Draft — pending legal review. This document is a working draft and is not yet in effect. It will be reviewed by counsel before SlipBook relies on it.
Legal

Privacy Policy

Last updated November 10, 2026

This policy explains how [Company legal name] (“SlipBook,” “we,” “us”) handles personal information. We are based in British Columbia, Canada, and we aim to meet the requirements of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). We also serve marinas in the United States and handle their information under this same policy.

1. Who is responsible for what

SlipBook is used by marinas, yacht clubs and similar businesses (“Marinas”) to manage their slips, tenants and billing. That means we handle two kinds of personal information, in two different roles:

  • Marina account information — details about the Marina and its staff users. We decide how this information is used, and this policy applies to it directly.
  • Boater information — details about a Marina's tenants, boaters and visiting guests (“Boaters”). The Marina collects this information and controls it; we process it on the Marina's behalf, as its service provider, and only to provide the service to that Marina. If you are a Boater, the Marina you deal with is responsible for your information, and requests about it should usually go to them first. We will help the Marina respond.

2. Information we collect

From Marinas and their staff: names, email addresses and passwords of staff users (passwords are stored only as one-way hashes), and business details such as the Marina's name, address, phone, time zone, currency and settings. Subscription billing details are collected by Stripe; we receive a customer reference and billing status, not card numbers.

About Boaters, on a Marina's behalf: information the Marina uploads or enters, or that Boaters provide through the boater portal or public booking page. This can include:

  • name, email address, phone number and mailing address;
  • vessel details such as name, make, model, dimensions and registration;
  • insurance details and uploaded insurance certificates;
  • moorage agreements and leases, slip assignments, invoices, credits and payment history;
  • for visiting guests who book a slip, their name, email, phone, vessel details and booking dates;
  • messages sent to Boaters, and questions Boaters ask the portal assistant.

Uploaded documents: spreadsheets, leases, agreements, rate sheets, photos and other files a Marina uploads to set up or run its account, and insurance certificates uploaded by Boaters. These often contain personal information.

Payment information: card and bank account details are entered directly with Stripe and are never stored by SlipBook. We receive and store references to Stripe records and a short label such as the card brand or bank name with the last four digits.

Technical information: our hosting provider records standard request logs (such as IP address, browser type and the pages requested) for security and troubleshooting.

Usage analytics and cookies: we measure how our website and app are used with our own first-party analytics — no third-party analytics or advertising services. We record the pages viewed, buttons clicked, the website or campaign that referred you (for example a utm_source tag), your device type and approximate country. We use cookies to keep you signed in, and three first-party analytics cookies: sb_vid (a random visitor ID, 12 months), sb_sid (a random visit ID, 30 minutes) and sb_src (where your first visit came from, 12 months). We do not store IP addresses in our analytics. If your browser sends a Do Not Track or Global Privacy Control signal, we don't record analytics for you. If you request early access, we keep the details you submit and how you found us so we can follow up.

3. How we use information

  • to provide the service: building records from uploaded documents, generating invoices, processing payments, sending emails and running the boater portal and booking page;
  • to send service emails, including invoices, reminders and notices the Marina approves or automates, and sign-in links for the boater portal;
  • to run the AI features described below;
  • to bill Marinas for their subscription and to provide support;
  • to keep the service secure, prevent fraud and abuse, and fix problems;
  • to meet legal obligations.

We do not sell personal information, and we do not use Boater information for our own marketing. We use Boater information only to provide the service to the Marina that it belongs to.

4. AI processing

SlipBook uses Anthropic's Claude API to read uploaded documents and extract information (for example, slip lists and lease terms), to check records and draft messages, and to answer questions from Marina staff and from Boaters in the portal. To do this, the relevant document contents and records are sent to Anthropic for processing. Under Anthropic's commercial terms, content sent through its API is not used to train its models by default.

AI output can be inaccurate. Marinas review what the AI extracts, and actions that affect money or contracts wait in the Marina's approvals inbox unless the Marina has turned on the matching automation. Invoice amounts are calculated by our billing software, not by AI.

5. Service providers (subprocessors)

We share personal information only with the service providers that help us run SlipBook, under contracts that limit their use of it to providing their services to us:

ProviderPurposeLocation
VercelApplication hosting and request logsUnited States
TursoDatabase hosting for account and marina recordsUnited States
Cloudflare (R2)Storage of uploaded files — leases, spreadsheets, insurance certificatesUnited States and other regions
ResendDelivery of email, including invoices, reminders and boater sign-in linksUnited States
StripeSubscription billing and boater payments (Stripe Connect)United States, Canada and other regions
AnthropicAI processing (Claude API) to read documents and answer questionsUnited States

Boater payments are charged on the Marina's own Stripe account and paid out by Stripe to the Marina. SlipBook receives a platform fee on those payments. Stripe handles payment information under its own privacy policy.

We may also disclose information if the law requires it, to protect the rights or safety of people or the service, or as part of a merger or sale of the business, in which case the information would remain subject to this policy.

6. Storage outside Canada

Several of our service providers store or process information in the United States, and some may use other countries. When information is outside Canada it is subject to the laws of that country, and authorities there may be able to access it. We choose providers that protect information to a standard comparable to Canadian law and limit what we send to what is needed.

7. Security

  • Connections to SlipBook use HTTPS (TLS), so information is encrypted in transit.
  • Our database, file storage and hosting providers encrypt stored data at rest.
  • Uploaded files are kept in private storage and served only to signed-in users of the account they belong to.
  • Every Marina's records are tied to its account, and access is checked on every request.
  • Staff passwords are stored as one-way hashes. Boaters sign in with links sent to their email address instead of passwords.

No system is perfectly secure. If a breach affects your information and creates a real risk of significant harm, we will notify the affected Marina, and individuals or regulators where the law requires.

8. Retention

We keep information for as long as the Marina's account is active. If a trial ends without a plan or a subscription ends, access to the operator app is paused and we keep the account's data for [90] days so the Marina can resume or export it. After that we may delete it, and we delete it sooner when the Marina asks. Backups are cleared on our providers' normal cycles, and we keep limited records such as billing history where the law requires.

9. Your choices and rights

You can ask to see the personal information we hold about you, ask us to correct it, or withdraw consent to uses that are not needed to provide the service. Marinas can update most of their own and their Boaters' records directly in the app and export their main records as CSV files. Boaters can update their vessel and insurance details in the portal, and should contact their Marina for other changes.

Email [email protected] to make a request. We will respond within the time the law allows (generally 30 days). If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia. Residents of some U.S. states may have additional rights under their state's privacy law; contact us and we will help.

10. Children

SlipBook is a business service and is not directed to children. We do not knowingly collect information from children.

11. Changes to this policy

We will post any changes on this page and update the date above. If a change is significant we will tell Marinas by email or in the app before it takes effect.

12. Contact

Our privacy officer can be reached at [email protected] or by mail at [Company legal name], [mailing address]. See also our Terms of Service.