Privacy Policy

1. Who we are

YachtSalesHQ is a CRM tool for independent yacht brokers, operated as a sole-proprietor service. If you have any privacy questions or want to exercise your rights, email us at support@yachtsaleshq.com. That address also serves as our Data Subject Access Request (DSAR) contact.

2. Data we collect

• Account data: your name, email address, and hashed password (Argon2id). If you sign in with Google, we receive your name and email from Google; we never see your Google password.
• Session metadata: a session token stored in a cookie, your IP address, and user-agent string for security purposes.
• CRM data you enter: contacts (buyers/sellers), activities, deals, and tasks you create inside the app. This is your data; we store it to provide the service.
• Error telemetry: stack traces and page URLs sent to Sentry when the app crashes, to help us fix bugs. These may incidentally contain data visible on screen at the time of the error.
• Admin notifications: when you log in, an automated message is sent to our admin Telegram account so we know the service is being used. This includes your email address and approximate login time.

3. Legal basis (GDPR)

• Contract (Art. 6(1)(b)): processing your account data, session data, and CRM data is necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)): error telemetry and login notifications help us keep the service secure and operational. Our interest is proportionate, and we do not use this data for advertising.

4. Subprocessors

We use the following third-party services to operate YachtSalesHQ:

5. Retention

We keep your data for as long as your account exists. You can delete individual contacts from within the app. To delete your entire account and all associated data, go to Settings and use the “Delete Account” option, or email support@yachtsaleshq.com. We will complete the deletion within 30 days.

Backup copies (Backblaze B2) are purged on a rolling basis; residual copies may persist for up to 30 days after deletion.

6. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access: get a copy of the data we hold about you.
• Rectification: correct inaccurate data.
• Deletion: ask us to erase your data.
• Portability: export your CRM data as CSV from Settings.
• Restriction: ask us to pause processing while a dispute is resolved.
• Objection: object to processing based on legitimate interests.

For self-service options (export, delete), visit Settings. For anything else, email support@yachtsaleshq.com. We respond within 30 days.

7. Cookies

We use a single strictly-necessary session cookie to keep you logged in. We do not use analytics, advertising, or tracking cookies. No cookie banner is required because we set no non-essential cookies.

8. International transfers

YachtSalesHQ is operated from the United States. If you access the service from the EU or EEA, your data is transferred to the US. We rely on Standard Contractual Clauses (SCCs) entered into by our subprocessors (DigitalOcean, Google, Sentry, Backblaze) as the lawful transfer mechanism.

9. Changes to this policy

We may update this page when the service changes. The effective date at the top will reflect the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

Questions? Email support@yachtsaleshq.com.