Privacy

When you sign up

We keep the name, email, business name, number of computers and note you send, plus the time and your IP address, so we can reply and keep out spam. We use them only to contact you about Crashcart.

When your business uses Crashcart

• Account details. The names and email addresses of the people who sign in, and your answers in the setup conversation.
• From your computers. Computer names, hardware and software lists, update and security status, the results of checks and fixes, and the network devices those computers can see. Outside of backups, Crashcart reads a file only when someone at your business asks the help desk for help with it, and it records that request.
• Backups. If you turn on Crashcart Backup, it copies the files and databases in your backup plan. Each computer's backup is encrypted on that computer with its own password before it leaves.
• Conversations. Help desk chats, tickets, your answers to Crashcart's questions, and the documents it drafts for you.
• A record of everything done. Every command, change and decision, so you can see what happened and show it to an auditor.

We use this to run the service for your business and for nothing else. We don't sell it or use it for advertising.

Who else handles it

• Anthropic provides the AI model Crashcart uses. It reads the information needed to run your IT manager and help desk.
• DigitalOcean hosts the Crashcart server and its database.
• Backblaze stores Crashcart Backup copies, encrypted before they arrive.
• Huntress runs endpoint detection on your computers and its security team watches it around the clock. It sees security events from those computers, such as processes, sign-ins and detections.
• Supabase stores encrypted credentials, such as keys your business gives Crashcart for other services.
• Shodan is asked which services are visible at your office's internet address. Only the address is sent.
• Resend sends Crashcart's emails.
• Stripe handles payments. Crashcart never sees your full card number.

Keeping it separate and safe

Each business's information is kept apart from every other business's. Sign-in uses passkeys, connections are encrypted, and credentials are stored encrypted.

Leaving

You can ask for a copy of your business's information, or for it to be deleted, at any time by emailing us. We'll do it and confirm, except for what we're required to keep, such as billing records.