Privacy Policy

1. Who we are

This Privacy Policy explains how Yachtko ("we", "us" or "our") collects, uses and protects personal data when you use our website at https://yachtko.com and our software at https://app.yachtko.com, and the choices you have.

You can contact us about privacy at info@yachtko.com.

2. Our two roles

• Your account data. For information about you and your team as users of Yachtko, such as names, email addresses and sign-in details, we decide how it is used and are responsible for it.
• The business data you enter. For data you enter about your own customers, such as their names, phone numbers, email addresses and booking history, you decide how it is used. We store and process it only to provide the Service to you, and only on your instructions.

3. Information we collect

• Account information: your name, email address, phone number, company name, and settings such as currency and timezone.
• Team information: names, email addresses and roles of people you invite.
• Business data: yachts, bookings, payments, customers, payroll, expenses, invoices and anything else you enter into the Service.
• Billing information: your plan, subscription status, billing country and payment history, provided to us by Paddle. We do not receive or store your full card details.
• Technical information: IP address, browser and device type, and logs of activity needed to run and secure the Service.
• Communications: messages you send us by email or WhatsApp, and suggestions you submit in the Service, including the page you sent them from.

4. How we use information

• to provide, operate and maintain the Service
• to create and manage accounts and sign you in securely
• to manage your subscription, trial and plan limits
• to provide support and respond to your messages
• to send service notices, such as security alerts, billing notices and announcements about the Service
• to improve the Service, including through the suggestions you send
• to keep the Service secure and prevent misuse
• to meet legal obligations

5. Legal bases

Where data protection law requires a legal basis, we rely on: performing our contract with you to provide the Service; our legitimate interests in running, securing and improving the Service; compliance with legal obligations; and your consent where we ask for it.

6. Payments and Paddle

Our order process is conducted by our online reseller Paddle.com, which acts as Merchant of Record for all our orders. When you buy a subscription, Paddle collects and processes your name, email address, billing address and payment details to handle payment, invoicing, tax and refunds. Paddle processes this data under its own privacy policy.

7. Who we share information with

We do not sell personal data. We share it only with service providers who help us run the Service:

• Paddle — payments, invoicing, tax and refunds, as Merchant of Record
• Supabase — database hosting and account sign-in
• Vercel — website and application hosting
• Our email provider — sending account emails such as password resets
• Google Fonts — delivering the fonts on our website, which receives your IP address
• Calendly — only if you choose to book a demo with us

When you use a WhatsApp link in the Service, WhatsApp opens on your own device and your message is handled by WhatsApp under its own terms. We may also disclose information if required by law or to protect our rights and users.

8. Where your data is stored

Our database is hosted on servers in the European Union. Some of our service providers may process data in other countries. Where data is transferred across borders, we rely on our providers' contractual and technical safeguards to protect it.

9. How long we keep data

• We keep account and business data for as long as your account exists.
• If your trial ends or your subscription lapses, your data is kept and your account becomes read-only, so you do not lose your records.
• If you ask us to delete your account, we delete your account and business data within 90 days, except where we must keep some information to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements.
• Billing records held by Paddle are kept by Paddle under its own policy.

10. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections, access controls that keep each company's data separate, and role-based access within your team. No system can be guaranteed completely secure, and you are responsible for keeping your login details safe.

11. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how it is used, and to withdraw consent. You can also complain to your local data protection authority. To make a request, email info@yachtko.com.

If you are a customer of a business that uses Yachtko, that business controls your data. Please contact them first. We will help them respond to your request.

12. Cookies and local storage

We use only essential storage: to keep you signed in and to remember simple preferences, such as whether a menu is open. We do not use advertising cookies. If we add analytics in future, we will update this policy first.

13. Children

The Service is for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this Privacy Policy from time to time. If a change is material, we will tell you by email or in the Service before it takes effect.

15. Contact

For privacy questions or requests, email info@yachtko.comor use our Contact page.