Privacy Policy

This Privacy Policy explains how VesselOS ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you use the VesselOS web application and any related services (collectively, the "Service"). We are committed to protecting your privacy and the security of your personal data in accordance with applicable United States federal and state laws.

This policy is provided in English (U.S.). In the event of any inconsistency between this English version and any translated version, the English version shall prevail to the fullest extent permitted by law.

Information You Provide

• Account information: name, email address, password (stored as a one-way hash), and assigned role.
• Customer & contact data: first and last name, email, phone number, postal/mailing address, and any notes you record.
• Vessel & service records: vessel details, work order history, estimates, invoices, labor hours, materials, and field documentation (including photos).
• Communications: messages and notes exchanged through the Service, including content you submit to customer or technician portals.
• Payment & billing data: billing preferences and invoice records. Sensitive payment instrument numbers are handled by our authorized payment processors and are not stored on our servers.

Information Collected Automatically

• Usage data: device type, browser type, access times, and features used.
• Location data: when you enable it, GPS coordinates recorded during clock-in/clock-out sessions and field documentation to support job tracking.
• Technical logs: IP address, timestamps, and service event logs used for security and troubleshooting.

• To provide, operate, and maintain the Service and its features (CRM, scheduling, invoicing, field documentation, and reporting).
• To create and manage accounts, assign technician roles, and coordinate service work.
• To generate estimates, invoices, tax reports, and other business documents you request.
• To communicate with you about appointments, estimates, change orders, service reminders, and account activity.
• To improve performance, usability, and security of the Service and to develop new features.
• To comply with legal obligations and to protect the rights, property, or safety of our users and others.

Where U.S. state privacy laws (such as the California Consumer Privacy Act, as amended, and similar state statutes) apply, we process personal information under one or more of the following bases: (1) to provide the services you requested; (2) to operate and maintain our business and the Service; (3) to comply with legal obligations; (4) to protect against fraud and security threats; and (5) with your consent, where applicable. By using the Service, you consent to the processing described in this policy.

We do not sell your personal information. We may share information only as described below:

• Service providers & processors: vendors that help us operate the Service (cloud hosting, database, email delivery, payment processing, and analytics), under written agreements that require confidentiality and appropriate data security.
• Connected integrations: when you or an administrator authorize a third-party integration (for example Google Calendar, Gmail, or Slack), the Service may exchange data with that provider according to the scopes you approve and the provider's own privacy policy.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to confidentiality protections consistent with this policy.
• Legal compliance: where required by law, court order, or to protect the rights, property, or safety of our users or others.

We retain personal information for as long as your account is active or as needed to provide the Service. Billing, invoice, tax, and work order records are retained for the periods required by applicable business, tax, and recordkeeping laws. When data is no longer needed, we delete or de-identify it, except where retention is required by law.

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted transmission (TLS), access controls, role-based permissions, and secure credential storage. No method of transmission or electronic storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

Depending on your state of residence, you may have the right to:

• Know what personal information we collect about you and how it is used.
• Access and request a copy of your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to legal retention requirements).
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising, where applicable.
• Withdraw consent to processing performed on the basis of consent, without affecting processing already carried out.

To exercise any of these rights, contact us using the information in the "Contacting Us" section below. We will verify your identity before responding and may decline requests that would conflict with our legal obligations.

The Service is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take steps to delete it.

Your information may be processed and stored in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S., where privacy laws may differ from your jurisdiction. By using the Service, you consent to such transfers.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. Material changes will be communicated through the Service or by other reasonable means. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact the VesselOS account owner through the in-app Settings page or through the contact information provided when your account was established. We will respond in accordance with applicable law.