At Crane Eye ("we," "our," or "us"), we operate an enterprise resource planning system and mobile fleet management platform designed for heavy-lift crane operators, workspace owners, and field crews. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our web platform, mobile applications (iOS/Android), and associated services (collectively, the "Services").
1. Information We Collect
A. User-Provided Information
When you create an account, accept an invitation, or use our Services, we collect personal details including:
- Account Credentials: Full name, business email address, phone number, and password.
- Workspace & Organizational Data: Tenant name, billing information, crane fleet details, certificate registers, client contacts, and job contracts.
- Operational Log Data: Daily log entries, timesheets, digital signatures, breakdown reports, and site photographs uploaded by crew members.
B. Location Data (Mobile Field Application)
For assigned crew members using our mobile application on active jobs, we collect precise location data (GPS):
- Foreground & Background Location Tracking: Location tracking operates while a worker is assigned to an active job. This allows fleet management and site office staff to track machine positions, verify shift presence, and generate evidence-backed daily timesheets.
- Transparency & Control: Location tracking is clearly indicated in the app via a persistent status indicator and system notification. Tracking automatically pauses when a job is marked completed or when a worker is unassigned.
C. Automatically Collected Technical Data
When interacting with our APIs and web platform, we collect device identifiers, IP addresses, browser types, log files, and offline sync queue metadata necessary to ensure system uptime and sync integrity.
D. Voice Input & AI Assistant (Mobile and Web)
Our products include an optional AI assistant ("Ask Craneye") that accepts typed and spoken questions. It stays switched off until you explicitly agree to the in-app disclosure, and you can switch it back off at any time from inside the assistant.
- Voice Recordings: When you use the microphone button, a short audio clip is recorded on your device and sent to our API to be converted into text. The clip is held in memory for that single request only — it is never written to our database or object storage.
- Assistant Messages: Your question, the last few turns of the conversation, and the workspace records needed to answer it are processed to generate a reply.
- Sub-Processor: Speech-to-text and assistant replies are processed by OpenAI under its API terms. Data submitted through the OpenAI API is not used to train its models.
- No Model Training: We do not use your voice, your messages, or your operational data to train AI models, and we never sell or share them for advertising.
- You Stay In Control: The assistant may propose an action (such as checking in or starting a trip); nothing is performed until you confirm it. AI output can be wrong and must not be relied on for lifting, safety or compliance decisions.
2. How We Use Your Information
We process collected data strictly for operational purposes:
- To deliver core ERP functionality (crane selection, ground bearing pressure calculations, dispatching, compliance tracking, and invoicing).
- To provide live fleet position monitoring to workspace owners and operations dispatchers.
- To generate automated timesheets and audit logs based on field captures.
- To maintain multi-tenant data isolation and enforce user role permissions (owner, operations, workshop, field crew).
- To alert teams regarding expiring equipment certificates or low inventory stock levels.
3. Data Protection & Tenant Isolation
Your data security is paramount:
- Tenant Isolation: All customer data is stored with row-level security (RLS) enforcement in our database, ensuring workspace data cannot be accessed across organizations.
- Encryption: Data is encrypted in transit using TLS 1.3 and at rest using industry-standard AES-256 encryption.
- Cloud Infrastructure: Hosted on secure enterprise cloud infrastructure (AWS and Cloudflare Pages/Workers) with automated monitoring and access logging.
4. Data Sharing & Third-Party Services
We do not sell, rent, or trade your personal or operational data. Information is shared only with trusted infrastructure providers as necessary to deliver our Services:
- Authentication & Storage: Supabase (Authentication, database hosting, and secure object storage).
- Cloud Infrastructure: Amazon Web Services (AWS) Lambda & API Gateway.
- Content Delivery & CDN: Cloudflare Pages & Global Edge Network.
- Speech-to-Text & AI Assistant: OpenAI (voice transcription and assistant replies; processed per request, not retained for model training).
5. Your Choices & Data Rights
Depending on your jurisdiction, you have the right to:
- Access, update, or correct your personal account details within the platform settings.
- Request export of your workspace operational data (cranes, jobs, logs).
- Revoke mobile location permissions at any time via your device operating system settings (note: location permission is required during active field assignments).
- Request account deletion by contacting your workspace owner or emailing our support team.
- Withdraw your consent to the AI assistant at any time from inside the assistant, and revoke microphone access in your device settings.
6. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:
Crane Eye Privacy Team
Email: privacy@craneye.com
General Inquiries: hello@craneye.com