Legal
Privacy Policy
Effective May 18, 2026
Who we are
BinnacleHarbor is a marina slip management platform operated by Bluewave Projects, a company based in Hawaiʻi, USA (we, us, or our). Our software helps marina operators manage slip assignments, vessel check-ins, billing, and harbor communications.
Questions about this policy: [email protected]
What data we collect
We collect two categories of data:
Account data (marina operators)
- Name and email address used to create your account
- Organization name and billing details (via Stripe — we never store card numbers)
- Usage logs (pages visited, actions taken) for product improvement
Vessel visit data (captains and vessels you log)
When you check a vessel into a slip, you may enter:
- Captain name
- Vessel name and type
- Email address and phone number
- Length overall (LOA) and arrival date
- Billing and payment records tied to the visit
This data is entered by marina staff on behalf of visiting captains. It is stored in your marina's account and is only accessible to your authorized users.
How we use your data
- Provide the service — display slip status, calculate billing, generate reports
- Weather notifications — if you use the weather alert feature, captain email addresses you have on file are used to send harbor advisories you compose and send. We do not send email to captains on our own initiative.
- Support and troubleshooting — we may access your account data to diagnose issues you report
- Product improvement — aggregated, anonymized usage patterns help us build better features
We do not sell your data or captain contact information to any third party.
Weather notification emails
The weather alert feature lets harbormaster accounts send bulk email to captains currently checked into your marina. Key points:
- You write and send the message — we provide the delivery mechanism
- Emails are sent from your marina's name and include your marina address
- Captains may reply to unsubscribe from future harbor alerts; honor those requests promptly
- These emails are operational/transactional in nature (harbor safety, weather) — use them only for that purpose
Data retention
Vessel visit records are retained for as long as your marina account is active. If you close your account, we delete your data within 30 days unless we are required by law to retain it longer.
To request deletion of a specific captain's records (e.g., a right-to-erasure request under GDPR or CCPA), email us at [email protected] and we will process it within 30 days.
Cookies and tracking
We use one session cookie (next-auth.session-token) to keep you logged in. It is HTTP-only, secure in production, and expires when you sign out. We do not use advertising cookies or third-party tracking pixels.
Third-party services
- Stripe — payment processing. Stripe's privacy policy governs card data.
- NOAA / National Weather Service API — we fetch public weather alert data from api.weather.gov. No user data is sent to NOAA.
- Vultr — cloud hosting. Servers are located in the United States.
Security
Passwords are hashed with bcrypt (12 rounds). All traffic is encrypted via TLS. Database access requires authenticated sessions. We conduct periodic security reviews.
Your rights
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, email [email protected]. We will respond within 30 days.
Changes to this policy
We will post any changes here with an updated effective date. Continued use of the service after changes take effect constitutes acceptance.
BinnacleHarbor · Bluewave Projects · Hawaiʻi, USA