Privacy Policy
1. Controller
Yacht Advisor FZ-LLC, registered in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates, licence 47028181, registration 0000004080738. Contact for privacy questions: pd@yachtaddress.com.
2. What we process and why
- Account data (name, email, password hash, language, time zone): to provide the service (Art. 6(1)(b) GDPR).
- Billing data: our reseller Paddle.com sells the plans as merchant of record and processes payment and invoice data as an independent controller under its own privacy policy. We store the Paddle customer and subscription IDs, plan, invoices and payment status (Art. 6(1)(b) and (c) GDPR).
- Monitoring data: addresses, companies and search profiles you enter and the public content we fetch for them (Art. 6(1)(b) GDPR).
- Free Blind Spot Report: the website, competitor and search terms you enter and the result, so that the share link works for 30 days (Art. 6(1)(f) GDPR).
- Website statistics: page views without cookies. We store the path and a hash of IP address and browser that changes every day, so visits cannot be linked across days (Art. 6(1)(f) GDPR).
- Google Analytics (only with your consent): pages viewed, device, browser and approximate location, collected by Google with cookies, so we can see which pages help visitors. Google signals and ad personalisation are switched off (Art. 6(1)(a) GDPR; you can withdraw consent at any time under "Cookie settings").
- Security: hashed IP addresses to limit sign-ups and requests, kept for one day (Art. 6(1)(f) GDPR).
- Shared documents (DocumentPulse): when someone opens a share link we record time, link and a daily changing hash to count unique visits. We do not identify the person.
- Email: transactional emails are sent through Resend.
- AI summaries (optional, only if enabled): changed page text is sent to Anthropic to write a short summary.
3. Personal data in public sources
Signaligent fetches public pages of businesses and official sources. They can contain names of people, for example a contact person in a job advertisement or a director in a public register. We process such data only to show our customers what changed, based on our customers' and our legitimate interest in market observation (Art. 6(1)(f) GDPR), and we keep it no longer than the history period of the plan. Website owners can stop our fetches through robots.txt (see SignaligentBot); anyone can object by email to pd@yachtaddress.com.
4. Recipients and processors
Paddle (reseller and payments), Resend (email), Anthropic (optional summaries), Railway (hosting and database), Google Ireland Limited (analytics, only with consent). They process data only for the purposes above.
5. International transfers
We are based in the United Arab Emirates. Our providers process data in several countries, including the United States; Google may transfer analytics data to Google LLC in the USA. For transfers from the EU we rely on adequacy decisions, the EU-US Data Privacy Framework or standard contractual clauses.
6. Retention
- Monitoring history: for your plan's history period, then deleted automatically.
- Blind Spot Reports: 30 days.
- Security hashes: one day.
- Google Analytics: for the retention period set in our Google Analytics account, at most 14 months.
- Account and monitoring data: deleted when you delete your account.
- Invoices: kept by Paddle for the statutory retention period.
7. Your rights
Access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You can export and delete your data yourself under Settings. We answer requests within one month. You may complain to a data protection authority. Residents of the UAE have comparable rights under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
8. Security
Data is separated per customer in the database, passwords are stored as hashes, connections are encrypted, and access is limited to the people who run the service.
9. Changes
We update this policy when the service changes and show the date below.
Last updated: 16 October 2026.