Effective Date: 26 October 2026

Vessel Vault ("we", "our", or "us") is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use our website, services, and integrations, including our integration with ChatGPT.

1. Information We Collect

Depending on how you use our services, we may collect:

  • Personal information: Names, email addresses, telephone numbers, contact details, and other information you provide.
  • Transaction and business information: Boat listings, orders, enquiries, leads, support tickets, part quotes, and associated business records.
  • Technical information: IP addresses, browser information, device details, cookies, and website usage information.
  • Authentication information: Information necessary to authenticate users and maintain authorized access to our services, including OAuth-related information.
  • Integration information: Requests and parameters submitted through connected applications, as well as technical logs needed to operate, secure, and troubleshoot integrations.

2. How We Use Your Information

We may use information to:

  • Facilitate boat listings, purchases, sales, and enquiries.
  • Provide customer support and respond to requests.
  • Manage leads, orders, support tickets, and part quotes.
  • Operate, maintain, and improve our website and services.
  • Authenticate users and enforce access permissions.
  • Detect suspicious activity and protect against unauthorized access.
  • Meet applicable legal and regulatory obligations.

3. ChatGPT Integration

Vessel Vault may be connected to ChatGPT to let authorized users access supported Vessel Vault functionality through conversational requests.

Information accessed through ChatGPT

Depending on the request and the permissions of the connected account, the integration may access business records such as leads, orders, support tickets, part quotes, and related information.

The information accessed depends on the tools available through the integration and the permissions assigned to the authenticated Vessel Vault account.

How the integration uses information

Information is processed to respond to user requests and perform supported actions requested by the user. Where an operation changes a record, the integration must enforce applicable authorization rules and validation requirements.

Authentication and permissions

Connecting an account uses OAuth authentication. Users authorize access through the applicable authorization flow. Vessel Vault uses its authentication and authorization controls to determine whether the connected account may access a record or perform an operation.

Connecting ChatGPT does not grant permissions that the user's Vessel Vault account does not already have. Users should not include passwords, access tokens, client secrets, or other authentication credentials in ordinary chat messages.

Processing by ChatGPT and third parties

When you use the integration, information you submit and information returned by Vessel Vault may be processed by OpenAI to provide ChatGPT functionality. That processing is also subject to OpenAI's applicable terms and privacy policies.

Information may also be processed by service providers involved in hosting, security, authentication, and operation of our services, as described in this policy.

Disconnecting the integration

You can stop using the integration by disconnecting it through the relevant ChatGPT settings. Disconnecting access does not necessarily delete business records already stored in Vessel Vault or information retained by another service under its own policies.

4. Sharing Your Information

We do not sell or rent personal information. We may disclose information where reasonably necessary to:

  • Service providers that support hosting, application operations, security, and customer support.
  • OpenAI when information is processed through the ChatGPT integration.
  • Other parties involved in a transaction, where disclosure is necessary for that transaction.
  • Government authorities, regulators, or law enforcement agencies where required or permitted by applicable law.
  • Other recipients where you have provided appropriate authorization or disclosure is otherwise permitted by law.

5. Data Retention

We retain information for as long as reasonably necessary to provide our services, maintain business and transaction records, meet legal obligations, resolve disputes, and protect our services.

Authentication tokens and related credentials are handled according to our security practices and applicable retention requirements. Technical logs and integration records are retained according to the retention policies applicable to those systems.

Retention periods may vary depending on the type of information, the purpose for which it was collected, legal requirements, and legitimate business needs. When information is no longer required, we take appropriate steps to delete it or otherwise dispose of it securely, subject to applicable retention obligations.

6. Data Security

We use appropriate technical and organizational measures intended to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication, authorization checks, and secure communications. However, no method of transmitting or storing information can be guaranteed to be completely secure.

7. Your Privacy Rights and Choices

Subject to applicable law, you may be able to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of personal information where applicable.
  • Opt out of marketing communications.
  • Disconnect an authorized application integration.

Some information may need to be retained to meet legal obligations, resolve disputes, maintain required business records, or protect our services.

To make a privacy request, contact us using the details in the Contact Us section below.

8. Cookies and Similar Technologies

We may use cookies and similar technologies to maintain website functionality, improve user experience, and understand how our services are used. You can manage cookies through your browser settings, although disabling some cookies may affect website functionality.

9. Third-Party Services

Our services may rely on third-party platforms, including hosting, authentication, and application integration providers. Those providers may process information under their own terms and privacy policies. We encourage users to review the policies of services they choose to connect.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, practices, or legal requirements. Updated versions will be published on this page with a revised effective date.

11. Contact Us

If you have questions about this Privacy Policy or wish to make a privacy request, contact Vessel Vault through our Contact Us page .