Privacy Policy

1. Introduction

XVOLO LLC ("we," "us," or "our") operates the Pocket Marina platform, including the web application at app.pocketmarina.com and the marketing website at pocketmarina.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and job title when you create an account or are invited to a marina workspace.
• Marina Operations Data: Vessel records, storage assignments, service request history, member rosters, employee records, and capacity configurations.
• Billing Information: Payment details processed securely by Stripe. We do not store credit card numbers on our servers.
• Communications: Support tickets, feedback submissions, and any messages you send through the platform.
• Uploaded Files: Photos, insurance documents, and other files you upload to the platform.

2.2 Information Collected Automatically

• Usage Analytics: Page views, feature usage patterns, and session data collected via Vercel Analytics.
• Device Information: Browser type, operating system, screen resolution, and device identifiers.
• Log Data: IP addresses, access times, and referring URLs for security monitoring.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage subscriptions
• Improve and personalize your experience (e.g., the Intelligence Engine uses aggregated operational data to surface predictive insights)
• Send transactional communications (receipts, alerts, status updates)
• Respond to support requests and feedback
• Monitor and prevent fraudulent or unauthorized activity
• Comply with legal obligations

4. Third-Party Service Providers

We share your information with the following categories of third-party service providers, solely to operate the Service:

Each provider maintains its own privacy policy. We encourage you to review them independently.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Marina operations data is retained for the duration of the subscription. Upon account deletion or subscription cancellation:

• Personal account data is deleted within 30 days of request
• Marina operations data may be exported via CSV before deletion (data portability)
• Aggregated, anonymized analytics data may be retained indefinitely for product improvement
• Billing records are retained as required by tax and accounting regulations (typically 7 years)

6. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via TLS/SSL (HTTPS enforced)
• Database access is protected by Row-Level Security (RLS) policies ensuring strict multi-tenant isolation
• Authentication is managed by Clerk with support for multi-factor authentication
• Role-based access control (RBAC) restricts data access by user role
• Security headers (HSTS, X-Frame-Options, CSP) are enforced on all requests
• Regular security audits of codebase and dependencies

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Export your marina data in CSV format at any time through the platform
• Objection: Opt out of certain processing activities, including marketing communications

To exercise any of these rights, contact us at support@pocketmarina.com.

8. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information, including the right to know what data we collect, the right to delete your data, and the right to opt out of any sale of personal information.

We do not sell personal information. We do not share personal data with third parties for their direct marketing purposes.

9. Cookies & Tracking Technologies

We use the following cookies and tracking technologies:

• Essential Cookies: Required for authentication and session management (Clerk session tokens)
• Analytics: Vercel Analytics collects anonymized usage data to help us improve the Service. No personally identifiable information is included in analytics events.
• Performance: Vercel Speed Insights monitors page load performance to optimize the user experience.

We do not use advertising cookies or retargeting pixels.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: