Privacy Notice

Information we collect

• Account information such as name, email, password hash, preferences, policy acceptances, and security events
• Vessel, equipment, maintenance, task, voyage, budget, log, crew, and emergency-contact information you enter
• Documents and photos you deliberately upload
• Location and device information only when tracking or location features are deliberately used
• Technical information needed for security and operation, such as IP address, session, browser, request time, error and audit data
• Support communications and privacy requests

Why we use it

• Create and secure your account
• Provide vessel and operational features
• Apply permissions and sharing choices
• Deliver requested reminders, alerts, exports, and support
• Diagnose failures, prevent abuse, investigate security incidents, and maintain audit evidence
• Comply with applicable law and enforce service terms
• Improve the service using privacy-minimized information

Location information

Location tracking is off by default. When enabled, Marine may process coordinates, time, accuracy, course, speed, device, vessel, and track information. The interface must show that tracking is active and provide controls to stop, retain, delete, or share location according to available settings. Location can reveal home, habits, travel, and absence; treat shared links as sensitive.

Sharing and service providers

Marine discloses information to users you authorize, service providers needed to host, store, email, secure, back up, or support the application, and authorities where disclosure is required or permitted by law. Providers receive only the access needed for their function and should be bound by appropriate confidentiality and security terms. Marine does not sell personal information or use it for third-party behavioural advertising.

Retention

Information is retained while needed to provide the account and for documented security, audit, dispute, legal, and backup purposes. Tracking and exports should have shorter configurable retention. Deleted information may remain in encrypted backups until normal rotation expires. Audit records may be retained or anonymized where necessary to protect users and service integrity.

Safeguards

Marine uses role and policy checks, password hashing, secure sessions, rate limiting, private file controls, audit records, dependency checks, backups, and other administrative and technical safeguards appropriate to the information. No online service can promise absolute security; users should protect credentials and report suspicious activity promptly.

Your choices and rights

You may review and correct account information, manage sharing and notifications, stop tracking, request access or export, and request deletion subject to lawful exceptions. Identity must be verified before disclosing or changing protected information. If a request is refused or limited, Marine should explain the reason where legally permitted.

Canadian privacy context

Depending on the organization, activity, and location, Canada’s federal private-sector privacy law or substantially similar provincial legislation may apply. British Columbia’s Personal Information Protection Act governs many private-sector organizations in the province, while PIPEDA may apply to interprovincial or other covered commercial activity. This Notice is intended to support those privacy principles without limiting rights provided by applicable law.

Questions and complaints

Privacy questions, access/correction requests, and complaints should be sent through the authenticated support process or Tocsin Data’s published contact channel. Provide enough information to identify the issue but do not send passwords or unnecessary sensitive records. A privacy complaint will be investigated and documented. You may also contact the privacy regulator with jurisdiction over your concern.

Authoritative references

• Office of the Privacy Commissioner of Canada
• Office of the Information and Privacy Commissioner for British Columbia