Privacy Policy

Last updated: April 16, 2026

BoatMC ("the Service") is a marine vessel monitoring platform operated by Gil Barden. This policy describes what data we collect, how we use it, and your rights.

Data We Collect

When you create an account, we collect:

• Account information: name, email address, and password (hashed, never stored in plaintext)
• Boat details: boat name, type, and configuration you provide

When you connect your vessel's hardware, we collect:

• Marine telemetry: GPS position, battery state, solar output, tank levels, depth, wind, engine data, and other sensor readings transmitted from your onboard systems
• Device information: Cerbo GX portal ID, Signal K server identity, Sentinel host information, or Raspberry Pi host information used to identify your monitoring hardware

How We Use Data

Your data is used to provide vessel monitoring, dashboards, alerting, remote access, MCP integrations, and BoatMC-managed summaries or recommendations where those features are enabled. We do not sell, share, or distribute your personal data or telemetry to third parties for marketing purposes.

Third-Party Services

BoatMC uses third-party infrastructure for some features. When BoatMC itself generates managed explanations, recommendations, or alert replies, relevant telemetry and account context may be sent through BoatMC's managed AI stack, which currently uses OpenRouter and provider models configured by BoatMC. When you connect your own MCP-capable AI client, your prompts and boat data may also be processed by that client and its provider under their own terms. We send only the data needed to answer the request or power the feature, and third-party providers may process or retain data according to their own policies.

Data Storage

Your account information and telemetry data are stored on private servers hosted in Germany (Hetzner). Data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), and secure token storage. Access to production systems is restricted to authorized personnel only.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. To exercise these rights, contact us at the email below.

Contact

For privacy questions, contact: [email protected]