Effective date and last updated: 2026-10-21
This Consumer Health Data Privacy Policy ("Health Data Policy") describes how Contract Intelligence, LLC, doing business as CrewRights ("CrewRights," "we," "us," or "our"), collects, uses, processes, shares, retains, and protects Consumer Health Data in connection with the CrewRights website, application, and related services (collectively, the "Service").
This Health Data Policy supplements our general Privacy Policy and is intended to address applicable requirements of the Washington My Health My Data Act ("MHMDA"), RCW 19.373. In the event of any conflict or inconsistency between this Health Data Policy and our general Privacy Policy, this Health Data Policy will control with respect to the collection, use, processing, sharing, retention, and deletion of Consumer Health Data.
For purposes of this Health Data Policy, "Consumer Health Data" means personal information that is linked or reasonably linkable to an individual and identifies that individual's past, present, or future physical or mental health status, as defined under applicable law.
Consumer Health Data may include information concerning medical conditions, diagnoses, treatment, symptoms, pregnancy, reproductive health, mental health, disabilities, or other health-related matters.
CrewRights is an informational service designed to help individuals understand provisions of the Alaska Airlines/AFA-CWA collective bargaining agreement and related Reference Materials. CrewRights is not a healthcare provider and does not request or require members to provide medical information to use the Service.
However, members may elect to voluntarily include health-related information when submitting questions concerning medical leave, sick leave, pregnancy, disability accommodations, workers' compensation, or similar employment-related matters.
To the extent such information qualifies as Consumer Health Data under applicable law, it will be handled in accordance with this Health Data Policy.
CrewRights does not intentionally solicit medical records, diagnoses, treatment histories, or other sensitive health information.
However, depending on the information voluntarily submitted by members, CrewRights may collect or process the following categories of Consumer Health Data:
(a) Health-Related Question Content. Information concerning physical or mental health conditions, symptoms, pregnancy, disabilities, medical leave, or related matters voluntarily included in questions submitted through the Service.
(b) Health-Related Outputs. Information contained in AI-generated responses that references, summarizes, or otherwise reflects health-related information included in a member's question.
(c) Health-Related Usage Information. Limited usage information, including question categories, cited contract provisions, and feedback, to the extent such information identifies or could reasonably be associated with a member's health status.
CrewRights does not intentionally collect medical records, biometric identifiers, genetic information, or precise location information for health-related purposes.
CrewRights may obtain Consumer Health Data from the following sources:
(a) Information voluntarily provided by members when submitting questions or feedback through the Service;
(b) Information generated or derived from member questions through the operation of the Service, including AI-generated responses and associated question categories; and
(c) Information processed by service providers acting on CrewRights' behalf in connection with providing the Service.
CrewRights does not purchase Consumer Health Data from data brokers or obtain Consumer Health Data from healthcare providers, insurers, or medical records systems.
To the extent CrewRights collects or processes Consumer Health Data, it does so only as reasonably necessary to provide the Service requested by the member or for other purposes permitted by applicable law.
These purposes may include:
(a) Processing a member's question and generating an informational response concerning applicable Reference Materials;
(b) Identifying and displaying relevant collective bargaining agreement provisions;
(c) Maintaining the functionality, reliability, and security of the Service;
(d) Responding to member inquiries, feedback, or requests concerning their information; and
(e) Complying with applicable legal obligations.
CrewRights does not use Consumer Health Data for targeted advertising, marketing profiles, eligibility determinations, employment decisions, or the sale of personal information.
CrewRights will not collect or use additional categories of Consumer Health Data or process such information for materially different purposes without providing the disclosures and obtaining any affirmative consent required by applicable law.
CrewRights is designed to answer general questions concerning contractual rights and employment-related benefits without requiring members to disclose personal medical information.
Members should avoid including medical diagnoses, treatment information, medical records, or other sensitive health details in their questions.
Where collection or processing of Consumer Health Data is necessary to provide a response specifically requested by a member, CrewRights may process that information to the extent permitted by applicable law.
Where applicable law requires affirmative consent for collection, use, or sharing of Consumer Health Data, CrewRights will request such consent before the applicable activity occurs.
Any required consent will be voluntary, specific, informed, and separate from general acceptance of the Terms of Service.
Members may withdraw consent for future collection or sharing of Consumer Health Data by contacting CrewRights using the contact information below. Withdrawal will not affect processing previously permitted by law but may limit CrewRights' ability to provide certain features or responses.
CrewRights does not sell Consumer Health Data or share it with advertisers, data brokers, employers, unions, or other third parties for their independent marketing purposes.
To the extent reasonably necessary to provide the Service requested by a member, CrewRights may disclose or make Consumer Health Data available to service providers performing services on its behalf, including the following categories:
(a) Artificial Intelligence Processing Providers. Providers that process submitted questions and generate informational responses, including Anthropic.
