Legal
Privacy Policy
Last updated: 10 September 2026 · Version 1.1
This policy explains what personal data iVessel LLC collects when you visit ivessel.co or use the iVessel application, why we collect it, who processes it on our behalf, and the rights you have over it.
1. Data controller
iVessel LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, is the controller of personal data processed through ivessel.co and app.ivessel.co. For any privacy question or request, email info@ivessel.co.
2. What we collect
- Account and profile data — name, email address, password hash (or Google sign-in identifier), role, company and vessel memberships, profile photo if you upload one, and two-factor authentication settings.
- Vessel and maintenance records — the data you enter about vessels, machinery, services, checklists, issues, spares, safety equipment, documents, expenses and crew. These records may include personal data about crew members (such as names, roles, certificate expiry dates, dates of birth, passport details and contact details) that you choose to enter.
- Rest-hour records — where your company uses the MLC rest-hours feature, the daily rest and work periods entered for each crew member.
- Position and AIS data — when trip logging or automatic AIS logging is enabled for a vessel, we record vessel positions, speed, timestamps and trip details.
- Website enquiries — if you use the contact or book-a-demo form on ivessel.co: your name, email address, company or vessel name, fleet size and message. This is emailed to us and is not stored in a database by the form.
- Usage and technical data — pages visited, actions taken, device and browser type, and log data. IP addresses may be processed by our hosting and analytics providers as part of delivering and securing the service.
- Billing data — subscription status and invoices. Card details are entered directly with Stripe and are never stored by us.
3. Purposes and legal bases
- Providing the service, your account and vessel records — performance of our contract with you.
- Billing, invoicing and fraud prevention — contract and legal obligation.
- Security, abuse prevention, backups, troubleshooting and support — our legitimate interest in operating a safe and reliable service.
- Responding to website enquiries and demo requests — our legitimate interest in answering you, and steps taken at your request before a contract.
- Usage analytics through Google Analytics — your consent, given via the cookie banner and withdrawable at any time.
- AI assistant features and document indexing, where you use them — performance of our contract with you.
- Service announcements and transactional email — contract and legitimate interest.
4. Processors and sub-processors
We use the following providers to run the service:
- Supabase — application hosting, database, authentication and file storage (infrastructure hosted on AWS, US region).
- Stripe — payment processing and subscription billing.
- Resend — delivery of transactional email and website enquiries.
- Google — sign-in with Google, push notifications, and Google Analytics (loaded only after you give consent).
- OpenAI — the in-app AI assistant and document indexing features.
- Lovable — hosting of the web front-end.
- UPCitemdb and Open Food Facts — barcode lookup (barcode number only).
- aisstream.io — vessel position data used for automatic AIS position logging.
These providers act on our instructions under data processing agreements. The current register, with what each provider receives and where, is available on request from info@ivessel.co. We do not sell personal data and we do not use it for advertising or profiling.
5. International transfers
iVessel is operated from the United States and our hosting is in a US AWS region. If you are located outside the United States, your data will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses concluded with our providers. A dedicated deployment in another region is available for organisations that require data to remain in a specific jurisdiction.
6. Retention
We keep your account and vessel data for as long as your account remains active, because maintenance history is intended to be a long-lived record of the vessel. You can delete your own account from inside the app (Settings → Delete account), which removes your profile and personal data; vessel records that belong to a company remain with that company. If you ask us to delete other data, we will verify your identity and then delete it; we will confirm to you when it is complete. Backups and billing records required for legal or accounting purposes may persist for a limited further period. Website enquiry emails are kept for as long as needed to deal with the enquiry and then deleted.
7. Your rights
Subject to applicable law, you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to receive a portable copy of the data you provided, to object to or restrict certain processing, and to withdraw consent (for example for analytics) at any time. To exercise any of these rights, email info@ivessel.co. We answer verified requests within 30 days. If you believe we have not handled your data properly, you may also complain to your local data protection authority.
8. Crew data entered by your employer
If you are a crew member, your captain, manager or employer may have entered your details into iVessel. They are the controller of that data and decide what is recorded; iVessel processes it on their behalf. Questions about what is held about you should go to them first; we will help them respond.
9. Security
Access to data is restricted per company and vessel using row-level security, transport is encrypted with TLS, data is encrypted at rest, and passwords are stored hashed. Two-factor authentication is available and can be required fleet-wide by administrators. No online service can be guaranteed completely secure, but we work to protect your data and will notify you of any breach affecting you as required by law. More detail is on our Security page.
10. Children
iVessel is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.
12. Changes and contact
We will update this policy as the service changes, revising the date and version above and notifying account holders of material changes. Contact: iVessel LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, info@ivessel.co.
