Politique de confidentialité

iVessel LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, is the controller of personal data processed through ivessel.co and app.ivessel.co. For any privacy question or request, email info@ivessel.co.

For the records our customers keep in iVessel about their crew and contacts, the customer is the controller and iVessel is the processor under our Data Processing Agreement.

• Account and profile data — name, email address, password hash (or Google sign-in identifier), role, company and vessel memberships, profile photo if you upload one, and two-factor authentication settings.
• Vessel and maintenance records — the data you enter about vessels, machinery, services, checklists, issues, spares, safety equipment, documents, expenses and crew. These records may include personal data about crew members (such as names, roles, certificate expiry dates, dates of birth, passport details and contact details) that you choose to enter.
• Rest-hour records — where your company uses the MLC rest-hours feature, the daily rest and work periods entered for each crew member.
• Position and AIS data — when trip logging or automatic AIS logging is enabled for a vessel, we record vessel positions, speed, timestamps and trip details.
• Website enquiries — if you use the contact or book-a-demo form on ivessel.co: your name, email address, company or vessel name, fleet size and message. This is emailed to us and is not stored in a database by the form.
• Usage and technical data — pages visited, actions taken, device and browser type, and log data. IP addresses may be processed by our hosting and analytics providers as part of delivering and securing the service.
• Billing data — subscription status and invoices. Card details are entered directly with Stripe and are never stored by us.

• Providing the service, your account and vessel records — performance of our contract with you.
• Billing, invoicing and fraud prevention — contract and legal obligation.
• Security, abuse prevention, backups, troubleshooting and support — our legitimate interest in operating a safe and reliable service.
• Responding to website enquiries and demo requests — our legitimate interest in answering you, and steps taken at your request before a contract.
• Usage analytics through Google Analytics, and conversion measurement through Google Ads (measuring which of our ads led to a sign-up or enquiry) — your consent, given via the cookie banner and withdrawable at any time. In the European Economic Area, the United Kingdom and Switzerland neither runs until you accept. This applies both to ivessel.co and to the iVessel application, whose legal pages point here.
• Advertising measurement through the Meta (Facebook) Pixel, provided by Meta Platforms (measuring which of our ads on Facebook and Instagram led to a visit or enquiry) — your consent, given via the cookie banner and withdrawable at any time. It loads only after you accept, wherever you are.
• AI assistant features and document indexing, where you use them — performance of our contract with you.
• Service announcements and transactional email — contract and legitimate interest.

When you first visit ivessel.co, your browser stores where you came from — the referring website, any campaign tags (such as utm parameters or a Google or Facebook click ID) and the page you landed on. No cookie is used. If you sign up, this is passed to the iVessel app and saved with your company account, together with your device's time zone and language and, if you choose to answer it, how you heard about us. We use it only to understand which channels bring new customers, on the basis of our legitimate interest in running and improving iVessel. It is never sold or shared with third parties for advertising. You can remove the stored value at any time by clearing your browser's site data for ivessel.co.

We use the following providers to run the service:

• Supabase — application hosting, database, authentication and file storage (infrastructure hosted on AWS, US region).
• Stripe — payment processing and subscription billing.
• Resend — delivery of transactional email and website enquiries.
• Google — sign-in with Google, push notifications, Google Analytics and Google Ads conversion measurement (analytics and Ads tags are loaded subject to consent, and in the EEA, UK and Switzerland nothing is set until you accept).
• Meta Platforms — Meta (Facebook) Pixel advertising measurement on ivessel.co (loaded only after you accept on the cookie banner, wherever you are).
• OpenAI — the in-app AI assistant and document indexing features.
• Lovable — hosting of the web front-end.
• UPCitemdb and Open Food Facts — barcode lookup (barcode number only).
• aisstream.io — vessel position data used for automatic AIS position logging.

These providers act on our instructions under data processing agreements. The current register, with what each provider receives and where, is available on request from info@ivessel.co. We do not sell personal data. We use Google Ads conversion measurement to see which of our own ads led to a sign-up or enquiry; we do not use your vessel, crew or maintenance records for advertising or profiling.

iVessel is operated from the United States and our hosting is in a US AWS region. If you are located outside the United States, your data will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses concluded with our providers. A dedicated deployment in another region is available for organisations that require data to remain in a specific jurisdiction.

We delete sooner when the law or a verified request requires it, and later only where a law requires us to keep a record (for example tax records).

Subject to applicable law, you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to receive a portable copy of the data you provided, to object to or restrict certain processing, and to withdraw consent (for example for analytics) at any time. To exercise any of these rights, email info@ivessel.co. We answer verified requests within 30 days. If you believe we have not handled your data properly, you may also complain to your local data protection authority.

If you are a crew member, your captain, manager or employer may have entered your details into iVessel. They are the controller of that data and decide what is recorded; iVessel processes it on their behalf. Questions about what is held about you should go to them first; we will help them respond.

Access to data is restricted per company and vessel using row-level security, transport is encrypted with TLS, data is encrypted at rest, and passwords are stored hashed. Two-factor authentication is available and can be required fleet-wide by administrators. No online service can be guaranteed completely secure, but we work to protect your data and will notify you of any breach affecting you as required by law. More detail is on our Security page.

iVessel is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.

Details of the cookies and local storage we use are in our Cookie Policy.

We will update this policy as the service changes, revising the date and version above and notifying account holders of material changes. Contact: iVessel LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, info@ivessel.co.