Who we are
CREW ("CREW", "we", "us") is a software platform operated by UMAMI PROJECTS W.L.L (Commercial Registration No. 187820), Kingdom of Bahrain. CREW provides restaurants with AI-assisted tools to take and manage customer orders across channels (web, in-app, and WhatsApp / Meta messaging). Contact: hello@crew.bh, Kingdom of Bahrain.
Our role
Restaurants use CREW to serve theircustomers. For the personal data of a restaurant's customers, the restaurant is the data controller and CREW acts as the processor on its behalf. For data about the restaurant's own account / users, CREW is the controller. This policy explains how data is handled across the platform.
What we collect
- Restaurant / account data: business name, contact details, login credentials, settings, menu and configuration.
- Customer (diner) data, when a customer orders through a restaurant on CREW: name (if given), phone number, delivery address, order history and preferences, the messages they send (text, and — if enabled — voice notes), and the channel used (web / WhatsApp / etc.).
- Technical data: device / browser information, IP address, and usage logs, used for security and rate-limiting.
How we collect it
Directly from restaurants (setup) and from customers as they chat or order — including via the WhatsApp Business Platform and other Meta channels, web chat, and in-app ordering.
How we use it
- To provide the service: take orders, process them, send order-status updates, and answer customer questions.
- To power AI features: customer messages are processed by an AI model to understand and fulfil orders. (We use Anthropic's Claude API; if voice notes are enabled, audio is transcribed via a speech-to-text provider.)
- To maintain customer profiles for the restaurant (e.g. recognise a returning customer, their usual order).
- For security, fraud / abuse prevention, and to improve the service.
We do not sell personal data, and we do not use it for advertising.
Who we share it with
- The restaurant whose service the customer is using.
- Service providers (processors) strictly to run the platform: Meta / WhatsApp (messaging), Anthropic (AI processing), our hosting / database provider (Supabase), a speech-to-text provider (if voice is enabled), and a payment provider (when online payment is enabled).
- Legal / authorities where required by law.
WhatsApp / Meta
When a customer messages a restaurant via WhatsApp, message content and the customer's WhatsApp number are processed to provide the ordering service, in line with Meta's and WhatsApp's terms. We use these only to deliver and support the conversation and order.
International transfers
Some providers process data outside Bahrain. Where this happens, we take reasonable steps to ensure appropriate protection.
Retention
We keep personal data only as long as needed to provide the service and meet legal / accounting requirements, then delete or anonymise it. Restaurants can request deletion of their customers' data.
Your rights
Subject to applicable law (including Bahrain's PDPL), individuals may request access to, correction of, or deletion of their personal data, and may object to certain processing. Requests about a restaurant's customers are directed to that restaurant (the controller); contact us at hello@crew.bh and we will assist.
Security
We use access controls, tenant isolation, encryption in transit, and other measures to protect data. No system is perfectly secure, but we work to protect your information.
Children
CREW is not directed at children and we do not knowingly collect their data.
Changes
We may update this policy; we'll post the new version here with a revised date.
Contact
hello@crew.bh · UMAMI PROJECTS W.L.L, Kingdom of Bahrain.