Privacy Policy

Blue Harbor ("we," "our," or "us") operates the Blue Harbor web application and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using Blue Harbor, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the service.

1. Information We Collect

Personal Information: When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information such as your payment card details, which are processed and stored securely by our payment processor, Stripe. We do not store your full credit card number on our servers.

Vessel and Maritime Data: You may voluntarily provide information about your watercraft, including vessel names, registration details, maintenance logs, documents, expense records, photos, and task lists. This data is stored in our database hosted on Supabase.

Location Data: With your consent, we may collect your general location to provide localized weather forecasts, tide predictions, and boating intelligence. We use the OpenWeather API and NOAA (National Oceanic and Atmospheric Administration) data services to retrieve weather and tide information based on your configured location.

Usage Data: We automatically collect information about how you interact with the platform, including pages visited, features used, browser type, device information, IP address, and access timestamps.

2. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Blue Harbor platform; process transactions and manage your subscription through Stripe; deliver personalized boating intelligence, weather forecasts, and tide predictions; send you service-related communications such as account confirmations, billing receipts, and security alerts; respond to your inquiries and provide customer support; analyze usage patterns to improve our features and user experience; and comply with legal obligations and enforce our Terms of Service.

3. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data with the following categories of service providers who assist us in operating the platform:

Supabase: Our database and authentication infrastructure provider. Your account data, vessel information, and application data are stored on Supabase's PostgreSQL databases with row-level security policies.

Stripe: Our payment processor. When you subscribe to a paid plan, Stripe processes and stores your payment information in accordance with PCI DSS standards. Please review Stripe's privacy policy for details.

OpenWeather and NOAA: We send location coordinates (latitude and longitude) to OpenWeather and NOAA APIs to retrieve weather and tide data. No personally identifiable information is shared with these services.

We may also disclose your information if required by law, in response to valid legal process, to protect the rights and safety of Blue Harbor or others, or in connection with a merger, acquisition, or sale of assets.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze platform usage. Essential cookies are required for the platform to function properly, including authentication tokens managed by Supabase Auth. For more details, please see our Cookie Policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data from our active databases within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements. Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytics purposes.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data:

Under the GDPR (European Economic Area): You have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise these rights, contact us at privacy@blueharbor.app.

Under the CCPA (California): California residents have the right to know what personal information is collected, request deletion of personal information, and opt out of the sale of personal information. As noted above, we do not sell personal information. To submit a request, contact us at privacy@blueharbor.app. We will respond to verified requests within 45 days.

7. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, row-level security policies in our database, and secure authentication via Supabase Auth. Payment information is handled by Stripe and is never stored on our servers. While we strive to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

Blue Harbor is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Blue Harbor after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@blueharbor.app. You may also reach us by mail at: Blue Harbor, Attn: Privacy Team, 123 Harbor Drive, Suite 200, Marina Del Rey, CA 90292, United States.