Privacy

Your email address, if you create an account — sign-in is by magic link, so there is no password to store. We use it to sign you in, to send links and briefs you request, and for essential service notices. We do not send marketing you did not ask for.

Your saved work — imported sites, routes, areas, watchlists, documents and organization membership — is stored on our database (Supabase, in the United States) under row-level rules scoped to your account and organization. Work you have not signed in to save lives in your own browser’s storage, scoped to your account, and is not painted on the map after you sign out.

Billing is processed by Stripe. Card numbers go to Stripe, never to us; we store only your subscription state.

Operational logs. Requests are rate-limited by account id when you are signed in and by IP address when you are not, and standard server logs exist for security and debugging. We use Vercel Analytics for aggregate page statistics; it does not use cookies to follow you across other sites. We run no advertising and no ad trackers.

When you type a question into Ask AI, the question text may be sent to our AI provider (OpenRouter) for one purpose: choosing which map layers answer it. The model does not receive your saved work, and when no provider is configured a deterministic keyword match runs instead. Do not type secrets into the ask bar.

The map loads tiles and imagery directly from their providers — the basemap (CARTO), satellite and weather imagery (NASA, EUMETSAT, RainViewer, Iowa Environmental Mesonet), map data (OpenStreetMap, Esri, OpenTopoMap), street imagery (Mapillary) and similar hosts named in the attribution line. Those providers see your IP address and standard request headers under their own privacy policies, exactly as they would if you visited their sites.

The live layers process signals that ships, aircraft and agencies broadcast publicly by design — AIS and ADS-B telemetry (identifiers such as MMSI and callsigns, positions, headings) and official notices. Vessel position trails are pruned after 48 hours (8 days for a narrow chokepoint window); current positions are retained while a vessel is heard. This is data about vehicles broadcasting to the world, not tracking of Cartevoir users.

Service providers that run the product for us: Supabase (database and auth), Vercel (hosting and analytics), Stripe (payments), Resend (email), Railway (the data worker), and OpenRouter when Ask AI is used. Each receives only what its job requires. Beyond that: nobody, except if the law compels us, or as part of a merger, acquisition, financing or sale of assets — in which case your data transfers with the service under this policy’s protections. We do not sell personal data.

Account data is kept while your account exists. Email ops@cartevoir.com to access, correct, export or delete your data — we honor reasonable requests regardless of where you live. Local-storage preferences you can clear yourself in your browser.

Cartevoir is not directed to children under 16. Data is processed in the United States. We protect data with row-level security, server-side key isolation and least-privilege access — and no method is perfect, so we will tell you if a breach affects you. Changes to this policy are posted here with a new effective date.