(b) Cloud Hosting and Infrastructure Providers. Providers supporting application hosting, databases, and technical infrastructure, including Vercel, Neon, and Upstash, to the extent Consumer Health Data is processed through those services.
(c) Security and Technical Service Providers. Providers assisting with maintaining the security, reliability, and operation of the Service, to the extent access to Consumer Health Data is necessary.
CrewRights may also disclose Consumer Health Data where required by applicable law or valid legal process.
CrewRights does not share Consumer Health Data with affiliates for independent commercial purposes.
Any additional sharing requiring consent under applicable law will occur only after CrewRights obtains the required consent, separate from any consent required for collection.
CrewRights retains the text of member questions and corresponding AI-generated responses for up to thirty (30) days, after which such information is deleted from active systems.
Usage records associated with an Account, including question dates, topic categories, cited contract provisions, and member feedback, may be retained for up to one hundred eighty (180) days. To the extent these records contain Consumer Health Data, they are subject to this Health Data Policy and applicable deletion rights.
Members may request deletion of their Consumer Health Data at any time as described below.
Deleted information may remain temporarily in backup systems until deleted in accordance with applicable backup retention procedures and legal requirements.
Information processed by third-party service providers is subject to applicable contractual retention and deletion requirements. CrewRights will take the steps required by applicable law to communicate and implement valid deletion requests involving such providers.
Subject to applicable law, individuals may have the following rights concerning their Consumer Health Data:
(a) Right to Confirm and Access. Request confirmation of whether CrewRights collects, shares, or sells their Consumer Health Data and obtain access to such information, including applicable information about third parties or affiliates with whom it has been shared.
(b) Right to Withdraw Consent. Withdraw consent previously provided for future collection or sharing of Consumer Health Data.
(c) Right to Deletion. Request deletion of Consumer Health Data collected about them, subject to applicable legal exceptions.
(d) Right to Appeal. Appeal CrewRights' refusal to take action on a request concerning Consumer Health Data.
CrewRights will not unlawfully discriminate against members for exercising their rights under applicable law.
Members may submit requests concerning their Consumer Health Data by contacting CrewRights at:
Email: privacy@crewrights.app
Mailing Address: 3971 Phinney Ave N, Seattle, WA 98103
To protect member privacy, CrewRights may request information reasonably necessary to authenticate the identity of the person submitting a request.
CrewRights will respond to authenticated requests without undue delay and no later than forty-five (45) days after receipt, subject to extensions permitted by applicable law. Where reasonably necessary, CrewRights may extend the response period by an additional forty-five (45) days after providing notice and an explanation within the initial response period.
If CrewRights declines to act on a request, it will provide an explanation and information about how to appeal the decision.
Members may submit an appeal using the contact information above and identifying the request as an appeal. CrewRights will respond to appeals within the period required by applicable law and provide information about any further complaint rights, including the right to contact the Washington Attorney General where applicable.
Members may also delete their Account through Account settings. Account deletion will cancel the subscription and initiate deletion of associated information from active systems, subject to applicable legal requirements and the retention limitations described above.
For authenticated deletion requests under the MHMDA, CrewRights will take the steps required by law to delete Consumer Health Data, including applicable information in archived or backup systems, and notify relevant processors, contractors, and other third parties as required by law. Deletion from archived or backup systems may be delayed only to the extent and for the period permitted by applicable law.
CrewRights maintains reasonable administrative, technical, and organizational safeguards designed to protect Consumer Health Data against unauthorized access, disclosure, alteration, or destruction.
Access to Consumer Health Data is limited to authorized personnel and service providers to the extent reasonably necessary to perform their responsibilities.
CrewRights requires service providers processing Consumer Health Data on its behalf to handle such information in accordance with applicable contractual obligations and legal requirements.
No electronic system can guarantee absolute security, but CrewRights takes reasonable measures appropriate to the nature and sensitivity of the information processed.
CrewRights does not sell Consumer Health Data.
CrewRights does not disclose Consumer Health Data to third parties in exchange for monetary or other valuable consideration for their independent purposes.
If CrewRights changes these practices, it will update this Health Data Policy and obtain any authorization required by applicable law before engaging in such activities.
CrewRights may update this Health Data Policy to reflect changes in applicable law, the Service, or its data processing practices.
The updated policy will be posted with a revised effective date.
Where required by applicable law, CrewRights will provide additional notice and obtain affirmative consent before collecting, using, or sharing new categories of Consumer Health Data or processing such information for additional purposes.
Questions about this Health Data Policy or CrewRights' handling of Consumer Health Data may be directed to:
Contract Intelligence, LLC (d/b/a CrewRights)
Email: privacy@crewrights.app
Address: 3971 Phinney Ave N, Seattle, WA 98103
See also our Privacy Policy and Terms of Service.