Privacy policy
Last updated October 21, 2026. Plain language, not a law firm memo.
Who this covers
Crew Alerts is a small app for a Jobber account owner. It sends short alerts to the Slack channel and email addresses that owner chooses. The support address is sethgagnon@mail.grokbot.com.
What we store
We store the Jobber account id and business name, encrypted access and refresh tokens, the Slack team and channel names plus an encrypted incoming webhook URL, the email addresses you add, routing switches, Stripe customer and subscription ids, subscription status, and an event log. The event log keeps the webhook topic, the Jobber object id, the time, and whether the alert was sent, skipped, or blocked. It does not keep the alert text.
What we do not store
We do not store your customers' names, street addresses, or phone numbers. If a live Jobber alert includes a client name or a crew name, that text is used to write the Slack message and the email, then discarded. Demo alerts use work labels such as "Boiler not heating" and are not written into the database.
Who else processes data
Jobber is the source of the events. Slack receives the alert text if you connect a channel. Resend receives the recipient addresses and the alert body if email is configured. Stripe processes the subscription payment. We do not see full card numbers. Stripe, Slack, Resend, Jobber, Neon, and Vercel each have their own privacy terms.
Why we use it
We use this data to install the app, refresh tokens, decide who should get an alert, send that alert, and know whether the subscription is in a trial or an active paid period. We do not sell data. We do not use it for ads.
Disconnect and deletion
Disconnecting in Crew Alerts calls Jobber's app disconnect mutation when a token is still valid, deletes stored Jobber tokens, and deletes the Slack webhook. If someone disconnects from the Jobber App Marketplace, the APP_DISCONNECT webhook does the same token removal. Billing ids and the event log stay so a reconnect does not lose the subscription link. Email sethgagnon@mail.grokbot.com to ask for the remaining rows to be deleted.
Security
Tokens and webhook URLs are encrypted before they are written to Postgres. Webhooks from Jobber and Stripe are checked with their signatures before we act on them. The encryption key is kept in our host's secret store, not in the database.