Privacy Policy

Who is responsible for your data

The controller for the processing described here is [TODO: registered company name] ([TODO: legal form — e.g. Lda. / GmbH / Ltd.]), [TODO: street and number], [TODO: postcode and city], [TODO: country]. For anything in this policy, including requests to exercise your rights, contact privacy@seaworthboats.com.

Full company details are on our Imprint.

Data we collect about you

We collect the following categories of personal data when you use Seaworth:

Account data

Your email address, password (stored only as a salted hash), display name, and — if you sign in with Google or Apple — the account identifier and email address those providers return to us.

Product usage

The boats you save, the searches you run, and the valuations you request. We use these to provide the features themselves and to enforce the limits of the free tier.

Billing data

If you buy a paid plan, our payment processor handles your card details — we never see or store them. We keep your customer identifier, what you bought, and the invoices we are legally required to retain.

Technical data

IP address, browser and device information, and server logs, used to keep the service running, secure, and free from abuse.

Why we are allowed to process it

Under the GDPR, every processing activity needs a legal basis. Ours are:

Contract

Art. 6(1)(b) — creating and running your account, delivering the valuations and features you asked for, and taking payment for a paid plan.

Legitimate interests

Art. 6(1)(f) — keeping the service secure and available, preventing abuse, understanding aggregate usage so we can improve the product, and aggregating public listing data to provide market transparency. We balance these against your rights, and you can object at any time.

Consent

Art. 6(1)(a) — marketing emails and saved-search digests, which we send only if you opt in, and which you can withdraw from in every message we send.

Legal obligation

Art. 6(1)(c) — retaining invoices and tax records for the statutory period.

Listing data, and the sellers behind it

This section is the notice required by Art. 14 GDPR. It is addressed to the sellers, brokers and dealers whose boat listings appear on Seaworth — people whose data we obtained from a source other than themselves.

Where it comes from

Publicly accessible boat listings on marketplaces including Boat24, BandOfBoats, Yachtall, Yachtworld, ApolloDuck, Scanboat, TheYachtMarket, CosasDeBarcos, FINN, Blocket, DBA.

What it contains

Boat specifications, asking prices, photographs, the listing's location, and the name of the advertising seller or dealership — which, for a sole trader, can be personal data.

Why we process it

Our legitimate interest (Art. 6(1)(f)) in bringing price transparency to a market that has very little of it. A buyer cannot judge whether a price is fair without seeing the market around it.

What we do not do

We do not display private sellers' contact details and we do not build profiles of individuals. We link out to the original listing on the source marketplace instead of reproducing the seller's contact information.

How long we keep it

For as long as the listing remains relevant to market history. Price and availability history outlives the individual listing, because that history is what makes a valuation trustworthy.

Who we share data with

We do not sell personal data. We share it only with the service providers that make Seaworth work, each bound by a data-processing agreement:

• Amazon Web Services — hosting, databases and transactional email, in the EU region.
• Stripe — payment processing for paid plans.
• Anthropic — generating the plain-language explanation of a valuation. Only the boat's specifications and the model's own outputs are sent; never your identity or account data.
• Umami — cookieless, privacy-friendly product analytics.
• Sentry — error monitoring, configured without session replay and without collecting personal data by default.

We may also disclose data where the law requires it, or to establish or defend legal claims.

How long we keep it

Account data

Until you delete your account, at which point it is erased or anonymised. Residual copies may persist in encrypted backups for up to 30 days.

Usage records

Up to 24 months, so we can enforce free-tier limits and understand product trends.

Server and security logs

Up to 12 months.

Invoices and tax records

For the statutory retention period. This outlives your account, and we cannot shorten it on request.

Your rights

If you are in the EU or EEA, you have the right to:

• access the personal data we hold about you, and get a copy of it;
• have inaccurate data corrected;
• have your data erased — deleting your account does this;
• receive your data in a portable, machine-readable format;
• restrict or object to processing we base on our legitimate interests;
• withdraw consent to marketing at any time, without affecting what we sent before; and
• lodge a complaint with your national data protection authority.

To exercise any of these, email privacy@seaworthboats.com. We will respond within one month.

Cookies and analytics

Seaworth sets no advertising or tracking cookies, and our analytics are cookieless — which is why you have not been asked to dismiss a consent banner. The Cookie Policy lists exactly what we store on your device, and why.

International transfers

We host Seaworth in the European Union. Where a provider processes data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or by an adequacy decision.

Children

Seaworth is not intended for children. You must be at least 16 years old to create an account.

Changes to this policy

If we change how we use personal data, we will update this page and move the date at the top. Where a change is significant, we will tell you directly.