SeaOps ("we", "us") provides vessel management software for maritime crews and operators,
including the SeaOps web dashboard, the SeaOps mobile apps for iPhone and Android, and the
SeaOps Apple Watch app (together, the "Service"). This policy explains what data we process,
why, and the choices you have. The data controller is SEAOPS DOO.
Data we collect
- Account information. Your name, email address, role,
and company affiliation, created for you by your company's administrator so you can sign in.
- Operational records. Content you or your company enter
while using the Service: rest-hours and work-schedule records, sign-offs, comments, safety
reports, maintenance tasks, crew records (such as date of birth, nationality, and emergency
contacts), crew changes, and related vessel documentation. This data belongs to your company
and is processed to provide the Service and to support maritime-labour compliance (e.g.
MLC/STCW rest-hours requirements).
- Certificates and travel documents. The certificates (such
as STCW and medical certificates) and travel documents (such as passports, seaman's books, and
visas) that you or your company add to a crew record: their type, number, and dates, and the
photos or PDFs uploaded. The mobile app opens the camera, your photos, or your files only when
you add a document, and we receive only what you pick.
- Port-call documents. If your company prepares documents for
a port call, the crew list and the answers it gives, including the Maritime Declaration of
Health, which can mention illness on board.
- Expenses and receipts. If your company uses SeaOps
accounting, the expenses you record (amount, currency, date, merchant, VAT, and how you paid)
and the receipt photos you add. The mobile app uses the camera only when you photograph a
receipt and opens your photos only when you choose one; we receive only the photos you pick.
- Device push token. If you enable notifications in the
mobile app, we store your device's push token and name so we can deliver notifications to
it. They are deleted when you sign out or when the device stops accepting notifications.
- Technical logs. Standard server logs (IP address,
timestamps, requested endpoints) kept for security and troubleshooting.
What we do not do
- We do not sell your data.
- We do not use advertising or cross-app tracking of any kind.
- We do not use third-party analytics in the mobile app.
Service providers
We share data only with the processors required to operate the Service:
- Expo (Expo.dev), Apple Push Notification service, and Google Firebase Cloud Messaging — deliver push
notifications to iPhones and Android phones (notification title, message, and routing data
transit their systems).
- Anthropic — when document reading is switched on, the
receipts, certificates, and travel documents you add (photos or PDFs) are sent to Anthropic's
API to read their details, such as a receipt's merchant, date, and amounts, or a document's
number, dates, and holder.
- OpenWeatherMap — weather for your vessel's position or a
place you search; no account data is sent.
- Resend — sends transactional emails such as invitations
and notification digests.
- Paddle.com — Merchant of Record for SeaOps orders;
processes payments, invoices, taxes, and refunds.
- Hosting and storage providers for the backend and uploaded files.
Beyond these providers, data goes only where you or your company send it: port-call documents
to the email addresses your company enters, such as a port agent's, and your SeaOps ID to
whoever you share its link with. A shared SeaOps ID shows your name, certificates, which travel
documents you hold, sea service, and hours of rest for seven days, but never your date of
birth, contact details, travel document numbers, or uploaded files. You can stop sharing it at
any time.
Retention and deletion
Operational records are retained for as long as your company uses the Service and as required
by maritime record-keeping regulations. When your account is deactivated, your sessions and
device push tokens are removed immediately. To request access to or deletion of your account
and personal data, contact your company administrator or reach us directly at the address
below. Accounts are created and managed by your company, so they are not created or deleted
in the mobile app.
Security
Data is transmitted over TLS and stored with access restricted by role-based permissions.
Mobile sessions are stored in the device's secure keychain.
Changes
We will post any changes to this policy on this page and update the date above.