1. Data Controller
ShipScope ("we," "us," "our") is the data controller responsible for your personal data processed through the ShipScope platform. For privacy-related inquiries, contact us at privacy@shipscope.com.
2. Personal Data We Collect
We collect the following categories of personal data:
Account Information:
- First and last name
- Email address
- Company name
- Password (stored as a cryptographic hash, never in plain text)
Fleet and Vessel Data:
- Vessel profiles you create (name, IMO number, type, dimensions, build year)
- Compliance calculation inputs and results (CII, EEXI, EU ETS, FuelEU)
- Valuation history and reports
- Scenario modeling parameters and results
- Earnings and voyage data you enter
Technical Data:
- IP address and browser information (collected automatically via server logs)
- Session data (for authentication purposes)
3. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR:
- Contract Performance (Article 6(1)(b)): Processing your account and vessel data is necessary to provide the services you have subscribed to.
- Legitimate Interest (Article 6(1)(f)): We process aggregated and anonymized data to improve our platform, generate market benchmarks, and maintain service security.
- Legal Obligation (Article 6(1)(c)): We may process data to comply with applicable laws, regulations, or lawful requests.
4. How We Use Your Data
We use your data to:
- Provide and maintain the ShipScope platform and its features
- Generate vessel valuations, compliance calculations, and analytics
- Process payments through our payment processor (Stripe)
- Send transactional emails related to your account or subscriptions
- Improve the platform using aggregated, anonymized usage patterns
- Ensure the security and integrity of the Service
5. Third-Party Data Sharing
We do not sell your personal data. We share data with the following categories of third parties, only as necessary:
- Stripe: Payment processing. Stripe receives your payment information directly. We do not store credit card numbers. Stripe's privacy policy governs their use of payment data.
- Infrastructure Providers: Hosting and database services necessary to operate the platform. These providers process data on our behalf under data processing agreements.
We do not share your vessel data, valuations, or compliance results with other users, competitors, or data brokers.
6. Data from Public Sources
The vessel lookup feature uses data from publicly available sources:
- Digitraffic AIS: Live vessel identification and position data from the Finnish Transport and Communications Agency (public domain)
- IMO Vessel Codes: Global vessel registry data (PDDL-licensed open data)
This public data is not personal data and is used to provide vessel identification and lookup services.
7. Cookies and External Resources
ShipScope uses a session cookie for authentication purposes (keeping you logged in). We do not use analytics or advertising cookies. For more details, see our Cookie Policy.
The platform loads resources from third-party content delivery networks (Google Fonts, cdnjs, jsDelivr) to provide fonts, icons, and UI libraries. These providers may receive your IP address and browser information as part of serving these resources. We do not control cookies or tracking that these providers may use. Their respective privacy policies govern their handling of such data.
8. Data Retention
- Account data: Retained while your account is active and for 30 days after account termination.
- Vessel and valuation data: Retained while your account is active. Available for export upon request.
- Payment records: Retained as required by applicable tax and financial regulations.
- Server logs: Retained for up to 90 days for security and debugging purposes.
9. Your Rights Under GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interest.
- Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
To exercise any of these rights, contact us at privacy@shipscope.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Passwords stored using industry-standard cryptographic hashing
- Access controls and authentication requirements
- Regular security reviews of our infrastructure
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. International Data Transfers
Your data may be processed in jurisdictions outside your country of residence. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the platform with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact
For privacy-related questions or requests, contact us at privacy@shipscope.com.