Legal

Privacy Policy

This policy explains what SeaValid stores about you, where it is stored, how long we keep it, and the controls you have. It describes only what is actually implemented in the product today.

Who is responsible for your data

SeaValid is operated by Rihards Jansons. For any privacy question, data request or complaint, contact rihards.jansons@seavalid.com.

What we store

  • Account and sign-in details (email address, authentication records).
  • Your seafarer profile: name or display name, rank/role, sector, nationality, date of birth, availability, contact details and experience summary — only what you enter.
  • Certificate records: title, category, document number, issuing authority and country, issue and expiry dates, your own notes, and the files you upload.
  • Reminder settings, share-link details, and an activity log of uploads, views, downloads and share-link changes.
  • Email delivery records, and a do-not-email list if you unsubscribe or if mail to you repeatedly fails.

Where your data is stored

Our primary database and your uploaded files are stored in the European Union, in AWS eu-west-3 (Paris).

Email delivery and website serving use providers that may process data outside the EU. For that reason we do not claim EU-only processing.

Encryption in transit and at rest is applied at platform level by our hosting and storage providers. SeaValid does not add its own application-level encryption on top of that.

How long we keep it

  • Your profile, certificate records and files: kept while your account is open, and deleted when you delete your account.
  • Activity log: retained for 24 months, then permanently deleted.
  • Email delivery log: retained for 12 months, then permanently deleted.
  • Expiry-reminder log: retained for 12 months, then permanently deleted.
  • Data exports you request: retained for 7 days, then permanently deleted.
  • Deletion record: when an account is deleted we keep a minimal record for 24 months — a one-way hash of the email address, a completion flag, timestamps and technical counts — then permanently delete it. This is retained for security, fraud prevention, abuse prevention and legal accountability. It contains no name, contact details or certificate data.
  • Do-not-email list: we keep the minimum identifier (your email address) and the reason for suppression for as long as necessary to honour your request not to receive email, or to prevent repeated delivery failures. If a suppression record should be removed, email us and we will remove it where appropriate.

These deletions run automatically on a daily scheduled maintenance job. Active accounts, certificate records, uploaded files and current exports are never touched by it.

Your controls

  • Export your data: Settings → Your data → “Request my data export”. This produces a JSON copy of your profile, certificate records, reminder settings, share-link details, uploaded-file metadata and activity log. Download links are private to you and short-lived, and the export file is deleted after 7 days.
  • Delete your account: Settings → “Delete my account”. This removes your profile, certificate records, uploaded files, share links, activity log and sign-in, apart from the minimal deletion record described above.
  • Correct your data: you can edit your profile and certificate records at any time in the app.
  • Share links: you choose which summary fields a private link shows, and can revoke it at any time. Files are never included by default.

Who can see your data

Only you can read your certificate records and files through the app. There is no recruiter search, no agency accounts and no employer directory in SeaValid V1, and your profile is never listed or discoverable. The only way to show it to someone is a private link you generate yourself. Technical administration access is limited to what is needed to operate and support the service.

Changes to this policy

If we change what we store, where it is stored or how long we keep it, we will update this page.

See also Security & Privacy for how access to documents is controlled.