Privacy Policy

Effective date: February 28, 2026

1. Who We Are

MarineIO LLC, a limited liability company doing business as HullScore (“we,” “us,” or “our”), operates the website hullscore.com and the HullScore vessel intelligence platform. This Privacy Policy explains how we collect, use, store, and share information when you use our Service.

Questions? Contact us at privacy@hullscore.com.

2. Information We Collect

2a. Information You Provide

Listing URLs and vessel data: When you submit a URL or manually enter make/model/year, we store that input to generate and retrieve your Report.
Email address: Collected by Stripe at checkout for payment confirmation and, if you opt in, for Report delivery. We do not sell your email address.
Payment information: Credit card data is processed entirely by Stripe, Inc. We never see, store, or have access to your full card number, CVV, or bank account details. Only a Stripe payment token and the last 4 digits of your card are stored on our side.
Chat messages: If you use the “Ask HullScore AI” feature, your conversation messages are stored associated with your scan session and used to provide conversational context to our AI model. These messages are not used to train AI models.

2b. Information Collected Automatically

Usage analytics: We use PostHog to collect anonymized product analytics including page views, feature interactions, funnel events (scan submitted, report viewed, checkout started, payment complete), and session metadata. PostHog operates under a data processing agreement with us. No personally identifiable information is sent to PostHog unless you complete a purchase.
Performance data: We use Vercel Analytics and Vercel Speed Insights to collect aggregated, anonymized performance metrics (page load times, Core Web Vitals). No personal data is collected by these tools.
Log data: Our hosting provider (Vercel) automatically logs IP addresses, request timestamps, HTTP methods, and response codes for security and debugging purposes. These logs are retained for up to 30 days.
Session identifiers: We generate a random session ID for each scan to allow you to retrieve your Report. This ID is not linked to your identity unless you complete a payment.

2c. Information from Third-Party Sources

To generate Reports, we query or process data from: vessel history database providers (stolen vessel registries, maritime lien records, salvage and auction databases), U.S. Coast Guard databases (BARD accident records, recalls, vessel documentation, marine casualty and pollution records), CGMIX vessel registration records, public marine marketplace listings, and industry valuation sources. This data pertains to vessels, not to individual users, and is used solely to produce Report content.

3. How We Use Your Information

To generate, store, and deliver your vessel intelligence Report;
To process your payment through Stripe;
To send transactional emails (receipt, Report delivery) if you provide an email address;
To power the “Ask HullScore AI” chat feature within your scan session;
To detect and prevent fraud, abuse, and policy violations;
To analyze aggregate product usage and improve the Service;
To comply with legal obligations.

We do not use your personal data to train AI or machine learning models. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Data Retention

Scan sessions (unpaid): Expire automatically after 1 hour and are purged from our database within 30 days.
Paid Reports: Report data is retained indefinitely in our database and contributes to our vessel intelligence graph. Web portal access (the shareable report URL) remains active for thirty (30) days from the date of Report generation, after which the link will no longer be accessible via browser. The underlying data is not deleted upon link expiration. You may request full data deletion at any time (see Section 8).
Chat messages: Stored with your scan session and subject to the same retention policy as paid Reports.
Payment records: Stripe retains transaction records per their own retention policy and applicable financial regulations. We retain minimal Stripe metadata (session ID, amount, email) for our own records.
Analytics data: PostHog retains event data per our plan configuration (default 1 year). Vercel analytics data is aggregated and not linked to individuals.

5. Third-Party Service Providers

We share data with the following service providers solely to operate the Service:

Provider	Purpose	Data Shared
Stripe, Inc.	Payment processing	Email, payment card data
Supabase	Database hosting	Scan data, chat messages, email
Vercel, Inc.	Hosting & edge functions	IP address, request logs
PostHog, Inc.	Product analytics	Anonymized events, email (paid users only)
OpenAI, L.L.C.	LLM inference (Report generation)	Listing text, vessel data (no PII)
Anthropic, PBC	LLM inference (Report synthesis)	Listing text, vessel data (no PII)
Amazon Web Services	Data storage, compute	Vessel images (stored in S3)
MarineTitle / BoatScope	Vessel history data (title, theft, lien, salvage)	Hull Identification Numbers (no PII)
Scrapfly	Web data extraction	Listing URLs submitted by users
Inngest, Inc.	Background job orchestration	Scan session IDs, job metadata

Each provider is bound by a data processing agreement or equivalent contractual obligations appropriate for the data they receive.

6. Cookies and Tracking

HullScore uses minimal client-side storage:

localStorage: We store a flag (hullscore:captains-brief-seen) to track whether you've dismissed our onboarding modal. This is not a cookie and is not transmitted to our servers.
PostHog cookies: PostHog sets a first-party cookie to identify anonymous sessions for analytics purposes. This cookie does not contain personally identifiable information.

We do not use third-party advertising cookies, tracking pixels, or cross-site behavioral tracking.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including: encryption in transit (TLS), encrypted database storage via Supabase, Stripe's PCI-DSS certified payment infrastructure, and access controls limiting who can access production data.

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and disclaim liability for breaches outside our reasonable control.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of personal data we hold about you;
Deletion: Request deletion of your scan data, chat history, and associated email;
Correction: Request correction of inaccurate personal data;
Portability: Request export of your data in a machine-readable format;
Opt-out of analytics: You may disable PostHog tracking by using a browser-level ad blocker or by contacting us.

To exercise any of these rights, email privacy@hullscore.com. We will respond within 30 days. Note that deleting your data will permanently remove access to any Reports associated with your session.

9. Children's Privacy

HullScore is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at privacy@hullscore.com and we will delete it promptly.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising privacy rights. To submit a CCPA request, email privacy@hullscore.com.

11. International Users

HullScore is operated in the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We make no representation that the Service is appropriate or available in other jurisdictions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the revised Policy.

13. Contact

Privacy inquiries: privacy@hullscore.com
General support: support@hullscore.com

← Home Terms of Service