Privacy Policy

1Scope and Responsible Entity

This Privacy Policy applies to personal information processed by YBOATS through the Services. YBOATS Management Services LLC is the entity responsible for the personal information described in this Policy, except where a third party acts independently under its own privacy policy.

Certain businesses, vessel owners, captains, employers, charter operators, or account administrators may use YBOATS to manage information relating to a yacht, crew, vendors, guests, or operations. In those circumstances, that organization or administrator may control how information is entered, accessed, retained, or deleted, and YBOATS may process the information on its behalf.

2Information We Collect

3Sources of Information

We collect information from the user; from account owners, captains, crew members, administrators, guests, payers, recipients, vendors, or other persons who use the Services; automatically from devices and interactions; from payment, identity-verification, cloud, mapping, weather, analytics, communications, and security providers; and from public or lawful business sources when needed to provide the Services or verify information.

4How We Use Information

• •Create and administer accounts, authenticate users, assign roles, and provide guest or invited access.
• •Provide vessel-management, maintenance, document, expense, reporting, task, crew, vendor, chat, weather, mapping, notification, AI, and support features.
• •Create, process, reconcile, distribute, support, refund, and maintain records of Crew Tips payments and transfers.
• •Verify Stripe Connect onboarding and recipient eligibility and respond to payment disputes, fraud, chargebacks, sanctions, or compliance requirements.
• •Send service communications, security alerts, reminders, invitations, payment notices, and user-requested marketing communications.
• •Analyze usage, diagnose problems, improve performance, develop features, maintain safety and security, and prevent abuse or unauthorized access.
• •Comply with tax, accounting, payment, legal, maritime, regulatory, recordkeeping, and law-enforcement obligations.
• •Establish, exercise, or defend legal claims and enforce our agreements.

5Legal Bases Where Applicable

Where applicable law requires a legal basis, YBOATS processes personal information as necessary to perform a contract or provide requested Services; based on consent, including device permissions; to comply with legal obligations; and for legitimate interests such as securing, supporting, improving, and operating the Services, preventing fraud, maintaining records, and communicating with users. A user may withdraw consent where processing relies on consent, but withdrawal does not affect earlier lawful processing and may limit certain features.

6Crew Tips and Stripe Connect

Crew Tips uses Stripe and Stripe Connect to process payments, onboard recipients, calculate or report payment-processing information, and facilitate transfers or payouts. Stripe acts as an independent provider for certain payment, identity, banking, tax, risk, and compliance activities. Stripe's collection and use of information are governed by Stripe's own agreements and privacy notices.

YBOATS and Stripe may exchange account identifiers, contact details, transaction information, onboarding status, payment status, transfer information, fee information, fraud signals, dispute information, and other data reasonably necessary to provide Crew Tips. YBOATS may retain transaction and acceptance records after account deletion when required for tax, accounting, fraud prevention, dispute resolution, legal compliance, or enforcement purposes.

7Artificial Intelligence and Automated Processing

YBOATS may transmit a user's prompt and necessary contextual information to AI service providers to generate a response or perform a requested analysis. AI outputs may be stored with the user's account or related record when needed to provide the feature. YBOATS does not use solely automated decision-making to make decisions that produce legal or similarly significant effects about users unless the user is provided any notice, choice, or right required by applicable law.

8How We Disclose Information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

• •Service providers that host data, operate databases, provide authentication, storage, analytics, crash reporting, communications, email, notifications, maps, weather information, AI processing, document processing, customer support, and security.
• •Payment and financial-service providers, including Stripe, connected financial institutions, card networks, banks, identity-verification providers, and fraud-prevention providers.
• •Account owners, vessel owners, captains, administrators, crew members, invited users, payers, recipients, or vendors as directed by the user or as necessary for collaborative features.
• •Government, regulatory, tax, maritime, law-enforcement, judicial, or other authorities when required or permitted by law.
• •Professional advisers, insurers, auditors, accountants, and legal counsel subject to appropriate confidentiality obligations.
• •A buyer, successor, investor, or other party involved in a merger, financing, reorganization, sale, bankruptcy, or transfer of all or part of our business, subject to applicable law.

Providers used by the Services may include Stripe, Convex, Google services such as Firebase and Google Maps, Expo, app-distribution platforms, weather-data providers, email-delivery providers, and AI service providers. The providers used may change as the Services evolve.

9Sale Sharing and Targeted Advertising

YBOATS does not sell personal information for money. YBOATS does not knowingly share personal information for cross-context behavioral advertising or use personal information for targeted advertising as those terms are defined by applicable U.S. state privacy laws. If these practices change, YBOATS will update this Policy and provide any legally required notice and opt-out mechanism.

10Cookies Analytics and Similar Technologies

YBOATS and its providers may use cookies, local storage, pixels, software-development kits, and similar technologies to maintain sessions, remember preferences, measure performance, understand use, prevent fraud, and secure the Services. Users can manage certain technologies through browser or device settings. Blocking essential technologies may prevent portions of the Services from functioning.

