Overview
Berthr is a sailing guest management platform for recreational boat owners. This policy explains what personal data we collect, how we use it, and how we protect it.
We collect only what is necessary to provide the service. We do not sell your data to third parties.
Data we collect
We collect the following categories of data:
- Captain account data: name, email address, and Google account information via OAuth (if you sign in with Google).
- Guest data: name, phone number, and optional email address provided by the captain or the guest themselves.
- Boat and trip data: boat name, marina details, trip details (dates, capacity, description), RSVP status, and guest profiles (sailing experience, dietary restrictions, emergency contacts, etc.).
- SMS logs: records of SMS messages sent and received through the platform (invites, reminders, RSVP replies, AI chatbot conversations via SMS).
- AI chatbot conversations: messages sent to and received from the AI assistant via the web interface or SMS.
- Photos: images uploaded by the captain to trip galleries.
- Logbook data: voyage logs, engine hours, boat events (maintenance, fuel, haul-out, etc.), and weather data auto-populated from historical sources.
How we use your data
Your data is used solely to provide the Berthr service:
- Authenticating captains and managing their accounts.
- Sending SMS invitations, reminders, and confirmations to guests via Twilio.
- Generating AI chatbot responses to guest questions via the Anthropic API.
- Storing and displaying trip data, guest directories, photo galleries, and logbook entries in the captain's dashboard.
- Sending transactional emails (account setup, account deletion confirmation).
We do not use your data for advertising, profiling, or any purpose unrelated to operating the service.
Third-party services
Berthr relies on the following third-party providers to operate. Each provider processes only the data necessary for their function:
Supabase
Database and authentication. Stores all account, tenant, trip, guest, and log data. Captains authenticate via Supabase Auth (Google OAuth or one-time code).
Twilio
SMS delivery. Guest phone numbers and message content are transmitted to Twilio to send and receive SMS messages. Each captain account uses a dedicated Twilio sub-account and phone number.
Anthropic
AI assistant. Guest messages to the AI chatbot (via web or SMS) are sent to the Anthropic API to generate responses. Messages are processed but not used to train Anthropic's models under their standard API terms. Chat conversations and SMS messages are retained for 90 days and then automatically deleted.
Google OAuth
Authentication. Captains may sign in with their Google account. We receive only your name and email address from Google — no other Google data is accessed.
Vercel
Hosting and serverless functions. All web traffic passes through Vercel's infrastructure.
Resend
Transactional email. Used to send account setup and deletion emails to captains.
Data retention
- SMS logs and chat logs: retained for 90 days, then automatically pruned.
- Account and trip data: retained for as long as your account is active.
- Photos: retained until deleted by the captain or the account is closed.
- Account deletion: on request, all data associated with your account is permanently deleted. Email support@berthr.app to request deletion.
Data security
All data is stored in Supabase with row-level security (RLS) policies — each captain can only access their own tenant's data. All traffic is encrypted in transit via HTTPS. Twilio sub-accounts use isolated credentials per tenant.
Guest data and consent
Guests are added to Berthr by the captain. By providing their phone number or email to the captain, guests consent to receiving communications from the boat's Berthr account. Guests can ask the captain to remove them from the directory at any time.
Note for guests: SMS messages you receive from a boat using Berthr originate from a dedicated phone number assigned to that boat. Reply STOP at any time to opt out of SMS from that number.
Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing support@berthr.app. We will respond within 30 days.
Governing law
This policy is governed by the laws of Ontario, Canada. Any disputes will be subject to the exclusive jurisdiction of the courts of Ontario.