Is crewAI safe with your data?
crewAI
crewAI Inc.
Poor disclosure · high confidence
crewAI earns an F (29/100) because it discloses little about its data practices.
Dealbreaker flag
- D1.1: improve and develop products and services, including by training and developing models and/or algorithms
- D1.4: irrevocable, perpetual license to (a) copy, distribute, transmit, display, perform, and create derivative works of the Feedback
#198
of 216 apps ranked
29
score · Automation avg 46
-17
vs category average
CrewAI's terms grant the company a licence to use customer data and outputs to train and develop models, with no opt-out offered, and the only concrete retention and deletion commitments in the policy cover Google account data rather than platform data generally.
What crewAI's privacy policy and terms of service say about your data
Training on customer data
The terms license customer data, including the outputs generated on the platform, for improving and developing products and services by training and developing models and algorithms. No opt-out or opt-in control is described anywhere in the policy.
Retention promises are scoped to Google data
Named retention figures appear only in the Google account section: 30 days to remove or anonymize data after deactivation or unlinking, and up to 180 days for copies in encrypted backups and system logs. The policy sets no retention period for platform data generally.
Deletion runs through one email channel
Deletion is requested by emailing privacy@crewai.com with a specific subject line, with confirmation promised within 5 business days. The route is described for Google-derived data, and there is no general access, portability, or correction right in the policy.
Advertising sharing with named opt-outs
The policy states that user information may be shared with advertising and social media companies to facilitate interest-based advertising, and points to opt-out tools from Google, LinkedIn, Microsoft, the Digital Advertising Alliance, and the Network Advertising Initiative. Google OAuth data is carved out and never used for advertising.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
crewAI privacy rating
Details
- Category
- Automation
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2025-09-24
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.