Privacy Policy

Information you or your organization provide. Name, email address, password, authentication factors, role, team or organization details, invitations, names or labels assigned to boats and sailors, notes, annotations, starred moments, support communications and any other content submitted to the Service. A coach, team administrator or other user may provide information about you, including your name and the device or boat you use.

Information from tracking devices. Precise geolocation (including centimetre-level position), time, speed, heading, heel, pitch, acceleration and other motion and sensor data; device identifiers; battery, signal, storage and diagnostic data; and logs and console output.

Information collected automatically. IP address, approximate location derived from IP, browser and device type, operating system, referring URLs, pages and features viewed, links and controls clicked, mouse movements, scrolling, taps, keystrokes in non-sensitive fields, time spent, session recordings and replays of your interactions with the Service, error and performance data, and information from cookies, local storage, pixels, SDKs and similar technologies.

Inferences. Information we derive from the above, including performance metrics, skill levels, maneuver classifications, behavioural patterns and predictions.

We may use personal information to:

• provide, operate, maintain and secure the Service, including live tracking, replays, sharing and device management;
• review, replay and analyse sessions, tracks, maneuvers, recordings of on-site activity and other user data, through personnel, contractors and automated systems;
• analyse sailing performance, technique and behaviour, individually and across users, teams and fleets;
• research, develop, train, test and improve products, features, algorithms and machine-learning and artificial-intelligence models;
• create aggregated, de-identified or anonymised data and use it for any purpose;
• understand how people use the Service, measure and improve it, debug and fix errors;
• communicate with you, including service, security and marketing messages;
• personalise content and features;
• detect, prevent and investigate fraud, abuse, security incidents and violations of our terms;
• comply with law, enforce our rights and respond to legal process; and
• any other purpose disclosed when the information is collected, or with your consent.

We and our service providers may use session-recording and analytics technologies. They capture how you interact with the Service, including clicks, mouse movements, scrolling, page views and text typed into non-sensitive fields, and can reproduce your session. Password and payment fields are masked. Our personnel and providers may view these recordings. Where required by law, we ask for your consent before using these technologies.

Precise geolocation is central to the Service and may be considered sensitive personal information. We use it to provide the Service and for the purposes in Section 2. Where law requires consent to process it, we obtain that consent, either from you or through the organization that operates your device.

We may disclose personal information to:

• your organization and other users, including coaches, administrators and teammates with access to your organization or sessions;
• the public, when a user enables a public share link. Anyone with the link can view the shared session, including live positions;
• service providers and contractors who host, store, process, analyse or support the Service (for example cloud hosting, databases, mapping, weather, analytics, session recording, email and customer support);
• affiliates under common control with us;
• professional advisers and authorities, when we believe disclosure is required by law or needed to protect rights, property or safety;
• a buyer or successor in a merger, acquisition, financing, reorganisation, bankruptcy or sale of assets; and
• others, with your consent or at your direction.

We may disclose aggregated or de-identified information to anyone for any purpose. We keep de-identified information in de-identified form and do not attempt to re-identify it, except as permitted by law.

In the 12 months before the effective date, we have not sold personal information or shared it for cross-context behavioural advertising, as those terms are defined under California law. If that changes, we will update this Policy and provide any opt-out required by law.

We use cookies and local storage that are necessary to sign you in and remember your preferences. We may also use analytics and session-recording technologies (Section 3). Where law requires it, we honour Global Privacy Control signals as a request to opt out of the sale or sharing of personal information. We do not otherwise respond to Do Not Track signals.

We keep personal information for as long as needed for the purposes in this Policy. That includes providing the Service, keeping historical sessions and replays available, research and product development, legal, accounting and security needs, and resolving disputes. Criteria we use include the type of data, whether your account or organization is active, whether the data is part of a session or replay, and legal requirements. Unused raw device recordings are typically deleted after a period of inactivity. Aggregated and de-identified data may be kept indefinitely.

We use reasonable administrative, technical and physical safeguards. No system is completely secure, and we cannot guarantee the security of information.

The Service is not directed to children under 13. Children under 13 may not create accounts. Organizations may not enter or track information about a child under 13 unless we have first obtained verifiable parental consent through a process we provide. An organization that uses the Service with sailors aged 13–17 must have authority from each sailor's parent or guardian for the collection, use and disclosure described in this Policy. If we learn we have collected information from a child under 13 without the required consent, we will delete it. Contact privacy@sailstream.app.

Organizations and their users decide who is tracked, what names and labels are entered, and whether sessions are shared publicly. We rely on organizations to provide notice and obtain consent from sailors and their parents or guardians, as required by our Terms. When information about a sailor came from an organization, direct questions and requests to that organization first; you may also contact us.

You can update account information, export your data and delete your account in account settings. Depending on where you live, you may have rights to access, correct, delete or port your personal information; to opt out of sale, sharing, targeted advertising or certain profiling; to limit use of sensitive personal information; and to appeal our decision on a request. Submit requests to privacy@sailstream.app. We verify requests by confirming control of your account or other information we hold. An authorised agent may submit a request with proof of authority. We will not discriminate against you for exercising these rights. If an organization provided information about you, we may refer your request to that organization or ask for its input. To appeal a decision, reply to our response with “Appeal” in the subject line.

We are based in the United States and process information there and in other countries where our providers operate. By using the Service you understand your information will be processed in those countries.

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, give additional notice as required by law. If a change would materially expand how we use personal information we already collected, we will obtain consent where law requires it.

SailStream LLC, 1717 N Street NW, Ste 1, Washington, DC 20036, USA, privacy@sailstream.app.