (pages viewed, approximate location derived from IP, device and browser type, and a random client identifier) and Meta Pixel and TikTok Pixel events (pages viewed on airocrew.com, and whether you signed up, started a checkout or subscribed — with the plan price, never card details) used to measure our own advertising on Meta and TikTok.
  • Websites we host for customers. Standard server logs kept by our hosting provider. We place no analytics or advertising tags on hosted customer sites. If a customer’s site links to a checkout, that checkout runs on Stripe under the customer’s own account and Stripe’s privacy policy.
  • Public websites of prospective customers. During onboarding, and to build a company profile, we read the public pages of the website a customer tells us is theirs.

1.4 Automatically collected technical data

Device and browser type, operating system, IP address, approximate location derived from IP, timestamps, and the pages or features used. Error reports sent to our monitoring provider may include the URL, browser, and the technical state of the request that failed.

2. How we use personal data

We use personal data only to run, secure, bill and improve the Service:

  • Provide the Service you signed up for — Examples: Running your crew, generating and publishing content, sending and receiving email in your name, hosting your site, producing reports. Legal basis (EU/UK): Performance of a contract
  • Act on your instructions for your contacts — Examples: Emailing leads, replying to inbound mail, honouring unsubscribes, syncing Stripe. Legal basis (EU/UK): Our processing on your behalf (you are the controller)
  • Billing and account management — Examples: Subscriptions, credits, invoices, team seats, tax records. Legal basis (EU/UK): Performance of a contract; legal obligation
  • Security, abuse prevention and compliance — Examples: Guardrail and policy checks on outbound content, sending limits, bounce/complaint monitoring, suppression lists, audit logging, fraud prevention. Legal basis (EU/UK): Legitimate interests; legal obligation
  • Communicate with you — Examples: Daily reports, escalation digests, invitations, service notices, replies to your questions. Legal basis (EU/UK): Performance of a contract; legitimate interests
  • Measure and improve the Service — Examples: Aggregate analytics on airocrew.com and the dashboard, error monitoring, fixing bugs. Legal basis (EU/UK): Legitimate interests
  • Measure our advertising — Examples: Knowing whether a visit from one of our own Meta or TikTok ads led to a sign-up, so we can spend on ads that work. Legal basis (EU/UK): Consent (the cookie notice) in the EEA, UK and Switzerland; legitimate interests elsewhere
  • Legal — Examples: Responding to lawful requests, enforcing our Terms, establishing or defending claims. Legal basis (EU/UK): Legal obligation; legitimate interests

Automated activity in your name. The crew acts automatically within the settings you choose. Those actions concern your business’s marketing and do not produce legal or similarly significant effects on you or your contacts; a human (you) can pause, override or reverse the settings at any time from the dashboard.

No sale, no advertising. We do not sell personal data, do not share it for cross-context behavioural advertising, and do not show ads.

No AI training. We do not use your data, your content or your contacts’ data to train AI models, and the AI providers we use (Section 4) process it under terms that prohibit them from training on it.

3. Cookies and similar technologies

  • Strictly necessary — What it does: Keeps you signed in (authentication session cookies set by our auth provider, Supabase); protects sign-in flows; remembers a pending invitation. Where: airocrew.com, dashboard
  • Preferences (local storage, not cookies) — What it does: Your theme, sidebar and assistant-panel state, dismissed notices. Where: Dashboard, stored only in your browser
  • Analytics — What it does: Google Analytics 4 (_ga, _ga_*) measures how airocrew.com and the dashboard are used. Where: airocrew.com and app hosts only
  • Advertising measurement — What it does: Meta Pixel (_fbp, _fbc) tells us whether our own ads on Facebook and Instagram brought you here; TikTok Pixel (_ttp, _tt_enable_cookie) does the same for our ads on TikTok. Where: airocrew.com and app hosts only

Where you are matters. If you visit from the European Economic Area, the United Kingdom or Switzerland, the analytics and advertising tags load only after you accept the cookie notice; declining keeps them off. Everywhere else they load with the page, and you can opt out with the browser controls and Meta, TikTok and Google settings described below. Analytics and advertising cookies are never set on websites we host for customers. Because _ga, _fbp and _ttp cookies are scoped to airocrew.com, a browser that has visited airocrew.com may carry them when visiting a customer’s something.airocrew.com site, but no data is collected there because no tag is present. You can block or delete cookies in your browser, opt out of Google Analytics with Google’s browser add-on, manage Meta’s ad settings in your Facebook or Instagram account, or turn off personalised ads in your TikTok account settings; blocking the necessary cookies will sign you out.