11Data Retention

YBOATS retains personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain user-directed vessel records, comply with law, prevent fraud, resolve disputes, and enforce agreements. Retention depends on the type of information, account status, user instructions, legal obligations, security needs, and whether information is contained in backups.

• •Account and profile information is generally retained while the account remains active and for a reasonable period afterward for recovery, security, support, and legal compliance.
• •Vessel records, documents, maintenance history, reports, messages, and user content are retained until deleted by an authorized user, the account is closed, or the applicable account administrator instructs otherwise, subject to backups and legal obligations.
• •Crew Tips, payment, transfer, acceptance, tax, accounting, dispute, and fraud-prevention records may be retained for the period required by applicable financial, tax, accounting, and legal requirements.
• •Diagnostic, analytics, security, and notification-delivery data is retained for periods reasonably necessary to operate, protect, and improve the Services.
• •Backup copies may remain for a limited period after deletion and are isolated from ordinary use until overwritten, unless preservation is legally required.

YBOATS may de-identify or aggregate information and retain it where it can no longer reasonably identify an individual, as permitted by law.

12Security

YBOATS uses reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication measures, secure infrastructure, monitoring, and encryption where appropriate. No method of transmission or storage is completely secure. Users are responsible for protecting account credentials, maintaining device security, assigning appropriate roles, and promptly reporting suspected unauthorized access.

13User Choices and Controls

• •Account information may be reviewed or corrected through available settings or by contacting YBOATS.
• •Camera, photos, files, notifications, and location permissions can be controlled through device settings.
• •Marketing emails can be unsubscribed from using the link in the message; essential service and security communications may continue.
• •Authorized users may delete certain uploaded records or request account deletion, subject to administrator controls and legal retention requirements.
• •Users may decline optional information requests, but some features may not function without the information needed to provide them.

14Privacy Rights

Depending on the user's residence and applicable law, the user may have rights to request access to personal information, obtain a copy, correct inaccuracies, request deletion, restrict or object to processing, withdraw consent, request data portability, opt out of certain sales, sharing, targeted advertising, or profiling, and appeal a refusal to act on a request. YBOATS will not unlawfully discriminate against a user for exercising a privacy right.

Requests may be submitted to privacy@yboatsmanagement.com. YBOATS may verify identity and authority before fulfilling a request. An authorized agent may submit a request where permitted by law, but YBOATS may require proof of authorization and identity. Some information may be exempt from a request or retained as required by law, to protect security, or to complete a transaction.

15California Privacy Notice

If the California Consumer Privacy Act applies to YBOATS and the requesting individual, the categories of personal information collected may include identifiers; customer records; commercial and financial information; internet or electronic activity; geolocation information; audio, electronic, visual, or similar information; professional or employment-related information; sensitive personal information such as precise geolocation, account credentials, and financial information; and inferences derived from the foregoing. The sources, business purposes, and categories of recipients are described in Sections 2 through 10.

YBOATS does not use or disclose sensitive personal information for purposes other than providing and securing requested Services, processing payments, preventing fraud, complying with law, and other purposes permitted without a right to limit under applicable law. California users may submit applicable requests using the contact information in Section 22.

16Information About Other People

Users may enter information about crew members, guests, vendors, payers, recipients, vessel owners, or other individuals. A user who provides another person's information represents that the user is authorized to provide it, has delivered any required notice, and will use the information only for lawful purposes. Account owners and administrators are responsible for managing access to such information.

17International Data Transfers

YBOATS operates from the United States and may use providers located in the United States and other countries. Personal information may therefore be transferred to and processed in jurisdictions whose privacy laws differ from those of the user's location. Where required, YBOATS uses legally recognized safeguards for international transfers. Users outside the United States may contact YBOATS for information about applicable transfer safeguards.

18Children's Privacy

The Services are not directed to children under 18, and YBOATS does not knowingly collect personal information directly from children. If YBOATS learns that personal information was collected from a child in a manner not permitted by law, YBOATS will take reasonable steps to delete it. A parent or guardian who believes a child provided information should contact privacy@yboatsmanagement.com.

19Third Party Services and Links

The Services may link to or integrate with third-party applications, websites, payment services, maps, weather services, app stores, or other products. Those third parties may collect information independently under their own privacy policies and terms. YBOATS is not responsible for third-party privacy practices. Users should review the applicable third-party notices before providing information.

20Business and Account Administrators

An account owner, captain, vessel manager, employer, or administrator may control an organization's workspace, invite or remove users, assign permissions, access content, and request export or deletion of records. Users should direct workspace-specific questions to their administrator. If an administrator closes or transfers a workspace, access to associated content may change or end.

21Changes to This Privacy Policy

YBOATS may update this Privacy Policy to reflect changes in the Services, technology, providers, or law. The updated Policy will display a revised effective date and version. YBOATS will provide additional notice when required by law or when a change materially affects privacy practices. Where legally required, YBOATS will request renewed consent before applying a material change.