Privacy Practices

Privacy Policy

Last Updated: August 1, 2026

1. Overview

At SplitACharter, protecting your privacy and safeguarding your personal information is fundamental to our platform. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and your rights regarding your information.

2. Information We Collect

We collect information necessary to facilitate shared charter bookings, authentication, and notifications:

  • Account & Contact Information: Full name, email address, and mobile phone number provided during passwordless sign-in or reservation checkout.
  • Reservation & Booking Details: Group size, selected dates, trip location preferences, and Scuba certification details (when applicable for diving charters).
  • Payment Information: Payment processing is handled securely by our payment partner, Stripe. SplitACharter does not store full credit card numbers or sensitive CVV security codes on our servers.
  • Technical & Usage Data: IP address, device type, browser information, and session tokens managed securely via Supabase Auth (`@supabase/ssr`).

3. How We Use Your Information

We strictly use your personal data for operational marketplace functionality:

  1. Authenticating your account via email magic links and SMS OTP codes.
  2. Matching your group with a second compatible customer group for your selected charter date.
  3. Sending automated reconfirmation requests, deadline alerts, and charter match status updates.
  4. Connecting matched groups with their assigned licensed boat captain.
  5. Processing reservation deposits and automated refunds.

4. Strict SMS Privacy & Consent Disclosure

Mobile Privacy & SMS Consent Guarantee:

Mobile information and SMS consent are not shared with third parties or affiliates for marketing or promotional purposes.

All data sharing categories exclude text messaging originator opt-in data and consent; this information will not be shared, sold, rented, or leased to any third parties or affiliates under any circumstances.

Transactional SMS messages sent via our messaging provider (Twilio) are strictly limited to account verification OTP codes, booking confirmations, reconfirmation reminder alerts, and captain matching updates. You may opt out of receiving SMS communications at any time by replying STOP to any message, or reply HELP for assistance.

5. Third-Party Service Providers

We share non-SMS operational data with trusted infrastructure providers solely as required to provide core platform services (excluding text messaging originator opt-in data and consent, which is never shared):

  • Supabase: Managed database hosting and secure authentication.
  • Stripe: Payment intent processing and customer payment record management.
  • Twilio: Direct transmission of transactional SMS notifications and OTP verification codes.
  • Resend: Delivery of transactional email magic links and booking notifications.
  • Inngest: Reliable background processing for reconfirmation timers and workflow scheduling.

6. Data Security & Retention

We implement industry-standard encryption protocols (TLS/HTTPS in transit and AES-256 at rest) to protect your personal information. We retain personal data only as long as necessary to maintain active account records, support booking histories, and comply with tax and legal requirements.

7. Your Rights & Data Requests

You have the right to access, update, or request the deletion of your personal profile data at any time. You can update your name directly on your customer dashboard or contact us to delete your account record.

8. Contact Us

For privacy-related inquiries, data requests, or support, please reach out to us at:

Email: info@splitacharter.boats