Privacy Policy

Last updated September 28, 2026

This policy explains what Crush Lab Studio collects, why, and who we share it with. We keep it short because we collect as little as we can.

What we collect

• Your account: name, email and password (stored hashed by our authentication provider).
• Your business profile: business name and support email.
• What you enter about your clients: names, contact details, addresses, projects, milestones, retainers and notes.
• Invoice and payment details from Stripe: amounts, statuses and, when a payment fails, the decline reason and the card brand and last four digits. We never see or store full card numbers.
• Feedback you send us, and emails people leave on our waitlist.
• Basic technical logs (such as IP address and pages requested) used to keep the service secure and working.

How we use it

To run Crush Lab Studio: sending your invoices and payment emails, showing your dashboard, supporting you, preventing abuse, and improving the product. We don't sell your data or use it for advertising.

Your clients' information

When you add clients, you decide what to collect and why; we process that information on your behalf to send your invoices. Your clients can contact you, or us at support@crushlabstudio.com, about their data.

Who we share it with

Only the services that run Crush Lab Studio, each for its part of the job:

• Stripe: payments, invoices and tax, in your own Stripe account.
• Supabase: our database and sign-in.
• Resend: sending invoice and account emails.
• Vercel: hosting the website, plus anonymous visit and page speed stats (no cookies).

We may also share information when the law requires it.

Cookies

We use cookies only to keep you signed in and to protect sign-in flows. We don't use advertising or tracking cookies.

Keeping and deleting data

We keep your data while your account is open. Ask us to export or delete it at any time; we'll delete your account data within 30 days, except records we must keep by law. Invoices and payments in your Stripe account stay there under Stripe's own policies.

Security

Data is encrypted in transit, access to each business's data is restricted to its members, and we never store your Stripe keys.

Changes and contact

We'll post changes here and tell you about important ones. Questions or requests: support@crushlabstudio.com.