Privacy Policy

Buoy-Fish, Inc. (“Buoy.Fish,” “we,” “us,” or “our”) operates the buoy.fish website and the Buoy.Fish maritime asset tracking platform accessible at app.buoy.fish (together, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including when you interact with us via SMS text messaging.

1. Information we collect

1.1 Contact and account information

When you contact us or create an account, we may collect your name, email address, phone number, company or organization name, and (for accounts) a password stored in hashed form.

1.2 Mobile numbers and SMS data

We collect your mobile phone number when you provide it on our contact form or when you use SMS-based sign-in or verification at app.buoy.fish. We use mobile numbers to send account and login verification codes (one-time passcodes), account and service notifications, and customer care replies to your inquiries. When you give SMS consent on our contact form, we record the time of consent, the exact consent language shown to you, and technical details of the submission (IP address, browser user agent) so we can honor and evidence your opt-in. See our SMS / Mobile Messaging Terms for full program details, including how to opt out.

1.3 Device and telemetry data

When you register a tracking device or when your device transmits data, we collect device identifiers, GPS coordinates, speed, battery level, temperature readings, LoRaWAN signal metadata, gateway/hotspot identifiers, and transmission timestamps.

1.4 Usage and log data

We automatically collect IP address and approximate location, browser type and version, pages visited, time spent, referring URLs, and login timestamps.

2. How we use your information

• Provide, operate, and maintain the Service
• Authenticate your identity via email, password, or SMS verification
• Respond to inquiries you send us
• Display real-time and historical device locations on maps and facilitate lost-gear recovery
• Send transactional communications (verification codes, account and security notifications)
• Improve, personalize, and secure the Service
• Comply with legal obligations

3. Mobile information / SMS consent

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Our SMS messages are delivered through Twilio, our SMS service provider, solely for the purpose of delivering messages to you. We do not sell your phone number, and we do not send marketing or promotional text messages. You can opt out of text messages at any time by replying STOP to any message from us, by switching to email-based sign-in in your account settings, or by contacting [email protected]. Reply HELP to any message for help. Message and data rates may apply. See our SMS / Mobile Messaging Terms.

4. Third-party services

We use the following third-party services to operate the platform:

• Supabase — authentication and database hosting
• Twilio — SMS delivery for verification codes and messages
• Mapbox — map rendering and geospatial visualization
• Cloudflare — website hosting and content delivery

Each provider has its own privacy policy governing the data they process on our behalf.

5. Data sharing and disclosure

We do not sell your personal information. We may share data in these situations:

• Within your organization: if you belong to an organization on Buoy.Fish, other members with appropriate roles may see your name, role, and device assignments as configured by your organization’s administrator.
• Service providers: we share data with the third-party providers listed in Section 4, strictly for the purpose of operating the Service. Mobile opt-in data and SMS consent are never shared with third parties, as described in Section 3.
• Legal requirements: we may disclose information if required by law, regulation, legal process, or governmental request.

6. Data retention

We retain your account information for as long as your account is active or as needed to provide the Service. SMS consent records are retained as evidence of your opt-in for as long as required by applicable law. You may request deletion of your data at any time by contacting us.

7. Data security

We use industry-standard security measures, including encrypted connections (TLS/SSL) for data in transit, hashed and salted password storage, and role-based access controls. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights and choices

• Access & update: view and edit your account information through your profile settings.
• Delete: request deletion of your account and personal data by contacting us.
• Opt out of SMS: reply STOP to any message, switch to email-based authentication, or contact us.
• Data portability: request a copy of your data in a portable format.

9. Children’s privacy

The Service is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Contact us

Buoy-Fish, Inc.
Email: [email protected]
Phone: +1 (866) 486-3941
Web: buoy.fish