Privacy Policy

Last updated July 11, 2026

This policy explains what HullDocs (Casting Karma LLC) collects, why, and your choices. We aim to collect only what the service needs. We do not sell your personal information, we don't show third-party ads, and we don't use advertising trackers.

What we collect

Account: your email and password (passwords are stored hashed by our authentication provider — we never see them).

Your records: the boats, service entries, photos, and documents you add. These are yours, and they may contain third-party details you upload (a shop name, an invoice, a surveyor's report).

Payment: if you buy Captain or a Sale Report, our payment processor (Stripe) collects and holds your card details. We never see or store your full card number. We keep a record of the purchase itself.

Usage: basic technical logs (device/browser, IP address, error data) to keep the service working and secure, and aggregate analytics.

Consent records: when you accept these terms, we record which version you accepted, when, and the IP address and browser you used — so we can both prove what was agreed.

How we use it

To provide the service — store and display your records, send the emails you ask for (verification, reminders, shop confirmations, transfers, receipts), process payments, and improve reliability and security. That's it.

AI processing of your documents

If you use AI import or AI document filing, the image or document you selected is sent to OpenAI so it can read it and propose a draft record. Some things you'll know up front:

• It only happens when you trigger it. We do not run your content through AI in the background.
• It returns a draft you confirm. Nothing is saved to your record until you accept it.
• Your content is not used to train OpenAI's models. We use OpenAI's API, where submitted content is not used for model training. OpenAI may retain it briefly (up to about 30 days) for abuse monitoring, and then deletes it.
• What you send is up to you. A receipt may contain an address, an engine serial, or another person's or business's name. If you'd rather not send a particular document to an AI provider, don't use the AI feature for it — you can always enter the record by hand.

Service providers

We use trusted vendors to run HullDocs, each processing data only to provide their part of the service: Vercel (hosting), Supabase (authentication and database), Cloudflare (file storage and delivery, via R2), Resend (transactional email), OpenAI (AI features you trigger — see above), Stripe (payments), and Google Analytics (aggregate usage measurement).

Emails we send to other people, on your instruction

At your request, HullDocs emails people who don't have an account: a repair shop you ask to confirm work, and a buyer you're transferring a boat to. We send those messages because you asked us to and because they relate to a transaction you're part of — not to market to them. We store the address you gave us so we can deliver and track that one request. Any recipient can tell us to stop and we'll honor it. As Section 4 of the Terms says, you're responsible for having the right to give us that address.

Sharing you control

Records are private by default. They become visible to others only when you choose:

• Publishing a record to a public link or QR code makes it viewable by anyone with the link, without signing in.
• Transferring a boat to a buyer gives the buyer the boat's maintenance record. Your account and contact details do not transfer — the buyer gets the boat's history, not your profile. You keep a read-only archive.
• Inviting a shop shares just the record you asked them to confirm.

Data retention, deletion, and your choices

You can edit or delete records, export your data, and delete your account at any time from your account settings.

When you delete your account, we delete your profile and your records from our live systems, and they age out of our encrypted backups within about 30 days. Be aware of three things we cannot delete, because they no longer belong only to you:

• Records you transferred to a buyer. Those now belong to the buyer's boat. Deleting your account does not remove the buyer's copy. (See Terms §3.)
• Records you published publicly. We can disable the link, but we can't recall copies already viewed, saved, or cached elsewhere.
• Transaction and tax records. We and Stripe keep a record of payments for as long as tax and accounting law requires (generally up to seven years).

We also keep consent records (which terms version you accepted) for as long as needed to show what was agreed.

To make a privacy request, email privacy@hulldocs.com. We'll respond within 30 days. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information — we honor these requests for all our users regardless of where they live, subject to the three carve-outs above. We will never charge you or degrade your service for exercising a privacy right.

Cookies and analytics

We use the cookies needed to keep you signed in and the service secure, plus Google Analytics to understand aggregate usage (like which pages are visited) so we can improve HullDocs. We don't use advertising trackers, we don't sell or share your information for advertising, and we don't track you across other websites.

Security

We use encryption in transit and at rest, row-level access controls so one account can't read another's records, and hashed passwords. No service can promise perfect security, but if a breach ever affects your personal information, we will notify you and any regulator the law requires, without undue delay.

Children

HullDocs is for adults (18+) and is not directed to children. We don't knowingly collect information from anyone under 18. If we learn we have, we'll delete it.

Changes and contact

We'll post material changes here with a new version and date, and ask you to accept them the next time you sign in.

• Privacy requests: privacy@hulldocs.com
• Takedown / removal: removals@hulldocs.com
• General help: support@hulldocs.com

This policy is governed by the laws of the State of Texas, United States.

HullDocs Privacy Policy v1.1 · Casting Karma LLC (the State of Texas, United States).