Privacy policy

1. Who is responsible for your data

The Navii service is provided by Ilusoft (Rosario, Argentina), the data controller for the personal data entered by its users.

For any question about this policy or to exercise your rights, write to info@ilusoft.com.ar.

2. What we collect

We group it into five categories:

2.1. Account data

• Email and password (the password is stored hashed with bcrypt, never in the clear).
• Email verification timestamp.

2.2. Professional profile data

• Full name, phone, nationality, date of birth.
• Public handle and a short bio for your profile at naviiyachting.com/u/<handle>.
• Profile pictures that you upload.
• History of the vessels you have sailed on (role, dates): this is what appears as your public crew passport.

2.3. Sensitive passport data

• Passport number: stored encrypted at rest with AES-256-GCM. The master key lives in the server environment; the number is never persisted in the clear.
• Passport file (image or PDF): stored in a private path that is never publicly exposed. Before being stored, images are reprocessed to strip EXIF metadata, including the GPS location your camera embeds.

2.4. Vessel operational data

• The position of the vessel (not of each individual person) when the captain sets it, or when the chosen weather mode is the vessel position.
• Any health information you choose to enter (diet, allergies) so that whoever cooks can plan meals. It is optional.
• Tasks, watches, watch duties, checklists, sea time records, stock, provisioning, guests, leave and notes.

2.5. Billing data

• If the subscription is paid by card, the charge is processed by Lemon Squeezy (Merchant of Record in the USA), which stores the card details and the tax data required. We neither store nor see card numbers: we only receive the customer ID, the subscription ID and the status (trialing, active, past due, cancelled).
• If you pay by bank transfer, the captain reports the payment and an administrator reviews it. We store the amount, the date, a reference and the review status; we do not store your banking details.

3. How to delete your account

You can delete your account yourself, from the app or from the web: go to My profile and use Delete my account. We will ask for your password and for you to type DELETE, because it cannot be undone.

Your personal data, your public profile, your passport number and its file are deleted. Whatever you entered for a vessel (tasks, notes, watches) stays with the vessel without your name, so the rest of the crew does not lose their history.

If you are the captain of a vessel, first transfer it to another captain or delete it: the vessel owns the subscription and the crew.

If you would rather we did it for you, write to info@ilusoft.com.ar from your account email address.

4. What we use each type of data for, and on what legal basis

The legal basis in Argentina is Law 25.326 on the Protection of Personal Data. Where applicable because of a person's nationality or where the crew is located, the GDPR (EU) applies as well.

• Account and profile, so that you can use the service. Legal basis: performance of a contract (you created the account).
• Passport, so that the captain can verify the identity and documentation of the crew. Legal basis: explicit consent (you choose to upload it) plus the captain's legitimate interest.
• Operational data, so that the vessel runs. Legal basis: performance of a contract and the vessel owner's legitimate interest.
• Health (diet, allergies), to plan meals on board. Legal basis: explicit consent (you choose to enter it).
• Billing, to charge for the service and issue receipts. Legal basis: performance of a contract and the payment operator's legal obligations.

5. Who sees what

Navii is designed for minimum exposure: each person only sees what they need in order to do their job on board.

• The captain sees the identity and passport data of the crew members they invited to the vessel, in order to validate documentation.
• Crew with permission to assign tasks (for example Chief Stew or Bosun) see the crew board and the team's operational data, but not passports or sensitive personal data of their colleagues.
• The rest of the crew only see their colleagues' public information: name, role, photo and handle.
• Health data (diet, allergies) is visible to whoever holds galley or interior permissions, and to you. Everyone always sees their own.
• The public profile (naviiyachting.com/u/<handle>) shows only what you decided to make public: name, photo, current role and previous vessels. It never includes passport, phone, email, diet or allergies.
• The Ilusoft team accesses personal data only when strictly necessary to provide support or to resolve a reported incident.

6. Security

• Encryption in transit: all traffic goes over HTTPS (TLS).
• Passport encryption at rest: the number with AES-256-GCM and the file in a private path, outside the public web server.
• Passwords: bcrypt hash. We never store passwords in the clear and nobody on the team can read them.
• EXIF stripping: images you upload are reprocessed to discard EXIF metadata, GPS included, before being stored.
• Two-step deletion: when you delete a vessel it does not vanish physically straight away, it is marked as deleted and hidden. Email us if you want it permanently removed.

To be transparent: we do not yet have certified external security audits. If we commission them, we will say so here.

7. Who we share data with

With as few third parties as possible:

• Lemon Squeezy (payment processor / Merchant of Record in the USA), when you pay by card. Their policy is at lemonsqueezy.com/privacy.
• A transactional email provider, to send you email verification, password recovery, invitations and alerts.
• Hosting (VPS): the server running Navii and the database live on a dedicated VPS. The infrastructure provider only supplies hardware and network, and does not access data in the clear.

We do not use Google Analytics, Facebook Pixel, Hotjar, Mixpanel or any third-party tracker. We do not sell or rent data. We do not do advertising profiling.

8. Retention and your rights

We keep your data while your account is active. If you cancel the subscription, the account stays inactive for a reasonable period in case you want to reactivate it (90 days), and after that we delete the data we are not required to keep by law or for accounting.

Under Law 25.326 (Argentina) and the GDPR where applicable, you have the right to:

• Access the personal data we hold about you.
• Rectify it if it is inaccurate.
• Erase it, with the applicable legal exceptions.
• Portability: ask us for an export of your account.
• Withdraw consent where the processing is based on it (for example, by deleting the passport you uploaded).
• Object to the processing on legitimate grounds.

To exercise any of these rights write to info@ilusoft.com.ar from your account email address. We reply within the applicable legal deadline.

If you believe your data is not being handled correctly, you can complain to the Agencia de Acceso a la Información Pública (AAIP) in Argentina.

9. Minors

Navii is not intended for users under 18. We do not request, nor knowingly collect, personal data from minors. If you know of a minor's account, write to us and we will close it.

10. Changes to this policy

If we change this policy significantly, we will announce it in the app and by email. The date of the last update always appears at the top.

11. Legal framework

Argentina: Law 25.326 on the Protection of Personal Data and its implementing Decree 1558/2001. Supervisory authority: Agencia de Acceso a la Información Pública (AAIP).

European Union / EEA: the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) where the person or the processing falls within its scope, given the international nature of yacht crews.