Security

Your data stays inside your agency

Every table that holds customer data is protected by row-level security in our database. People can only see data that belongs to the agency they are a member of.

Signing in

You sign in with a one-time link sent to your email, or with your Google account. Krevlo never asks you to create a password.

Encryption

Every connection to Krevlo uses HTTPS. Your data is stored with Supabase, which encrypts it at rest. Keys for the services we use are kept in our hosting provider’s encrypted settings, never in our code.

Email to brands

Krevlo sends you a morning summary and sign-in emails. It never emails a brand without your say-so.

Automatic chase emails are switched off for now, so Krevlo sends no chase emails to brands.

Reading your documents

When you upload a spreadsheet or contract, forward a deal email, or a brand replies to a chase, Krevlo uses AI from Anthropic to read it and fill in the deal for you. Under Anthropic’s commercial terms, the data we send is not used to train its models.

Who handles your data

We use a small number of trusted services to run Krevlo. We never sell your data or share it with advertisers.

• Supabase: database and sign-in
• Vercel: hosting and page visit counts
• Resend: sending and receiving email
• Stripe: billing (your card number never reaches our servers)
• Anthropic: reading uploaded files and emails
• Cloudflare Turnstile: bot checks on sign-in and sign-up forms
• Sentry: error reports
• Google: sign-in, only if you choose Continue with Google

Deleting your data

The account owner can delete the agency’s account from Settings. That cancels billing and deletes your deals, brands, creators and email history. Copies in our database provider’s backups expire on their normal schedule.

Report a problem

If you think you have found a security problem, email privacy@krevlo.com. We read every message and reply as quickly as we can. Our privacy policy has the full details of what we collect and why.