CruisePilot Privacy Policy

1. Who We Are

CruisePilot is a platform for cruise operations, tenant management, environmental reporting, and data exports. This policy applies to users of the mobile app and the web application.

2. Data We Collect

• Account data: name, email address, username, password hash, and authentication identifiers.
• Profile and membership data: tenant membership, roles, group memberships, and invitation status.
• Operational cruise data: trip details, crew assignments, invitation records, and trip activity metadata.
• Environmental report data: report type, status, moderation notes, timestamps, and location coordinates where submitted.
• Technical data: device/browser information, IP address, session and security logs, and basic usage diagnostics.

3. How We Use Data

• To authenticate users and secure access to tenant-scoped features.
• To enable cruise, crew, invitation, moderation, and export workflows.
• To operate sustainability features such as eco-guides, eco-alerts, and report moderation.
• To provide support, maintain platform reliability, and improve product performance.
• To meet legal, security, and compliance obligations.

4. Legal Bases (where applicable)

Depending on jurisdiction, we process data based on contractual necessity (to provide the service), legitimate interests (security and service improvement), legal obligations, and consent where required.

5. Data Sharing

We do not sell personal data. We may share data with:

• Service providers supporting hosting, infrastructure, analytics, communications, and security operations.
• Authorized tenant administrators within the same tenant scope.
• Authorities or legal entities when required by law or to protect rights and security.

6. Data Retention

We retain personal data for as long as necessary to provide the service, maintain records, resolve disputes, enforce agreements, and comply with legal obligations. Retention periods may vary by data type and tenant requirements.

7. Security

We use reasonable technical and organizational safeguards to protect data against unauthorized access, alteration, disclosure, or loss. No method of transmission or storage is fully risk-free, but we continuously improve security controls.

8. Your Rights

Depending on local law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to request data portability.

For account-related requests, contact your tenant administrator first, or contact us through the support channels available in the app and website.

9. Children’s Privacy

CruisePilot is not intended for children under the age required by applicable law without appropriate authorization. If you believe personal data of a child has been submitted improperly, contact us so we can review and act.

10. International Transfers

Where data is transferred across borders, we apply appropriate safeguards in line with applicable legal requirements.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected on this page with a revised effective date.

12. Contact

If you have privacy questions or requests, please contact us through the official support channels listed in CruisePilot app and website.

For account/data deletion requests, use: Data Deletion Request Page.