Sea·it Privacy Policy

Last updated: 10 September 2026
Effective: 31 August 2026

This Privacy Policy explains how Blake Smidt, trading as "Sea·it" ("Sea·it", "we", "us", "our") collects, uses, discloses and protects personal information when you use the Sea·it mobile application (the "App") and our website at https://seait.io (the "Site"), together the "Service".

Sea·it is an inventory-management tool for professional superyacht interior crew. It is a business tool intended for people aged 18 and over.

If you have any questions, contact us at info@seait.io.

The short version

We only collect what we need to run the Service: your account details, the inventory and crew records you enter, and the photos and invoices you submit to our AI features.
We do not run any advertising, analytics, tracking or crash-reporting tools in the App. Our website uses Google Analytics, but only if you consent to it.
We do not sell your data and we do not build advertising profiles.
We use a small number of trusted providers to run the Service: Supabase (database, sign-in and storage), Anthropic (the AI behind label scanning, invoice reading and the ARIA assistant), Paddle (payments, on the web only), Apple and Expo (app distribution), Formspree (our mailing list form), and Google Analytics (website analytics, consent-based).
Some of the data you enter, including crew names, job titles and uniform measurements, is sent to our AI provider when you use certain AI features. That section is important and is explained in full below.
You have rights over your personal information, including access, correction and deletion. Email us to exercise them.

This summary is for convenience only. The full Policy below governs.

1. Who this Policy applies to, and our role

Sea·it is used by three kinds of people:

Account holders, meaning crew who create a Sea·it login and use the App, for example a chief stewardess and the crew she invites to a vessel.
People whose details are entered into Sea·it by an account holder, for example crew recorded as "manual crew" who have no login, and whose names, roles and uniform measurements are entered so that uniforms can be allocated, tracked and handed over.
Website visitors, meaning anyone who visits seait.io, whether or not they have an account, including people who join our mailing list.

Our role under privacy law depends on the data:

For account, sign-in, billing and mailing-list information, and for operating the Service generally, Sea·it acts as a controller, which means we decide how and why that information is handled.
For the content you enter into the App, meaning your vessel's inventory records, crew records and allocations, Sea·it acts as a processor acting on your instructions. In that case you, or the vessel or business you operate for, are the controller of that content, and you are responsible for having a proper basis to enter other people's personal information. See section 9.

"Personal information" and "personal data" are used interchangeably in this Policy.

2. The personal information we collect

2.1 Information you give us when you create an account

Email address and password. Your password is stored only in hashed form by our sign-in provider. We never see it in plain text.
First name and last name.
Your job role or job title, which is free text you enter.
Optionally, your own uniform and body measurements, meaning shirt or top size, waist size, shoe size and any sizing notes, if you record yourself as crew.

2.2 Vessel information

The vessel name you create or join, and the invite code used to join a vessel. A vessel name may indirectly identify individuals by association.

2.3 Inventory content you enter

Alcohol, tobacco, uniform and general inventory records: item names, brands and producers, vintages, quantities, conditions, storage locations, thresholds, notes, prices and similar fields.
Photos you attach to items or categories. A photo you take could incidentally capture a person's likeness or other personal information. You control what you photograph.
Free-text notes fields, for example transaction notes and sizing notes, into which you may, but should avoid, entering personal information about others.

2.4 Crew records you enter about other people

When you add crew to a vessel, you may enter personal information about other people, including "manual crew" who have no login of their own. This can include their first and last name, job role or title, uniform and body measurements, sizing notes, and the uniforms allocated to them, including item, size, condition, quantity and related notes. See section 9 for your responsibilities.

2.5 Images and documents you submit to AI features

Label scanning: the photo you scan is sent to our AI provider to read the label.
Invoice import: the invoice document you import is sent to our AI provider to extract line items. Invoices frequently contain third-party personal information, for example supplier contact names and addresses, and that content is transmitted as part of this feature.
ARIA assistant: when you ask ARIA a question, the App sends your question together with the relevant inventory context. For uniform questions, that context can include crew personal information: names, job titles, measurements and allocations. See section 5.

2.6 Support communications

If you contact us, we collect your email address and the contents of your message.

2.7 Mailing list

If you join our mailing list through the form on our website, we collect the email address you provide.
We use it to send occasional product updates and news about new features.
Your address is submitted through Formspree, a form-handling service, and reaches us by email. See section 4.
We will not pass your address to anyone else, and you can ask us to remove it at any time by emailing info@seait.io. Every update we send will include a way to unsubscribe.

