Privacy Notice

Depending on how you use Nova Mare, we process:

We use these data to:

To answer a question, interpret content, run a diagnosis, transcribe voice input or produce a brief, Nova Mare sends the prompt and relevant vessel or account context to the AI or speech provider serving that request. The response and supporting records may be stored in your account so the feature works and history can be restored where enabled.

Nova Mare is designed to scope requests to the relevant account and vessel. Do not submit sensitive personal information that is not needed for the task. A voice recording is created only when you choose to record or dictate; Nova Mare is not a continuous-listening service.

We do not sell personal or vessel data. We do not use private vessel content to train third-party foundation models. Service providers may process submitted data under their service terms and our arrangements with them to deliver the requested function.

Access is controlled by account, vessel membership and role. Depending on those permissions, records may be visible to the vessel owner, Vessel Administrators and invited crew, and to a supplier or provider when an authorized user sends a request to that recipient.

Authorized Nova Mare personnel may access records when reasonably necessary to support a customer, secure or operate the service, investigate misuse, restore an eligible archive or comply with law. Customer support access uses a time-limited, login-bound support session targeted to a specific customer account or vessel; the administrator remains the recorded actor, and sensitive ownership, billing, credential and irreversible actions require separate controls.

Nova Mare relies on service providers for cloud hosting, databases, authentication, storage, email, AI model inference, transcription and speech, external search and retrieval, mapping, error monitoring, analytics and payment processing. Social sign-in also involves the provider you choose, such as Google or Apple. These processors receive data needed to perform their function, subject to their applicable terms and our arrangements with them.

Google Analytics 4 is used for website and product usage measurement where enabled. Analytics events are limited by an allowlist and are not intended to include vessel records, documents, diagnoses, free-text content or direct personal identifiers. Error monitoring is configured to reduce personal data by excluding request cookies and headers and removing URL query strings, but technical reports may still contain information needed to diagnose a fault.

External search results may be obtained from third-party search services. Maps and place lookup may involve a mapping provider. If you start a payment flow, the payment processor handles payment and billing data under its own privacy terms; Nova Mare does not receive your full card number.

Payments are processed by Stripe. When you subscribe, add a vessel or order optional setup, Stripe receives your name, email address, payment method and billing details, and we keep the related customer, subscription, invoice, payment, refund and dispute references, the amounts, the vessels covered and your acknowledgement of any setup scope. We use these records to take payment you approve, decide whether access is complimentary, paid, in grace or read-only, and handle cancellations, refunds, disputes, tax and accounting.

Active account data is kept while your account is open. Deactivating your account moves eligible data into an isolated recovery archive so it can be reconnected if you return; it is not immediately destroyed. When you permanently delete your account in Account Settings, account access and sign-in are disabled promptly, and eligible active records are deleted through the product workflow instead of being placed in that recovery archive. Those records include your profile and roles, vessels, equipment, maintenance logs, checklists and runs, documents, photos and uploaded files, diagnoses, briefs, emerging risks, telemetry history, inventory, parts, quotes, saved vendors, requests and the messages you sent, subject to the exceptions below and applicable backup and processor deletion cycles.

Some records may be retained where reasonably necessary or legally required, including security and administrative audit records, transaction, invoice, payment, refund, dispute and payout records needed for accounting, tax and legal obligations, records shared with another party who has an independent right to keep them, legal holds, and email suppression records needed to continue honoring an unsubscribe. Backup or processor copies may persist for a limited period before deletion or overwrite. We do not promise deletion where law requires retention or where a record lawfully belongs to another party.

Nova Mare uses technical and organizational safeguards designed to protect personal and vessel data, including encrypted transport, infrastructure encryption at rest, access controls, vessel isolation, upload validation, rate limits and audit records. Multi-factor authentication is available, and privileged access is protected by server-verified roles, session and action controls appropriate to the operation.

No safeguard or service is perfectly secure. We do not promise absolute security or make a certification claim. Please report a suspected vulnerability to us promptly.

Privacy questions and requests to access, correct, export, delete, object or restrict: teams@novamare.org. We may need to verify your identity and authority over the relevant account or vessel. We will respond within the period required by applicable law.

If you signed in with Apple using Hide My Email, tell us the relay address you used so we can locate your account.