Trust and data handling

Who runs Crevly

Crevly is operated by SK Medien. You can reach us by email at info@sk-medien.biz.

You see your data in your workspace. In a studio, the owner decides who gets access and with which role.
Crevly's administration area shows no earnings, working time or credentials.
The servers are run by DreamHost. As the host, DreamHost has technical access to all data stored there.
Emails from Crevly, for example to confirm your address, reset your password or invite you, are sent by the service Resend. Payments are handled by Stripe: Crevly redirects you to Stripe to pay and does not receive your card details.
When you visit Crevly, your browser loads nothing from third parties: no analytics, advertising or tracking services, no external fonts, no embedded content.

Crevly runs at DreamHost, a provider based in the United States. The contract does not tie processing to any one country. That is why we do not promise hosting in Germany or the EU.
Your connection to Crevly is always encrypted (HTTPS with HSTS).
Crevly stores your Crevly password only as a hash (scrypt with a random salt), never in plain text.
Crevly stores portal passwords encrypted and binds them to a sync key you choose yourself. Crevly can only decrypt them while you have unlocked the sync key in your current session. Older entries without this binding are switched over at the next fetch. Crevly stores your portal username unencrypted.
Crevly stores earnings, working time and your other details in the database without encrypting them separately.

Disconnect a platform: Crevly stops fetching for this account. Earnings recorded so far and the credentials are kept.
Delete a platform account: The account is deleted together with all earnings recorded through it, permanently. While working time is linked to it, Crevly does not allow this; disconnect it instead.
Delete credentials: Crevly removes only the stored credentials. Your earnings stay.
Cancel your subscription: Cancelling ends payment at the end of the paid period and does not delete any data by itself. Section 12 of the Terms of service governs what happens after the contract ends.
Crevly automatically deletes logs of business events after 365 days, usage events after 13 months and an unconfirmed plan choice after 14 days.
Billing records that must be kept by law remain even after a deletion; invoice data is also held by Stripe.

Crevly is not affiliated with any of the platforms and depends on their websites. For a fetch, Crevly signs in with your credentials and reads your earnings, only when you start the fetch; there is no schedule.
If a portal changes its pages, its sign-in or its terms, fetching can fail, be delayed or stop altogether. Crevly cannot promise that a connection keeps working.
A portal's terms of use decide whether it allows a third party to sign in for you. Check them before you connect.
Regardless of that, you can always enter earnings manually or import them from a CSV file.

Send questions, problems and reports of security incidents to info@sk-medien.biz; SK Medien is responsible. If you suspect misuse of your credentials, contact us immediately.