Who we are
Crulex is field-service software for trades companies. It is built and operated by CheatCode Solutions, based in the Rio Rancho / Albuquerque, New Mexico area.
Contact for privacy questions: [email to be confirmed].
Two kinds of information
Account information about the people who use Crulex at a trades company (owners, office staff, technicians).
Business records that a trades company enters about its own customers, such as names, phone numbers, addresses, leads, estimates, jobs, notes, files and payments. The trades company decides what goes into its account. [Roles and responsibilities for business records to be defined in review]
What we collect
- Account details: name, email address, company name, and a password. Passwords are stored only as one-way hashes, never in readable form.
- Business records entered by a trades company, as described above.
- Estimate approvals: when a customer approves an estimate through a Crulex link, we record the signer's typed name, their drawn signature, the time, their IP address and browser details, and a fingerprint of the approved document, so the business has a record of what was approved.
- Payments: card details are typed into payment fields and exchanged for a token. Crulex does not store full card numbers. Card payments are currently in test mode only; no real payments are processed yet.
- Technical information: server logs and security records (for example, sign-in attempts and an activity history of changes in an account). To limit abuse of public links, we keep short-lived counters keyed by a one-way hash of the IP address.
- Contact form: the website's contact form is not connected yet and does not send or store anything.
How we use it
- To run Crulex: sign-in, showing each company its own records, sending estimates and payment links, and producing documents such as estimate PDFs.
- To keep accounts secure and to investigate problems.
- To contact account holders about their account and the service.
- We do not sell personal information. [Any further uses to be listed in review]
Cookies
Signed-in users get a session cookie that keeps them signed in. The marketing website does not currently use analytics or advertising cookies. [Update if analytics are added]
Service providers
We use service providers to host and run Crulex. Currently these include Vercel (website and application hosting) and Supabase (database). A payment processor and an email delivery provider will be added before real payments and email go live.[Full provider list and locations to be confirmed]
How long we keep it
[Retention periods for accounts, business records, approvals, logs and backups to be decided]
Your choices
Account holders can update their own details in Crulex. Customers of a trades company should contact that company first about their records; we will help the company respond.
[Access, correction and deletion request process, and any rights under applicable law, to be written in review]
Security
Each company's records are separated from every other company's at the database level, connections are encrypted, and access within a company follows the roles its owner assigns. No system is perfectly secure. [Incident notification commitments to be decided]
Changes to this policy
We will update this page when our practices change. [How account holders are notified of changes to be decided]