Privacy Policy

Crest Software Solutions Limited ("CrestSystems," "we," "us") respects your privacy. This policy describes how we collect, use, and protect information when you visit crestsystems.dev or interact with our services.

This website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us (see "Your rights" below) and we will delete it.

When you visit our website, we may collect analytics data such as pages viewed, clicks, scroll depth, referral source, browser type, and approximate location derived from IP address. This data is collected by our own first-party analytics and is only active after you accept analytics in the consent banner.

When you book an audit or contact us, we collect information you provide — name, email, company, and any details you share about your business — to schedule and conduct the audit.

If you download the Backend Audit Playbook or tell us where your manual work happens, we collect the email address, company name, and answers you provide so we can follow up about an audit.

If you are a client, we process the information needed to deliver and manage the services described in your engagement agreement, including team accounts and delivery records.

Our analytics use a session identifier stored in your browser's session storage. It is used only while you are on the site and is collected only after you accept analytics.

The audit booking flow is powered by Cal.com, whose embedded booking page may set its own cookies. Cal.com is a third party that processes data according to its own privacy policy, which you can review at cal.com/privacy.

You can change your choice at any time by clearing your browser storage for this site; the consent bar will then ask again. Essential site functions (booking an audit, accessing client or team portals) do not require accepting analytics.

We use collected information to respond to inquiries, schedule audits, deliver services, improve our website, and communicate about CrestSystems offerings. We do not sell personal information, and we do not use behavioral advertising on this site.

We use third-party tools for scheduling and event data (Cal.com, including its API and webhooks), hosting and infrastructure (Vercel, Supabase), and lead analysis (an AI API used only on business information you ask us to analyze in the admin pipeline). These providers process data according to their own privacy policies and our agreements with them.

We keep the information you provide through booking and engagement for as long as needed for the purposes described in this policy, then delete or anonymize it. Analytics are retained only as long as needed to understand site usage and are not combined with personal identifiers we store about you.

Depending on where you are located, you may have the right to access, correct, delete, restrict, or port your personal information, and to object to its processing (GDPR rights), and California residents may have rights to know, delete, and correct personal information and to opt out of sale or sharing — we do not sell or share personal information. To exercise any of these rights, contact us at hello@crestsystems.dev or through the audit booking form at crestsystems.dev/#book, and we will respond within the period required by law.

The site is served over HTTPS, and the systems that store your information are protected with access controls and encryption in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this policy periodically. The "Last updated" date at the top reflects the most recent revision.