Privacy Policy

We collect the following categories of information, depending on how you use the Platform:

• Account information: your name, email address, and phone number.
• Profile information: your professional bio, profile and vessel photos, and the role you hold on the Platform (captain, deckhand, angler, operator, and similar).
• Government ID & maritime credentials: government-issued identification, Merchant Mariner Credential (MMC) and other USCG licenses, medical certificates, drug-and-alcohol consortium enrollment records, Transportation Worker Identification Credential (TWIC), and any documents you upload for vetting or compliance.
• Passenger manifest data: information about trip passengers, which may include the names, ages, and emergency-contact details of minors (see Section 8).
• Payment information: payments are processed by our third-party payment processor, Authorize.net. We do not store full payment-card numbers on our systems; we may retain limited transaction records (such as amount, date, and a token or last four digits).
• Location & vessel data: vessel position, AIS data, and trip-track information used for safety, dispatch, and operational records.
• Communications: in-app messages between users, and messages you send to us.
• Cookies & usage data: cookies and similar technologies, device and browser information, and how you interact with the Platform, used to keep you signed in and to operate and improve the service.

We use the information we collect to:

• create and administer your account and authenticate you;
• vet crew and operators and verify maritime credentials and eligibility;
• book, coordinate, and manage charters, manifests, and crew assignments;
• process payments, deposits, and refunds through our payment processor;
• prepare and route documents for electronic signature;
• meet safety, recordkeeping, and regulatory obligations, including those of the U.S. Coast Guard (USCG) and the California Department of Fish and Wildlife (CDFW);
• communicate with you about your account, trips, and service updates;
• operate, secure, troubleshoot, and improve the Platform; and
• comply with law and enforce our Terms of Service.

We share information only as needed to operate the Platform and as described below. We do not sell your personal information.

• Charter operators & crew: with the independent charter operators and crew you work with or book through, to the extent needed to staff, run, and document a trip (for example, a passenger manifest shared with the operating vessel).
• Payment processor: Authorize.net, to process payments.
• E-signature provider: Documenso, to deliver, collect, and store signed documents.
• Regulators, marinas & authorities: with the USCG, CDFW, marinas, and other authorities where disclosure is legally required or necessary for safety, compliance, or to respond to an incident.
• Service providers: with vendors who host and operate the Platform on our behalf under confidentiality and data-protection obligations.
• Legal & protection: when required by law, subpoena, or court order, or to protect the rights, safety, and property of Ironclad, our users, or the public.

We protect your information with layered, defense-in-depth security controls, including:

• encryption of data in transit and at rest;
• database-level Row-Level Security (RLS) configured deny-by-default, so each user can access only the records they are authorized to see;
• least-privilege access controls for staff and systems;
• unified audit logging with cross-system trace IDs, so significant actions can be reviewed and reconstructed for security and compliance; and
• a defined retention and anonymization policy for logs and records (see Section 5).

No system can be guaranteed perfectly secure, but we work to safeguard your information using these measures and to limit access to what is necessary.

We retain audit logs and records for a default period of 365 days (a one-year minimum), after which they are purged or anonymized in accordance with our retention policy. Records that contain personal information (PII) or protected health information (PHI) are anonymized rather than retained in identifiable form once their retention period ends, except where a longer period is required to meet a legal, regulatory, safety, or recordkeeping obligation (for example, maritime incident or manifest records).

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to:

• access and request a copy of the personal information we hold about you;
• request deletion of your personal information;
• request correction of inaccurate personal information; and
• opt out of any sale or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information.

We will not discriminate against you for exercising these rights. To make a request, contact us at info@ironcladsportfishing.com. We may need to verify your identity before fulfilling a request.

The Platform is intended for use by adults. Accounts may not be created by anyone under 18.

Charter passengers may be minors. Where a passenger is a minor, the booking adult, parent, or legal guardian is responsible for providing the minor’s information and for obtaining and providing any required parental or guardian consent, including for the applicable waivers and acknowledgments. We collect a minor’s information only as part of trip manifests and safety records, and we do not market to minors.

Because we operate in a regulated maritime environment, some information is collected and retained specifically to meet legal and safety requirements—including signed waivers and hold-harmless agreements, passenger manifests, and records required by the U.S. Coast Guard (USCG) and the California Department of Fish and Wildlife (CDFW). This data may be retained and disclosed to the extent required by those obligations, even where it would otherwise be eligible for deletion.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Platform is used. You can control cookies through your browser settings; disabling certain cookies may limit your ability to use parts of the Platform.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Platform after an update means you accept the revised policy.

Questions about this Privacy Policy or your information? Contact us at info@ironcladsportfishing.com.