Privacy Policy
Last updated: October 28, 2026
This policy explains how ALTERA ENERGY SAS (Crewmy brand), 7 Rue Pétion, 75011 Paris, as data controller, collects and uses your personal data on crewmy.com, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. For any questions, please contact: contact@crewmy.com.
1. Data Collected and Purposes
| Where | Data | Purpose | Legal Basis |
|---|---|---|---|
| "Request a Call Back" Form | Name, phone or email, industry, comment | To contact you back and present our offers | Your request (pre-contractual measures) |
| "Try Live" Page | Your website address, name, company, email, phone, activity, chat messages | To perform the demo, send it to you, and contact you back | Your consent (checkbox) |
| Client Area | Name, company, email, encrypted password, subscription, invoices | To manage your account and subscription | Contract performance |
| Referral Partner Area | Identity, contact details, SIRET, declared leads, signature | To manage the partnership and commissions | Contract performance |
| Payment | Billing data (card data is processed solely by Stripe) | To collect subscription payments, to invoice | Contract performance, legal obligation |
| Review Form | Rating out of 5, first and last name, company, email (optional), review text, agreement or refusal to publish | To collect your feedback to improve our services and, only if you agree, to publish it on our site (name, company, and text, never your email) | Your consent (publication checkbox) |
| Appointment Booking | Name, company, email, phone, chosen slot | To organize your onboarding session and remind you of it | Contract performance |
| Voice Messages ("Try Live") | Audio recording and its written transcription | To understand your activity to perform the demo | Your consent |
| WhatsApp, email, phone | Your messages and contact details | To respond to your requests | Legitimate interest, pre-contractual measures |
2. Data Retention Periods
- Prospects: 3 years from the last contact.
- Clients: for the duration of the contract, then 5 years (statutory limitation); invoices retained for 10 years (accounting obligation).
- "Try Live" demos and chat messages: 12 months.
- Inactive accounts: deleted after 3 years of inactivity.
3. Recipients and Sub-processors
Your data is intended for the Crewmy team and our technical sub-processors, who act on our instructions: netcup GmbH (hosting, Germany, EU), Stripe (payment), Google (email sending, fonts), Cloudflare (DNS and email routing), Meta / WhatsApp when you contact us via WhatsApp. For clients of the HDS offer, data is hosted in France by Scaleway and OVHcloud, providers certified as Health Data Hosts (Hébergeur de Données de Santé, HDS).
Artificial Intelligence Providers. To generate "Try Live" demos, operate chat and voice conversation, transcribe voice messages, and produce images, Crewmy uses OpenRouter (OpenRouter Inc., USA), which transmits requests to Google (Gemini) and OpenAI models. Our clients' AI employees operate with Anthropic (Claude) models. Only data necessary for each processing operation is transmitted to them (your website text, messages, voice recording), and never your payment data. The assistant's voice on our site can also be produced directly by your browser, without data being sent. Some of these providers may transfer data outside the European Union; these transfers are governed by the European Commission's standard contractual clauses or the Data Privacy Framework. Your data is never sold.
4. Your Rights
You have the right to access, rectify, erase, restrict, object to, and port your data, as well as the right to withdraw your consent at any time and to define directives regarding the fate of your data after your death. To exercise these rights, please contact: contact@crewmy.com. You can also lodge a complaint with the CNIL (www.cnil.fr). You may also register on the Bloctel telephone solicitation opt-out list.
5. Cookies and Trackers
Crewmy uses no advertising cookies or third-party audience measurement tools. The site only uses strictly necessary elements: secure session cookies for the client area and referral partner area, and local browser storage to remember the chosen plan. These elements are exempt from consent.
Referral Cookie (90 days). If you arrive on crewmy.com via a referral partner's link, their code is retained during your visit to attribute any potential subscription to them. A banner will then ask for your agreement to retain it for 90 days ("crewmy_ref" cookie and local browser storage). If you refuse, the code is deleted at the end of your visit. This cookie is not used for any advertising or tracking on other sites. You can withdraw your agreement at any time by deleting cookies and site data in your browser settings.
6. Security
Encrypted connections (HTTPS), encrypted passwords (scrypt), email address confirmation, login attempt limitation, payments processed by Stripe (PCI-DSS certified), hosting in the European Union.
7. Data Processed for Our Clients
When our AI employees process data on behalf of our clients, the clients are the data controllers, and Crewmy acts as a data processor, under the terms of Article 9 of our general terms and conditions of subscription.