Privacy Policy

1. Information We Collect

Account information: Email address, display name, and optionally a home marina and bio when you create an account.

Boat information: Make, model, year, engine type, engine hours, and hull ID for boats you add to your garage. This is used to power AI mechanic responses.

Location data: You provide a location when creating a meetup. The app displays meetup pins on a map. We do not continuously track your device location.

Payment information: Payment card details are collected and stored by Stripe. We do not store card numbers. We store your Stripe customer ID and subscription status.

Usage data: Agent session transcripts, voice transcriptions (text only — audio is not stored), and uploaded images are stored to support session continuity.

2. How We Use Your Information

• Provide, maintain, and improve the App
• Power the AI mechanic agent with your boat context
• Process billing and manage your subscription
• Send transactional emails (trial start, payment receipts, billing alerts)
• Display your profile, meetups, and follows to other users per your visibility settings
• Analytics on promotion impressions and redemptions (for businesses)

3. Data Sharing

We do not sell your personal data. We share data only with service providers necessary to operate the App:

• Supabase — database and authentication (US-East-2)
• Stripe — payment processing
• Anthropic (Claude) — AI mechanic agent inference
• OpenAI (Whisper) — voice transcription
• Resend — transactional email delivery
• Mapbox — map rendering

4. Data Retention

Account data is retained while your account is active. Agent session transcripts are retained for 12 months. If you cancel your subscription and request deletion, we will delete your personal data within 30 days, except where required for legal or financial record-keeping.

5. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing privacy@victoryrevconnect.com. We will respond within 30 days.

6. Security

All data is encrypted in transit (TLS) and at rest. Authentication tokens are stored in encrypted device storage. Row-level security policies prevent users from accessing other users' private data.

7. Children

The App is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with their data, contact us to have it removed.

8. Changes

We will notify active subscribers of material changes to this policy by email at least 14 days before they take effect.

9. Contact

Privacy questions: privacy@victoryrevconnect.com