4. Service providers (subprocessors)

We use the following providers to run the Service. Each processes personal data only on our instructions and under a data-processing agreement.

  • Anthropic, PBC — AI models that plan the crew’s work, write content and check it against your guardrails
  • Google LLC (Gemini API) — AI image and video generation
  • Google LLC (Sign in with Google, Google Analytics) — Optional sign-in; usage analytics on our own sites
  • Meta Platforms, Inc. (Meta Pixel) — Measuring our own advertising on Facebook and Instagram (with your consent in the EEA, UK and Switzerland)
  • TikTok Pte. Ltd. / TikTok Inc. (TikTok Pixel) — Measuring our own advertising on TikTok (with your consent in the EEA, UK and Switzerland)
  • Supabase, Inc. — Database, authentication and file storage (US East region)
  • Vercel, Inc. — Hosting of airocrew.com, the dashboard and customer sites; DNS; domain registration; anonymous page-speed measurement on our own sites (Speed Insights, no cookies)
  • Stripe, Inc. — Subscription billing and payments; connection to customers’ own Stripe accounts
  • Resend, Inc. — Sending and receiving email, including customer mailboxes on airocrew-mail.com
  • bundle.social — Connecting social accounts and publishing posts on customers’ behalf
  • Inngest, Inc. — Scheduling and running background jobs
  • Functional Software, Inc. (Sentry) — Error monitoring

These providers process data primarily in the United States (see Section 7). We will update this list when providers change. Customers with a data-processing addendum can ask to be notified of changes by email.

5. Customers’ contacts: our role as processor

When a customer uploads a contact list, asks the crew to find leads, connects an inbox or a Stripe account, the customer decides why and how that data is used; we process it only to carry out the customer’s instructions through the Service and to meet our legal obligations (for example honouring unsubscribes). Our Terms of Service require customers to have a lawful basis for the contacts they use and to comply with anti-spam and privacy laws. A data-processing addendum incorporating the EU Standard Contractual Clauses and the UK Addendum is available to business customers on request at team@airocrew.com.

If you received an email from a business using Airocrew:

  • The email tells you which business sent it and gives its postal address.
  • Click the unsubscribe link (or use your mail client’s one-click unsubscribe). Your address is added to that business’s suppression list immediately and permanently.
  • To ask what data that business holds about you, to correct it or to have it deleted, contact the business directly — it is the controller. If you cannot reach it, or want your address suppressed for that business without engaging further, email team@airocrew.com and we will relay the request or apply the suppression.

6. When we share personal data

We share personal data only:

  • with the service providers in Section 4, to the extent needed for their purpose;
  • with third-party platforms you connect and instruct us to use — for example the social network a post is published to, the recipient of an email the crew sends, Stripe for a Payment Link you ask us to create, or the domain registry when you buy a domain (registries require the registrant’s name, address, email and phone, and may publish part of it in WHOIS/RDAP subject to their privacy rules);
  • with your team members, within the companies you share with them;
  • with professional advisers, insurers and auditors under confidentiality;
  • to comply with law, a court order or a lawful government request, to enforce our Terms, or to protect the rights, safety or property of Airocrew, our customers or the public;
  • in connection with a merger, acquisition, financing or sale of assets, in which case this policy continues to apply to the transferred data and we will notify you of any change in controller.

We do not sell personal data and we do not share it with data brokers or advertisers.

