Privacy Policy

What we collect

Account details — name, email address, phone number, password (stored hashed) and the organizations you belong to.
Verification — your email and phone are confirmed by a code or link; identity verification is performed by Stripe Identity, which processes your government ID and selfie. We store only the outcome (verified name, document type, status and expiry), never the document itself.
Payments — card and bank details are entered directly with Stripe. We store Stripe's identifiers, card brand and last four digits, and your payout-account status.
Boats and rentals — the boats, photos, listings, requests, rentals and messages you create on the platform.
Usage — server logs (IP address, browser, pages visited) and error reports used to keep the service running.

How we use it

To run the marketplace: show listings, match requests, process payments and refunds, send the emails and text messages that the service needs (verification codes, rental requests and confirmations, receipts, contact details before a regatta), prevent fraud, provide support and improve the product. We do not sell your personal information.

What other users see

Owners see the name, organization and verification status of Renters who request their boats; Renters see the Owner's or organization's name and boat details. Once a rental is accepted, we share each party's name, email address and phone number with the other so you can coordinate hand-over at the regatta. Requests made through "Request a boat" show Owners the requester's first name and requirements only.

Who we share it with

Service providers who process data on our behalf: Stripe (payments, payouts and identity verification), Postmark (email), ClickSend (text messages), DigitalOcean (hosting and photo storage), Rollbar (error reporting) and Slack (internal alerts). Each is bound to use the data only to provide its service. We may also disclose information when required by law or to protect the rights and safety of our users.

Retention

We keep your account data while your account is active. Rental and payment records are kept for as long as needed for accounting and dispute resolution (typically seven years). You can ask us to delete your account; we will remove or anonymize personal data that we are not required to keep.

Your choices

You can update your profile, phone number and payment methods at any time from your account. Emails and texts we send are transactional and necessary to operate the service; we do not send marketing messages without your consent. To access, correct or delete your data, contact us.

Cookies

We use a session cookie to keep you signed in and remember your preferences. We do not use advertising cookies or third-party trackers.

Security

Traffic is encrypted in transit, passwords are hashed, and payment data never touches our servers. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you as required by law.

Children

Regatta Connect is for adults. We do not knowingly collect information from anyone under 18.

Changes and contact

We may update this policy; the current version is always at this address. Regatta Connect is operated by Merwin Software, LLC. Questions about privacy: contact us or email [email protected].

Last updated November 2026.