Privacy Policy — VesselSpecs

Version 1.0 — Effective 2 April 2026

1. Data Controller

Efforwai Digital Transformation SL, registered in Spain, is the data controller for personal data processed through VesselSpecs. Contact: hello@vesselspecs.com

2. Data We Collect

We collect the following personal data:

Your name, corporate email address, and company name at registration
Vessel and specification data you input into the platform
Billing information processed by Stripe
Usage data for platform improvement and support

3. Legal Basis

We process your data on the basis of:

Contractual necessity — to provide the Service
Legitimate interests — to improve the Service and prevent fraud
Legal obligation — tax and accounting requirements under Spanish and EU law

4. Data Use

Your data is used to:

Provide and operate the Service
Send transactional emails (account verification, invoices, service updates)
Comply with legal and regulatory obligations

We do not sell your data, share it with third parties for marketing purposes, or use it for advertising.

5. Data Storage

Your data is stored on secure infrastructure within the European Economic Area. We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

6. Data Retention

We retain your data for as long as your account is active and for up to 3 years after account closure, unless a longer retention period is required by law.

7. Your Rights

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate or incomplete data
Delete your data (right to erasure)
Object to processing
Data portability — receive your data in a structured format

To exercise any of these rights, contact us at hello@vesselspecs.com. We will respond within 30 days.

8. Cookies

VesselSpecs uses essential cookies for authentication and session management only. We do not use tracking, analytics, or advertising cookies.

9. Third-Party Processors

We use the following sub-processors, all bound by GDPR-compliant data processing agreements:

Stripe — payment processing (US/EU, Privacy Shield certified)
Hosting and infrastructure provider — secure EU-based infrastructure

10. International Transfers

All data is stored and processed within the European Economic Area. No international transfers outside the EEA take place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email of any material changes. The current version is always available within the platform.

12. Contact

For privacy-related enquiries or to exercise your rights:

Efforwai Digital Transformation SL Barcelona, Spain hello@vesselspecs.com

Last updated: 2 April 2026