2.8 Payment information

We do not collect or store your card or bank details. All payments are processed on the web by Paddle, which acts as Merchant of Record and handles card processing, invoicing and applicable taxes. We receive only limited confirmation information, such as your subscription status.

2.9 Technical information

In the App:

We use a small amount of technical information necessary for the App to function, for example your sign-in session token, stored securely on your device, and network requests to our providers over encrypted connections.
We do not use analytics, advertising, attribution, session-replay or third-party crash or telemetry tools in the App. We do not track your activity across other apps or websites.

On the Site:

We use Google Analytics to understand how the marketing pages are used. This is optional and only runs if you consent to it. See section 13.
If you have an account and sign in on the Site, your session is stored in your browser so you stay signed in. That is necessary for the Site to work and does not require consent.

Our infrastructure providers may process limited technical metadata, such as IP address and request logs, as a necessary part of delivering and securing their services. See sections 4 and 10.

We do not intentionally collect "sensitive information" or "special category" data such as health, biometric, racial, political or religious information. Uniform and body measurements are collected for the practical purpose of allocating and handing over uniforms. Please do not enter special-category information into free-text fields.

3. How we collect it

We collect personal information directly from you when you create an account, use the App, submit content to AI features, make a payment through Paddle, join our mailing list, or contact us. We also collect personal information about crew from account holders who enter it. See section 9.

On the Site, we collect analytics information through cookies, but only where you have consented. See section 13.

4. Who we share it with

We share personal information only with the providers we need to run the Service. We do not sell personal information and we do not disclose it for advertising.

Provider	What they do for us	What is shared	Where
Supabase	Database, sign-in and authentication, file storage, and the server functions that run the Service. This is where your account and content are stored.	All account and content data.	European Union (Ireland)
Anthropic (Claude API)	Powers AI features: label scanning, invoice reading and the ARIA assistant.	The content submitted to those features, which for uniform ARIA and invoices can include personal information. See 2.5.	United States
Paddle (Paddle.com Market Ltd)	Processes payments and issues invoices as Merchant of Record. Applies only if and when you subscribe. Handled on the web, not in the App.	Your billing details, provided by you directly to Paddle.	United Kingdom and United States, per Paddle's terms
Apple and Expo (EAS)	App Store and TestFlight distribution, and app build services.	Distribution and device-level information handled by these platforms under their own terms.	United States
Formspree	Handles the mailing-list form on our website and delivers submissions to us by email.	The email address you enter into that form.	United States
Google (Google Analytics)	Website analytics on our marketing pages, only where you have consented.	A randomly generated identifier, pages viewed, approximate location derived from a truncated IP address, and device and browser type. Not your name or email.	United States and other locations where Google operates
Netlify	Hosts our website.	Technical request logs, including IP address, as a necessary part of serving the site.	United States

We may also disclose personal information where required by law, to enforce our Terms of Service, to protect the rights, safety or property of Sea·it or others, or in connection with a sale or restructure of our business, in which case this Policy will continue to apply.

AI providers and training. Anthropic processes the data we send them solely to return a result to the App. Under the commercial API terms applicable to our use of their services, they do not use that data to train their AI models.

5. AI features and how your data is used with AI

Sea·it uses artificial intelligence to make inventory work faster. We want to be clear about how this works.

What is sent: depending on the feature, the App sends an image for label scanning, a document for invoice import, or your typed question plus inventory context for ARIA.
Crew data and AI: if you use the uniform ARIA assistant, the context sent can include crew personal information: names, job titles, measurements and allocations. If you import an invoice, its contents, which may include third-party personal information, are sent.
No conversation memory: ARIA is single-shot. Each question is sent on its own. We do not send previous questions or any conversation history.
AI output is a helper, not an authority. AI features can make mistakes. Outputs including extracted invoice data, scanned labels, ARIA answers and generated documents are provided to assist you and must be independently checked. They must not be relied upon as legal, customs, tax, insurance or regulatory advice or records. This is covered further in our Terms of Service.

6. Why we use your personal information, and our legal bases

We use personal information to:

create and manage your account and vessel access;
provide the core inventory, crew-allocation, handover and reporting features;
provide the AI features you choose to use;
process your subscription and payments through Paddle;
send you product updates and news about new features if you have joined our mailing list;
understand how our website is used, where you have consented;
respond to your support requests;
keep the Service secure, prevent misuse and comply with our legal obligations.

