Privacy Policy

YachtSphere is a multi-tenant service that we host centrally. Each subscribing company (your employer or the operator who invited you) decides what information it puts into its own workspace and is the data controller of that information. We, as the provider that hosts and runs the platform, act as a data processor on their behalf and process data only to provide the service. For privacy questions you can contact us at info@yachtsphere.app.

• Account details — name, email address, phone (optional), role, and a securely hashed password.
• Workspace data you enter — boats, expenses, jobs, vendors, invoices, charters, maintenance, checklists, crew details and messages.
• Receipt and document files you upload (e.g. photos of receipts), stored in our file storage for your company.
• Boat location — only if you or a tracking device on a boat chooses to share GPS position for live tracking.
• Device tokens for push notifications, if you enable them, so we can deliver alerts to your device.
• Security data — two-factor authentication secrets and one-time backup codes, if you enable 2FA.

We do not collect advertising identifiers, and we do not track you across other apps or websites.

Strictly to provide the service: to run your account, show your fleet, expenses and jobs, deliver messages and notifications, scan receipts, produce reports, and keep the workspace secure. We do not sell your data and we do not use it for advertising.

Data is stored on server infrastructure we operate with Hetzner Cloud. Connections use HTTPS/TLS encryption, passwords are hashed, optional two-factor authentication protects sign-in, uploaded files are held in access-controlled storage, and the database is backed up daily. Access is limited to the members of your own company workspace and to the minimum operational access needed to run and support the service.

We use a small number of service providers, only to make specific features work:

• Hosting — the platform runs on infrastructure provided by Hetzner.
• Email delivery — access codes, password-reset links and notifications are sent through the transactional email provider Brevo. Only the recipient address and message are shared to deliver the email. Email we receive at our contact address is handled through Zoho Mail.
• Receipt scanning — when you use the camera to scan a receipt, the image is sent to Google (Gemini) to read the text and pre-fill the amount, date and merchant. The image is sent only to be read; the stored receipt stays in our own storage. Google processes it to return the result and, under its API terms, does not use it to target advertising to you.
• Maps and weather are shown using OpenStreetMap and Open-Meteo; live vessel positions may use the AISstream service. No account personal data is sent to them.

These providers process data only to perform their function and do not use it for their own marketing.

We operate from the United States and our hosting is provided by Hetzner (European Union). Depending on where you are, your information may be processed in the EU and/or the United States. Where required, such transfers are made under appropriate safeguards. The receipt-scanning feature described above may also involve processing by Google.

Your data is visible only to the members of your own company workspace, according to their role. We never sell personal data or share it with unrelated third parties. We may disclose information if required by law or to protect the security of the service.

Data is kept for as long as your company keeps its workspace active. Archived expenses and similar records are purged on a rolling basis. When a company account is deleted, its data — including its users and their information — is permanently removed, and backups age out on their normal cycle.

You may request access to, correction of, or deletion of your personal data, and a copy of it in a portable format (the app also lets you export data to CSV, PDF and Excel). Contact your workspace administrator or write to info@yachtsphere.app. Depending on where you live you may have additional rights: EU/EEA/UK residents (under the GDPR) may object to or restrict processing and complain to a data-protection authority; California and other U.S. state residents may request access or deletion — and we confirm that we do not sell or "share" personal information for advertising.

YachtSphere is a professional tool and is not directed to, or intended for, children under 16.

We may update this policy. Material changes will be reflected by the "last updated" date at the top of this page, and where appropriate we will notify workspace administrators.