Privacy Policy

1. Data Controller Identity

Pending legal configuration: The legal entity name, registered address, and privacy contact must be confirmed before commercial launch.

2. Contact Information

For privacy inquiries, contact: Pending legal configuration.

3. Categories of Personal Data

Y Marine OS may process the following categories of personal data:

• Account data: Name, email, role, organization membership.
• Crew data: Crew member profiles, certifications, work records, assignments.
• Guest data: Guest preferences, dietary requirements, charter history (access-restricted).
• Charter data: Charter transactions, proposals, agreements, APA records.
• Technical records containing personal information: Work order assignees, defect reporters, journey log contributors.
• Usage and analytics data: Platform interaction events, feature usage (subject to consent).
• Device and log data: IP addresses, access timestamps, audit logs.
• Support communications: Support tickets, correspondence, temporary access grants.

4. Purpose of Processing

We process personal data for the following purposes:

• Providing yacht management, technical, maintenance, and charter operations functionality.
• Managing organization memberships, roles, and yacht assignments.
• Generating intelligence, reports, and AI-assisted insights.
• Maintaining audit trails for security and compliance.
• Providing support and customer service.

5. Legal Bases

We process personal data based on: contract performance (providing the Platform), legitimate interests (security, audit), legal compliance, and consent (where applicable, such as analytics and marketing).

6. Recipients

Personal data is accessible only to authorized users within your Organization, as determined by role-based access control. Platform administrators may access data for support purposes, subject to temporary support grants and audit logging.

7. Processors and Subprocessors

We engage subprocessors to provide the Platform. A current list of subprocessors is maintained in our Subprocessors page. We enter into data processing agreements with all subprocessors.

8. International Transfers

Pending legal configuration: Transfer mechanisms and safeguards must be confirmed by qualified counsel where international data transfers apply.

9. Retention

Personal data is retained according to our Data Retention Policy. Retention periods consider legal, financial, charter, and audit requirements. Deletion requests are subject to retention obligations.

10. Security

We implement role-based access control, tenant isolation, audit trails, signed integrations, and domain separation. See our Security page for details.

11. User and Data Subject Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data. You may also have the right to object to processing and to withdraw consent.

12. Deletion

You may request deletion of your data through the Platform. Deletion is subject to legal, financial, charter, and audit retention obligations. See our Data Deletion page for details.

13. Cookies

We use cookies and similar technologies. Necessary cookies are always active. Analytics and marketing cookies require your consent. See our Cookie Policy for details.

14. AI Processing

We use AI to assist with maintenance evidence extraction, intelligence summaries, and conversational features. AI does not make autonomous decisions about safety-critical maintenance. See our AI Policy for details.

15. Automated Processing

Certain Platform features involve automated processing (e.g., maintenance forecasting, anomaly detection). These features assist human decision-making and do not replace professional judgment.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform.

17. Contact

Pending legal configuration: Privacy contact information must be confirmed before commercial launch.