Privacy

We hold:

• Your email address, which is how you sign in. Passwords are stored hashed by our authentication provider; we never see them.
• Your broker profile — name, title, phone number, contact email and photograph. You enter these yourself, and they exist because they print on your launch reports and appear on the pages you send buyers.
• Your office: its name, its branding, and who else is in it.
• Everything you upload for a boat: photographs, video, spec sheets, surveys, service records, notes.
• The packages we build from that material.
• Billing status. Card details are held by Stripe, not by us — we never receive them.

We use all of it for one thing: running the service you are paying for. We do not sell it, rent it, or use it for advertising.

You have no account and we are not trying to give you one. When you open a boat’s page we record that a visit happened, and which parts of the page were opened — the photographs, the specifications, the video.

To count how many different people looked, without knowing who any of them are, we take your IP address and browser type, mix them with a secret of ours and today’s date, and store only the resulting hash. Your IP address itself is never written down.

The date is the part that matters. Because it changes daily, the same visitor produces a different value tomorrow. That means “how many people looked at this boat today” is a question the data can answer, and “is this the same person who looked last Tuesday” is a question it cannot. We built it that way deliberately: a table that could follow one person across months is a liability, and a seller asking whether anyone is looking at their boat has never needed one.

If you fill in the enquiry form, that is different and obvious: your name, email address and message are sent to the broker so they can reply to you. That is the entire point of the form.

There are no advertising trackers, no analytics scripts, and no third-party cookies on these pages.

Building a package means reading what you uploaded. Your documents and photographs are sent to Anthropic’s API, which reads them and returns the specifications, the copy and the photograph choices. Under their API terms that material is not used to train models.

Video is rendered on Amazon Web Services. Your files go there to be assembled and the finished video comes back.

If you use the brand lookup on the Brand Kit screen, we send the website address you typed to Brandfetch to fetch your logo, colours and typeface. We send nothing else, and we cache the answer so the same brokerage is only ever looked up once.

We use a small number of companies to run the service. Each one only receives what it needs to do its job:

• Vercel — hosting.
• Supabase — the database, sign-in, and the storage your files sit in.
• Anthropic — reads your documents and photographs to build the package.
• Amazon Web Services — renders the video.
• Stripe — payments. They hold your card details; we hold none of them.
• Resend — sends our email.
• Brandfetch — brand lookups, when you ask for one.

We will also hand over data if the law requires it. If that ever happens and we are allowed to tell you, we will.

• Account data and packages: for as long as you have an account. Cancelling does not delete anything — a read-only account keeps everything it built.
• Trial samples and the files uploaded for them: 14 days, then deleted, unless you claim the package into an account.
• Buyer page visit records: kept while the listing exists, and useless for identifying anyone after the day they were made.
• Billing records: kept as long as tax and accounting rules require, which is longer than the rest.

Ask us to delete your account and we will delete it and its files. That is not reversible, so take copies of anything you want first.

Write to team@cruisingspeed.app and we will, within a reasonable time: tell you what we hold about you, correct anything wrong, give you a copy, or delete it.

Depending on where you live you may have further rights — for example under the California Consumer Privacy Act or, in Europe and the UK, the GDPR. We do not sell personal information, so there is nothing to opt out of on that front. Ask and we will help you exercise anything else you are entitled to.

One cookie, and it keeps you signed in. There is no advertising, no tracking across other websites, and no consent banner because there is nothing to consent to.

This is a tool for yacht brokerages. It is not for children and we do not knowingly collect anything from anyone under 18.

If we change how any of this works we will update the date at the top, and if the change matters we will email account holders rather than leaving it to be discovered.

Questions, or anything above that reads as evasive to you: team@cruisingspeed.app.