Where the GDPR applies, our legal bases are:

Performance of a contract, to provide the Service you have signed up for.
Legitimate interests, to operate, secure and improve the Service, provided this is not overridden by your rights.
Consent, for our mailing list and for analytics cookies on our website. You can withdraw consent at any time.
Legal obligation, to comply with laws that apply to us.

For crew content you enter about others, you are responsible for the legal basis under which that information is provided. See section 9.

7. International data transfers

Sea·it is operated from Australia. Our primary database and file storage are hosted in the European Union (Ireland). Several of our providers process data in other countries, in particular the United States, as set out in the table in section 4.

Australia does not currently have an EU adequacy decision. Where personal data is transferred internationally:

for data subject to the GDPR, we rely on appropriate safeguards implemented by our providers, such as Standard Contractual Clauses or the EU-US Data Privacy Framework, as applicable under each provider's terms; and
for data subject to the Australian Privacy Act, we take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles.

By using the Service you understand that your information may be processed in the countries described above.

8. How long we keep it

What	How long
Account and vessel content, while active	For as long as your account and vessel are active.
Account and vessel content, after a subscription lapses or a trial ends	Retained for 90 days, then permanently deleted. We will contact you before this happens.
Account and vessel content, if you delete your account	Deleted immediately and permanently.
Item photos	Stored until you delete them, or until the vessel's data is deleted under the rules above.
Invoice and label content submitted to AI features	Processed to return a result and not separately stored by us, beyond the records you choose to save into your inventory.
Mailing-list email addresses	Until you ask us to remove you, or unsubscribe.
Support emails	Up to 2 years, so we can refer back to previous conversations.
Google Analytics data	2 months, which is the shortest retention Google Analytics permits.
Billing records held by Paddle	Under Paddle's own retention policy, and as required by tax and accounting law.

Our providers may retain limited technical logs under their own retention policies.

When you delete your account, we delete your personal information. If you are a vessel's only remaining administrator, meaning the account holder who manages that vessel's crew and settings, you will be asked either to give administrator access to another crew member or to delete the vessel and its data. If you choose to delete it, that vessel's data is deleted as well, and any other crew members on that vessel lose access to it while keeping their own accounts. Some information may be retained where we are required to keep it by law.

9. If you enter other people's personal information

When you add crew or enter details about other people, you are responsible for that information. By entering it you confirm that:

you have the authority and a lawful basis to provide that person's personal information to Sea·it and to have it processed as described in this Policy, including where relevant being sent to our AI provider when uniform ARIA or invoice features are used;
you have given those people any privacy notice they are entitled to, and obtained any consent required, under the laws that apply to you and to them; and
you will keep that information accurate and will handle requests from those people appropriately.

For that content, you or your vessel or business are the controller and Sea·it is the processor. If a crew member wants to access, correct or delete information that an account holder entered about them, they should contact the account holder or vessel that entered it. We will assist the account holder to respond, and we will act on the account holder's instructions.

10. How we protect your information

We use measures appropriate to the nature of the data, including:

Encryption in transit. All connections between the App, the Site and our providers use HTTPS and TLS.
Access controls. Our database enforces row-level security so that data is scoped to your vessel, and users can only access data they are permitted to see.
Protected credentials. AI provider keys are held server-side in our secure server functions and are never included in the App you download or the website you visit. Your sign-in session is stored securely on your device or in your browser.
Reputable infrastructure. Data is stored with Supabase, which provides platform-level security and encryption at rest.

No system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security, and you also play a part by keeping your login details confidential.

Data breaches. If a data breach occurs that is likely to result in serious harm, we will comply with our obligations under the Australian Notifiable Data Breaches scheme and, where applicable, the GDPR, including notifying the relevant regulator and affected individuals as required by law.

11. Your privacy rights

11.1 Everyone

To exercise any of the rights below, email us at info@seait.io. We may need to verify your identity, and we will respond within the time required by law. We will not charge you, except where the law allows it, for example for a repetitive or excessive request.

There is a Delete account option in the settings section of the App. If you have any trouble deleting your account, contact us by email and we will action your request.

