Privacy Policy

HeyYachty LLC (Florida) · Effective date: October 23, 2026 · Last updated: October 23, 2026

Who we are

HeyYachty is a boat rental marketplace operated by HeyYachty LLC (Florida). It connects guests who book trips with boat owners who list boats and captains who operate them. This policy explains what we collect in the HeyYachty app and at heyyachty.com, why, and the choices you have. Contact: [email protected].

Information from guests

Name, mobile number and email address; booking details (boat, date, time, package, add-ons, guest count); the captain details you enter at checkout; messages with owners and captains; reviews and review photos; and your consent records (age, terms and waiver acceptance, with the version you accepted).

Information from owners

Name, contact details, boat listings (photos, specs, location, prices, rules), private boat details such as registration, HIN and dock information, insurance documents you upload, calendars and bookings, and payout details held by Stripe Connect.

Information from captains

Name, contact details, profile (bio, area, rate), and USCG license or credential details and documents you upload for review. Credentials are visible only to you and HeyYachty administrators, never to guests.

Photos, camera and documents

When you choose to add boat photos, review photos or an insurance or license document, the app asks for access to your photo library, camera or files. We only use the items you pick. Uploaded insurance and credential documents are stored privately and are reviewed only by HeyYachty administrators.

Payments

Payments, refunds and payouts are processed by Stripe. Card numbers go directly to Stripe and never reach HeyYachty. We receive limited payment details from Stripe, such as the card brand, last four digits, card type (credit or debit, used to decide whether a card processing fee applies) and payment status. Owners and captains provide bank and identity details directly to Stripe Connect.

Text messages and email

We send one-time sign-in codes, booking confirmations, trip reminders and message alerts by SMS (through Twilio) and by email. Message and data rates may apply. Reply STOP to stop non-essential texts. Sign-in codes and booking confirmations are needed to use the service.

Where data is stored

Our database, file storage and sign-in system run on Supabase (hosted in the United States). Sign-in sessions on your phone are kept in the device's secure storage.

How we use information

To create and manage bookings, payments, refunds and payouts; to share trip details with the owner and captain of your trip (and guest name and phone with them); to review listings, captains and insurance before they go live; to keep the platform safe (messages, reviews and photos are screened automatically and can be reported); to provide support; and to meet legal, tax and accounting duties.

Sharing

We share information with the owner and captain of a trip, with service providers that run HeyYachty for us (Supabase, Stripe, Twilio and our email provider), and when the law requires it or to protect people or property. We do not sell your personal information and we do not use it for third-party advertising.

Retention

We keep account and booking information while your account is open. Payment and booking records may be kept longer where tax, accounting or legal rules require it, or to resolve disputes. Deleted data is removed from active systems and later from backups.

Account and data deletion

Signed-in users can delete their account in the app under Account > Delete my account & data. Guests who booked without an account can delete their data from their trip page. You can also ask us to delete your data by emailing [email protected] with the subject "Delete my account" from the email or phone number on your account. See heyyachty.com/delete-account.

Your rights

You can ask for a copy of your information, ask us to correct it, or ask us to delete it by emailing [email protected]. We respond within 30 days.

Children

HeyYachty is for adults. Bookings must be made by someone 18 or older, and we do not knowingly collect information from children under 13.

Security

Data is encrypted in transit, access is limited by role (guest, owner, captain, administrator), and private details like dock locations and credentials are visible only to the people who need them. No system is perfectly secure, so please keep your phone and email secure.

Changes and contact

We will post updates here and change the version date. Questions or requests: [email protected].