Data Storage & Security Policy

1. Where your data is stored

• Primary database and file storage: Australia. Your account, boat records, insurance details, documents and photos are stored on secure AWS servers in Australia (Sydney region).
• Website hosting: the BoatMe website and portal are served through a global content delivery network. Only the public website content is distributed globally; your private records are not published to any CDN.
• We do not transfer your boat records, trip logs, documents or insurance details outside the storage described above except where strictly required to deliver the service to you (for example, sending a trip log email to the sea rescue station you select).

2. Access controls — no public database

• Every account can only see and change its own records; one owner cannot see another owner's boats, documents or logs.
• Anonymous public access to the database is disabled at the database level, not just hidden in the interface.
• Documents and photos are stored in private storage and are only accessible to the signed-in owner.

3. Security measures

• All traffic between your device and BoatMe is encrypted in transit (HTTPS/TLS).
• Passwords are never stored in readable form.
• Access to production systems is restricted to authorised personnel of WDX Global Pty Ltd and its service providers, on a least-privilege basis.
• Row-level security policies enforce data isolation at the database layer.

4. Service providers we rely on

We use a small number of contracted service providers to run the platform. Each processes data only on our behalf, only to provide the service, and is not permitted to use it for any other purpose:

• Amazon Web Services (database and private file storage, Sydney region, Australia);
• a global website hosting and content delivery provider;
• Standard email delivery services, used to send trip logs to the sea rescue station you select and account-related emails.

5. Retention and deletion

• We keep your records for as long as your account is open, so you have your boat's full history available.
• When you delete your account, your boats, documents, photos, insurance records, contractor records and service history are permanently removed from the platform.
• Limited server logs may be retained for a short period for security and fault diagnosis.

6. No sharing, no selling

This policy supplements our Privacy Policy: we do not sell personal information, we do not share it with advertisers or data brokers, and we do not use it to build advertising profiles. See also our Advertising Policy.

7. Breaches and contact

If we become aware of a data breach affecting your information, we will notify affected users as soon as practicable. Questions about storage or security: hello@boatme.com.au.