11.2 If you are in the EU, the UK or Switzerland

Under the GDPR and UK GDPR you have the right to:

access the personal information we hold about you;
correct information that is inaccurate or out of date;
delete your information, sometimes called the right to erasure;
object to or restrict certain processing;
data portability, meaning you can receive a copy of certain information in a usable format;
withdraw consent where we rely on consent, including for our mailing list and analytics cookies; and
complain to a supervisory authority. See section 15.

11.3 If you are in the United States

Depending on your state, you may have rights under laws including the California Consumer Privacy Act as amended by the CPRA, and comparable laws in Colorado, Connecticut, Utah, Virginia and other states. These may include the right to:

know what personal information we collect, how we use it and who we share it with;
access a copy of that information;
delete it;
correct inaccurate information;
opt out of the sale or sharing of personal information, and of targeted advertising. We do not sell or share personal information, and we do not run targeted advertising, so there is nothing to opt out of; and
not be discriminated against for exercising your rights. We provide the same service and the same price either way.

California residents: we do not sell or share personal information as those terms are defined under the CCPA, and we have not done so in the preceding twelve months.

11.4 If you are in Canada

Under PIPEDA you may access your personal information, request corrections, and challenge our compliance through the Office of the Privacy Commissioner of Canada.

11.5 If you are in Australia

Under the Australian Privacy Principles you may access and correct your personal information, and complain to us or to the Office of the Australian Information Commissioner. See section 15.

12. Documents you export

Sea·it lets you generate and export documents, including crew uniform handover documents, uniform, general, alcohol and tobacco inventory reports, activity reports, damage and loss reports, and customs declaration reports, as PDF and Excel files. Some of these contain personal information, for example crew names, job titles, measurements and allocations.

Once you export or share a document, for example through your device's share sheet, you control where it goes. That sharing is outside our control and outside this Policy. Please handle exported documents responsibly.

13. Cookies and similar technologies on our website

This section applies to our website at https://seait.io. The App does not use cookies or any analytics, advertising or tracking technology.

13.1 What we use

Strictly necessary. Always on, no consent required.

Cookie or storage	Set by	Purpose	How long
Supabase session storage	Sea·it	Keeps you signed in to your account on the website. Only set if you sign in.	Until you sign out, or until the session expires
Cookie consent preference	Sea·it	Remembers whether you accepted or declined analytics cookies, so we do not ask you again on every visit.	6 months

These are necessary for the website to work. Without them you could not stay signed in, and we would have to ask about cookies on every page.

Analytics. Only with your consent.

Cookie	Set by	Purpose	How long
`_ga`	Google Analytics	Distinguishes one visitor from another so we can count visitors rather than visits.	2 years
`_ga_<container-id>`	Google Analytics	Maintains session state for Google Analytics.	2 years

If you decline, Google Analytics is not loaded at all. No analytics cookies are set and no data is sent to Google.

13.2 What Google Analytics tells us

We use Google Analytics to understand which pages people read and how they reach us. We can see how many people visited, which pages they viewed, roughly where in the world they were, and what device and browser they used.

We have configured Google Analytics to:

retain data for 2 months, the shortest period it permits;
not share data with Google's advertising products; and
not collect outbound click or site search data.

We cannot see your name or email address in Google Analytics, and we do not combine analytics data with your account.

13.3 Your choices

When you first visit our website, we ask whether you accept analytics cookies. Nothing non-essential is loaded until you choose. Declining is one click and is as easy as accepting.

You can change your mind at any time using the Cookie settings link in the website footer. You can also block or delete cookies through your browser settings, though this may affect how the site works.

We do not use cookies for advertising, targeting, profiling or any marketing purpose.

14. Children

The Service is a professional tool intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

15. How to make a complaint

If you have a concern about how we handle your personal information, please contact us first at info@seait.io so we can try to resolve it.

In Australia, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
In the EU, you may complain to your local data protection authority.
In the UK, you may complain to the Information Commissioner's Office at www.ico.org.uk.
In Canada, you may complain to the Office of the Privacy Commissioner of Canada.
In the United States, you may contact your state Attorney General.

16. Changes to this Policy

We may update this Policy from time to time. If we make a material change we will take reasonable steps to notify you, for example by in-app notice or email. The "Last updated" date at the top shows when it last changed. Continuing to use the Service after a change means you accept the updated Policy.

17. Contact us

Blake Smidt, trading as Sea·it

Email: info@seait.io

Postal address:
Suite 17, 89-97 Jones Street
Ultimo NSW 2007
Australia