Privacy Policy

Last updated: April 1, 2026

SeaLink.cloud ("we", "us", "our") operates the SeaLink.cloud vessel monitoring platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Account Information: When you create an account, we collect your email address, password (stored as a bcrypt hash, never in plain text), and optionally your phone number (for SMS alert delivery) and boat name.

Vessel & Sensor Data: When you connect your SignalK server to SeaLink.cloud, we receive NMEA instrument data including but not limited to: GPS position, wind speed and direction, water depth, barometric pressure, temperature, humidity, battery voltage, solar output, and other sensor readings transmitted by your onboard instruments.

Derived Data: We generate derived analytics from your raw sensor data, including polar performance curves, tide predictions, alert trigger history, and activity logs.

Usage Data: We collect basic usage information such as login timestamps, IP addresses (for rate limiting and security), and UI preferences (dashboard layout, theme selection, chart configuration).

2. How We Use Your Information

• Display your vessel data on your private dashboard in real time
• Process and deliver anchor alarm and custom alert notifications via SMS and email
• Generate sailing analytics (polar performance, tide predictions, time-series charts)
• Maintain activity logs for your account security and audit trail
• Improve and maintain the reliability of our service
• Communicate with you about your account and service updates

3. Data Storage & Security

All data is transmitted over HTTPS with TLS encryption. Your vessel data is stored in a SQL Server database with per-vessel isolation. Each vessel is assigned a unique Device Key for authentication, ensuring that only authorized devices can submit data for your boat.

Passwords are hashed using bcrypt and are never stored or transmitted in plain text. JWT tokens are used for session authentication and can be revoked via logout.

4. Data Sharing & Disclosure

We do not sell, rent, or share your personal information or vessel data with third parties for marketing purposes.

We use the following third-party services solely to operate our platform:

• Twilio — for delivering SMS alert notifications (anchor alarms, custom alerts). Your phone number and alert message content are transmitted to Twilio when an alert fires.
• Mailgun — for delivering email notifications and account communications. Your email address and message content are transmitted to Mailgun.
• Cloud hosting provider — our servers and database are hosted on managed cloud infrastructure with industry-standard security practices.

We may disclose your information if required by law or to protect the safety and security of our users and platform.

5. Public Tracking

Public vessel tracking is opt-in only. By default, your vessel position and data are private. If you enable public tracking in your dashboard settings, your vessel's current position and selected sensor readings will be accessible via a public tracking page and embeddable widget. You can disable public tracking at any time, and your data will immediately become private again.

6. Cookies & Local Storage

SeaLink.cloud uses minimal browser storage:

• JWT authentication token — stored in localStorage to maintain your login session
• UI preferences — stored in localStorage (theme, dashboard layout, chart configuration)

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Data Retention & Deletion

Your vessel sensor data, GPS positions, and analytics are retained for the duration of your account. Activity logs are retained for 90 days. Alert trigger history is retained for 90 days.

You may request deletion of your account and all associated data by contacting us at hello@sealink.cloud. Upon account deletion, all vessel data, sensor history, analytics, and personal information will be permanently removed from our systems.

8. Multi-Crew Access

If you invite crew members to your vessel, they will have access to your vessel's dashboard and data according to their assigned role. As the vessel owner, you control who has access and can revoke crew access at any time.

9. Children's Privacy

SeaLink.cloud is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when this policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
hello@sealink.cloud