# Privacy — Seavilo

## Data controller

Kairia SAS, the publisher of Seavilo. Contact: hello@seavilo.com

## Data we collect

For the waitlist: email, language, consent, confirmation and unsubscribe dates, plus two technical tokens stored as hashes.

For accounts: email, name, handle, salted password hash, session, biography, favourite area and optional avatar. Plain-text passwords are never stored.

For the community service: trip criteria and routes, progress, bookmarks, follows, reviews and published media, along with any reports and blocks you make. Trips are private by default.

For the mobile app: the device’s GPS position, only to suggest nearby harbours and follow a navigation you have started.

For area openings and partners: email and requested area; recommendation context, partner, impression or click and timestamp. Partner clicks contain neither passwords nor payment data.

## Location and on-device data

Background position tracking runs only during a navigation you have explicitly started, and stops when you stop it.

The recorded GPS track stays on your device: it is never sent to Seavilo’s servers. Its retention is set in the app — no retention, 30, 90 or 365 days, 30 days by default — and a button erases it immediately.

A trip saved on the server contains the planned route and its stops, not the track recorded while sailing.

The app also keeps your trips, drafts, preferences, offline map packs and session locally. This data disappears when the app is uninstalled.

## Purposes and legal bases

The waitlist relies on your revocable consent, given through an unticked box and confirmed by email (double opt-in). The area-opening alert follows your request.

Accounts, trips, saved plans and contributions are processed to provide the service you request. Security, abuse prevention and aggregate first-party measurement of affiliate links rely on Kairia SAS’s legitimate interests.

Data is never sold. Seavilo performs no advertising profiling or behavioural targeting and installs no third-party advertising script.

## Publishing and partners

A private trip is available only to its owner. Explicit publishing makes the trip, its author and any related feedback visible to the community.

Uploaded media is converted, resized and stripped of EXIF and GPS metadata; the original file is not retained.

When you open an affiliate link, Seavilo records the partner, opaque context, event and date in first party, then your browser leaves Seavilo. The partner website then applies its own privacy policy.

## Processors

PostgreSQL and media are hosted in France on OVH infrastructure operated by Kairia SAS.

Resend, Inc. delivers the service’s emails — waitlist, address verification and account recovery — under a data processing agreement. Any transfer outside the European Economic Area must remain covered by an applicable legal mechanism.

Displaying maps and forecasts queries third-party services: OpenStreetMap, OpenSeaMap, Esri and EMODnet for base maps, Open-Meteo for weather. These services receive your device’s IP address and the area being viewed, never your Seavilo identity.

Google Ireland Ltd provides the public website’s audience measurement (Google Analytics), enabled only with your consent. Any transfer to Google LLC in the United States is covered by the EU–US Data Privacy Framework.

Booking partners receive criteria only when you choose their link and only through parameters needed for the requested search.

## Retention

Unconfirmed signup: deleted after 48 hours.

Confirmed waitlist: until launch, then twelve months at most, or until you unsubscribe. Area-opening request: until launch in that area or twenty-four months at most.

Account, trips and media: for the life of the account. An account with no action for two years is warned before deletion or anonymisation, subject to justified legal duties.

Affiliate contexts and events: no more than thirteen months. Encrypted backups follow a maximum thirty-day rotation.

Reports and moderation records: kept in pseudonymised form for as long as abuse handling requires, then purged on their own schedule.

## Your rights

The app lets you export your data and delete your account with its related content. You can also exercise your rights — access, rectification, erasure, objection, restriction, withdrawal of consent and portability — by writing to hello@seavilo.com. An erasure request covers the account and related content unless a justified legal duty applies.

You may lodge a complaint with the French data protection authority (CNIL).

## Cookies and measurement

The public website sets an audience-measurement cookie (Google Analytics) only after your explicit agreement in the consent banner. Declining never restricts the site, and your choice can be changed at any time through “Manage cookies” in the footer. The application uses only a session cookie strictly necessary for sign-in.

Affiliate impressions and partner clicks are measured on the server, with no advertising cookie, no cross-site matching and no direct contact with a third-party ad network.

Site : https://seavilo.com/en