Privacy Policy
Clear, plain-English details about how PivotScanner handles your data.
Privacy policy summary
The short version:PivotScanner stores your fleet and crew data securely, and keeps every company's data separate from every other company's. Data is cached locally on your device so the app works offline at sea. We do not sell your data or use it to train any AI model. Payments are handled by Creem — we never see your card details. Full details below.
PivotScanner is built for vessel operators who need compliance tracking to work reliably in low-connectivity environments — at sea, in port, and ashore. Your crew certificate records, hours-of-rest logs, and document metadata are yours. We store them securely to provide the service and sync them to your device so you can work offline.
What we process
Company and vessel data: Your fleet operator name, contact details, vessel names, IMO numbers, and flag states.
Crew data: Names, nationalities, STCW certificate numbers, certificate types, and expiry dates. Nationality data is processed solely to meet maritime regulatory requirements (STCW certification, flag state regulations, PSC inspections).
Compliance records: Crew hours-of-rest logs and document metadata with expiry tracking.
Payments: If you subscribe to a paid plan, payment processing is handled by Creem as our merchant of record. Payment card details are processed directly by Creem and never touch our servers.
Authentication: Account data (name, email) is processed via Supabase Auth.
Offline storage:Your fleet and crew data is cached locally on your device (in the browser's built-in storage, called IndexedDB) so you can continue working without a connection. Queued changes sync automatically when connectivity returns. The app always shows you whether your data is synced or still queued.
Website analytics: PivotScanner uses Vercel Analytics, a cookieless web analytics service. It collects only aggregate, anonymised usage metrics (e.g. page views, visit duration, device category). No cookies are set and no personal data about individual visitors is collected or stored.
Data isolation
Your data is kept separate from other operators' data at the database level (PostgreSQL Row-Level Security). No other fleet operator can access your crew records, hours-of-rest logs, or compliance data.
Sub-processors
| Service | Provider | Purpose |
|---|---|---|
| Supabase | Supabase, Inc. (USA) | Database, authentication, file storage |
| Creem | Creem (Estonia) | Payment processing (Merchant of Record) |
| Vercel | Vercel, Inc. (USA) | Hosting, CDN, Analytics |
Your rights
Under GDPR (both EU and UK), you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. You also have the right to lodge a complaint with a supervisory authority. For users in Germany, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA). For users in the United Kingdom, the competent authority is the Information Commissioner's Office (ICO).
Full legal privacy policy & Impressum
PivotScanner is operated by ML Upskill Agents UG (haftungsbeschränkt), a company registered in Germany. For the complete legal privacy policy in German (Datenschutzerklärung), GDPR disclosures, international data transfer details, and the German Impressum, please refer to the official documentation at upskillagents.de.
Last updated: 2026-07-08