Privacy Policy.

1. What we collect

Account details: your name, email address, and a securely hashed password when you create an account.

Booking details: the dates, guest count, contact email, and optional phone number you provide when booking a stay.

We do not collect or store card numbers. Payments are processed entirely by Stripe, and we only receive confirmation that a payment succeeded.

2. How we use it

To operate your bookings: confirmations, receipts, arrival details, and cancellation notices by email — and by text message if you share a phone number.

To run the platform: hosts see the booking details for stays on their own boats, and our team can view bookings to provide support.

We don't sell or rent personal information, and we don't use it for third-party advertising.

3. Service providers

We share the minimum needed with the services that power the site: Stripe (payments), Resend (transactional email), Textbelt (text confirmations), and our hosting provider. Each receives only what it needs to do its job.

If you connect a calendar sync, we fetch busy dates from the calendar URL you provide; we don't read event contents beyond dates.

4. Cookies

We use a single session cookie to keep you signed in. There are no advertising or cross-site tracking cookies.

5. Retention and your rights

Booking records are kept for accounting and legal purposes. You can update your details from your account, and you can ask us to delete your account and associated personal data at any time by emailing us — we'll action it promptly, except records we're legally required to keep.

6. Security

Passwords are stored hashed (never in plain text), traffic is encrypted with HTTPS, and access to booking data is limited to your host and our team.