7. International transfers

We are based in the United States and our providers process data mainly in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your personal data is transferred to the US and other countries that may not have equivalent data-protection laws. We rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) with our providers, on the EU-US Data Privacy Framework where a provider is certified, and on supplementary measures such as encryption in transit and at rest. You can request a copy of the relevant safeguards at team@airocrew.com.

8. How long we keep data

  • Account, business and content data — For as long as your account is active. Deleting a company removes its content, media, mailbox, site and leads from live systems immediately; provider backups age out within about 30 days.
  • After cancellation or termination — Kept for at least 30 days so you can request an export by email; we may delete it after that.
  • Email threads and outreach records — With the company that owns them; deleted with the company.
  • Suppression (unsubscribe) lists — Kept for as long as the company that received the opt-out exists, so it keeps being honoured; deleted with the company.
  • Audit logs of crew actions — For the life of the account, then deleted with it.
  • Billing records, credit ledger, invoices — 7 years, to meet tax and accounting obligations.
  • Server logs and error reports — Up to 90 days.
  • Analytics data — Google Analytics keeps user-level data for at most 14 months.
  • Advertising measurement data — Meta and TikTok keep pixel event data under their own data policies; we keep no copy.
  • Legal holds — Longer where a dispute, investigation or legal obligation requires it.

9. Security

We protect personal data with measures that include encryption in transit (TLS) and at rest, passwordless authentication, row-level isolation of customer data in our database, per-customer email domains, signed and expiring links for file access, secrets kept out of the codebase, least-privilege access for our staff, audit logging, and automated policy checks on every outbound action the crew takes. Payment details are handled entirely by Stripe (PCI DSS Level 1). No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and the relevant authorities as the law requires. To report a vulnerability, email team@airocrew.com.

10. Your rights and choices

Everyone. You can access, correct and delete most of your data yourself in the dashboard: company details, brand assets, media, contacts, site content, settings and team members. You can disconnect any connected account, pause or delete a company, and cancel your plan in Settings. To exercise a right you cannot exercise in the dashboard — including deletion of your whole account — email team@airocrew.com from your account address. We respond within 30 days (45 days where the law allows and the request is complex) and may ask you to verify your identity. You can also object to marketing from us at any time; service emails (reports, invitations, security and billing notices) are part of the Service and are sent for as long as you have an account.

European Economic Area, United Kingdom and Switzerland. You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing (including processing based on legitimate interests), to data portability, and to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local supervisory authority, though we would appreciate the chance to address your concern first.

California (CCPA/CPRA). You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to receive it in a portable form; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use or disclose sensitive personal information for purposes that would trigger a right to limit. You may designate an authorised agent to make a request on your behalf; we will verify the agent’s authority. Requests: team@airocrew.com.

Other US states, Canada, Australia and elsewhere. Residents of states with comprehensive privacy laws (for example Colorado, Connecticut, Virginia, Texas and Oregon) and of other countries have similar rights of access, correction, deletion, portability and objection, which you can exercise the same way. If we decline a request you may appeal by replying to our response.

Contacts of our customers. Please see Section 5 — your primary point of contact is the business that emailed you, and the unsubscribe link works immediately.

11. Children

The Service is for businesses and for people aged 18 and over. We do not knowingly collect personal data from anyone under 18, and customers may not use the Service to market to children. If you believe a child has provided us with personal data, email team@airocrew.com and we will delete it.

12. Do Not Track and Global Privacy Control

We do not sell or share personal data, so there is nothing for a “Do Not Track” or Global Privacy Control signal to opt out of. We do not currently change how the Service behaves in response to those signals.

13. Changes to this policy

We may update this policy as the Service or the law changes. If a change materially affects how we use personal data we will notify customers by email or with a notice in the dashboard before it takes effect. The “Last updated” date shows when the current version took effect; earlier versions are available on request.

14. Contact us

Unified Software Solutions LLC
Attn: Privacy
262 Chapman Rd, Ste 240
Newark, DE 19702, USA
team@airocrew.com

If you are in the EU or UK and prefer to raise a concern with a supervisory authority, you may contact the authority in your country of residence.