Crew Blend AI

Privacy Policy

Last updated: October 23, 2026

This policy explains how Crew Blend AI handles personal information when you visit our website or use the dashboard and API. Crew Blend AI is responsible for the information it processes to administer your workspace and provide its service. For privacy questions or requests, contact [email protected].

Connected AI providers, payment providers and client applications may separately process information under their own policies. This notice explains our part of that processing.

Information we process

Account information: email address, display name, password verification information, account role, verification status and account dates.
Access information: session records, password recovery and verification records, and generated API key identifiers, labels, permissions, expiry and activity.
Connected account information: account identifiers and email addresses returned by the provider, subscription type, authorization credentials, connection names, status, model access and reported usage limits.
Request content: prompts, messages, instructions, function definitions, tool results and generated responses sent through the service, including responses you ask us to store.
Usage records: request dates, model or provider, connection identifiers, available token counts and service charge information.
Billing information: selected plan, subscription status, payment provider identifiers, checkout confirmations, credit purchases and billing history. Payment providers collect payment credentials on their own pages. We may display limited payment details, such as card brand and last four digits, returned by them.
Technical and support information: network addresses, request and error information needed for security or operations, browser preferences, and information you send in support messages.

Some information is necessary to create an account, authenticate requests or process payment. If you do not provide it, the corresponding feature may be unavailable. Avoid including unnecessary sensitive personal information in requests or support messages.

How we use information

We use information to create and authenticate accounts, connect authorized services, route AI requests, display model access and usage, manage subscriptions and payments, send account notices, answer support requests, prevent abuse and meet legal obligations.

Where applicable data protection law requires a legal basis, we rely on performance of our agreement for requested service features; legitimate interests for proportionate security, service administration and support; legal obligations for required records and lawful disclosures; and consent when a particular optional activity requires it. When processing relies on consent, you can withdraw it without affecting processing already carried out lawfully.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use your prompts or responses to train our own general-purpose AI models. A connected model provider's use of information is governed by its own policy and the terms or settings of your provider account.

AI requests and connected accounts

When you send a request, its content is processed by Crew Blend AI and transmitted to the selected connected AI service. That provider generates the response, which we return to you or your application. Tool-related content is also transmitted when included in the request.

Our usage records track request activity and available token information; they are not a saved conversation history. We process request content to deliver the response.

To continue multi-step work, requests through connected ChatGPT accounts keep their conversation context on our servers for up to 24 hours after the last request, or 30 minutes when the request asks for in-memory retention. A compaction you request is kept for the same period. Responses are stored only when an API request explicitly sets store: true. The request input, the response and the model's encrypted reasoning state are then stored encrypted for 30 days, so that you can retrieve the response with GET /v1/responses/{id} or continue it with previous_response_id. You can delete a stored response earlier with DELETE /v1/responses/{id}. Requests without store: true are not stored as responses.

Information included in a support ticket or needed to investigate an issue may be retained with that issue. The provider may separately retain content under its own terms. We do not promise that requests have zero retention across all systems.

Connected account authorization and provider credentials are used to access the services you connect. We do not need your OpenAI password for the ChatGPT sign-in flow. You can disconnect accounts or revoke credentials through the dashboard and the relevant provider's controls.

Account selection and routing use connection status, available models and reported limits. These are operational choices for carrying out your request, rather than decisions about eligibility for employment, credit or similar matters.

Browser storage and preferences

The dashboard uses session storage to maintain your signed-in session and local storage to remember your selected theme. Clearing browser storage may sign you out or reset preferences. Our public website and documentation do not currently include advertising pixels or third-party audience analytics scripts.

External payment or sign-in pages, and third-party applications you choose, may use their own cookies or storage. If we introduce optional tracking that requires consent, we will provide the required information and choices before using it.

Retention and deletion

We retain information for the purposes described above, using the following criteria:

Account and connection information is kept while needed to operate your workspace and manage its access.
Session and recovery records are subject to validity periods and revocation. An expired credential cannot be used to authenticate, even if a related record is retained for administration or security.
Usage, support and security records are retained as needed to resolve issues, prevent abuse, reconcile activity and address disputes.
Payment and subscription records may be retained after closure to meet accounting, tax, fraud prevention and other legal requirements.
Responses stored with store: true are deleted 30 days after creation, earlier when you delete them, and when the account is closed or deleted. Conversation contexts of connected ChatGPT requests expire 24 hours after the last request, or 30 minutes for in-memory retention.
Backup copies may remain until the applicable backup cycle replaces them, subject to continuing protection.

Request account closure or deletion through support. We verify the request and determine which records can be deleted, anonymized or restricted and which must be retained. Closure may archive an account where financial records need to remain. Ending access does not automatically erase every record or cancel a provider's separate subscription.

We do not claim a single fixed retention period for all categories. The applicable purpose, record type, legal requirements and any unresolved dispute determine how long information is needed. Contact us for information about the retention applicable to your request.

Security

We use measures appropriate to the service, including protected connections, password hashing, encryption of stored connection credentials and access controls. No internet service or security measure can guarantee absolute protection.

Protect your account and application keys, revoke access you no longer need and contact us if you suspect compromise. Do not send passwords, authorization headers or API keys in support messages. We will handle security incidents and any required notifications according to applicable law.

International processing

Crew Blend AI and connected suppliers may process information in countries different from your own. The location can depend on the hosting service, selected provider and account configuration.

Where applicable law requires safeguards for an international transfer, we must put the required transfer arrangements in place. This policy is not a certification that a particular supplier participates in a transfer framework. Contact us for information about locations and safeguards relevant to your use. Independent providers explain their transfers in their own notices.

Your choices and rights

You can update your display name, change your password, end other sessions, revoke API keys, disconnect accounts and manage subscription renewal through the dashboard.

Depending on applicable law, you may have rights to access or obtain a copy of personal information, correct it, request deletion, restrict or object to processing, receive portable data and withdraw consent. You may also complain to the relevant data protection authority. These rights can be subject to legal conditions and exceptions.

Send requests to [email protected], preferably from your registered email address. We may ask for information reasonably needed to verify identity or authority. Do not send identity documents unless we specifically request them through an appropriate channel. We respond within the time required by applicable law and explain any permitted refusal or limitation.

For information held independently by an AI or payment provider, you may also need to exercise rights directly with that provider. We will assist within the scope of our responsibilities.

Children

Crew Blend AI is intended for adults aged 18 and over. We do not knowingly create accounts for children. If you believe a child has provided personal information to us, contact support so we can investigate and take appropriate action.

Policy updates

We may update this policy to reflect changes in the service or applicable requirements. The revised date will appear above. We will provide additional notice for material changes where required and obtain consent when a new use requires it. Contact [email protected] with questions.