Privacy Policy
Last updated: September 8, 2026
Yathop is a yacht discovery and boat-show companion app operated by YATCO, LLC ("YATCO", "we", "us"), 700 W Hillsboro Blvd, Suite #4-201, Deerfield Beach, FL 33441, USA. This policy explains what we collect through the Yathop mobile app and the yathop.com website, why we collect it, who we share it with, and the choices and rights you have.
YATCO's other websites, yatco.com and yatcoboss.com, are covered by the YATCO Privacy Policy. Each policy applies to the service it names.
Questions or requests: support@yathop.com.
What we collect
Account details you give us. Email address and password (stored as a secure hash), display name, and optionally a phone number, date of birth, your role in the yachting world, a LinkedIn URL, and a profile photo. If you sign in with Apple, Google, or LinkedIn, that provider shares your name and email with us to create your account.
How you use Yathop. Your interests, saved vessels ("Dream Fleet"), swipes and likes, vessels you viewed, searches, boats you tell us you own (Qualify Me), show attendance, event registrations and tickets, QR codes you scan, and event check-ins. We use this to personalise your feed and power the features you see. Direct messages you send are stored encrypted at rest.
Things you tell our AI features. When you use Ask AI search or describe a boat you own in Qualify Me, the text you type is sent to our AI service provider to interpret it. We keep the query and the result so the feature can improve over time; we do not send your name, email, or other account details with it.
Device data. If you enable notifications, a push token and platform (iOS/Android) so we can deliver them. If the app crashes, a crash report (error message, technical stack trace, app version) so we can fix it. Crash reports contain no account data and go only to our own servers.
Location. Optional, with your permission. Your device uses your location to centre the map. When you ask for events near you, the app sends your location to our servers to find them; we use it only to answer that request and do not keep it — it is never saved to your account or our database.
Payments. Paid event tickets are processed by Stripe. We keep the ticket and amount; your card details go directly to Stripe and never touch our servers.
What other users can see. Your display name, profile photo, and role may be shown to other Yathop users where you take part in something shared, such as an event attendee list or a direct message. Your email, phone number, and date of birth are never shown to other users.
How we use it
- To run Yathop: your account, Dream Fleet, feed, search, tickets, and messages.
- To personalise what you see, based on your interests and activity in the app.
- To send you the notifications you turned on, and account emails such as verification and password reset.
- To keep Yathop secure, prevent abuse, and fix problems.
- To answer your support requests.
- To comply with the law and enforce our Terms of Use.
What we don't do
- We don't sell your personal data, and we don't share it for cross-context behavioural advertising.
- We don't show third-party ads and don't track you across other companies' apps or websites.
- We don't collect anything from your contacts, photos, or files beyond what you explicitly share (e.g. a profile photo or a QR code image you pick).
- We don't send your personal data to the brokers, builders, or boat-show organisers whose listings and events you look at, unless you ask us to contact them for you.
Who we share data with
Service providers that process data on our behalf, under contract, only to provide their service to us:
- Stripe — payment processing for event tickets.
- Apple, Google, and LinkedIn — sign-in, where you choose that option.
- Apple, Google, and Expo — push-notification delivery, where you turn notifications on.
- Resend — delivery of account emails.
- Anthropic — interprets Ask AI search queries and Qualify Me descriptions.
- DigitalOcean — hosting of our servers and database.
- Apple Maps / Google Maps (and CARTO on the web) — map tiles fetched by your device. Their platform policies apply to that map request.
Within YATCO. Yathop is run by YATCO, LLC. Yacht listing and boat-show content shown in the app comes to us from YATCO's listing platform (YATCO BOSS) and from industry sources; your personal data is not sent back to them, except a broker enquiry you choose to send (see "When you ask us to").
When you ask us to. If you choose to contact a listing broker through Yathop, the name, email address, phone number and message you confirm in that form go to the listing's broker through YATCO BOSS, the brokerage CRM, and to nobody else. Nothing is sent until you tap Send, and we keep a record of what you sent and when. This happens only when you initiate the contact and choose to share.
For legal reasons. We may disclose data to comply with law or valid legal process, to protect the rights, property, or safety of YATCO, our users, or the public, or to enforce our Terms of Use.
Business transfers. If YATCO or Yathop is involved in a merger, acquisition, or sale of assets, your data may transfer as part of that transaction. We will tell you before your data becomes subject to a different privacy policy.
The yathop.com website and cookies
yathop.com is a small set of static pages. It sets no cookies and runs
no analytics or advertising scripts. Our web server keeps standard access
logs (IP address, browser type, page requested, time) for a short period
for security and troubleshooting. Yacht pages at yathop.com/v/…,
reached from printed QR codes, fetch the listing details from our own
servers and need no account.
The Yathop app does not use cookies or third-party advertising or analytics software.
Where your data is stored
Our servers and database are hosted in the United States. If you use Yathop from outside the US, your data is transferred to and processed in the US, where privacy laws may differ from those of your country. See the notice for EU and UK residents below for how we handle that transfer.
Security
Data travels between the app and our servers over encrypted (TLS) connections. Passwords are stored only as salted hashes, direct messages are encrypted at rest, and access to production systems is limited to the people who need it. No method of transmission or storage is completely secure, so we cannot promise absolute security. If you suspect your account has been misused, email support@yathop.com straight away.
Your choices and rights
- Export your data — in the app: Account → Privacy & Security → Request Data Export.
- Correct your data — in the app: Account → Edit Profile.
- Delete your account — in the app: Account → Privacy & Security → Delete Account, or follow yathop.com/delete-account. This immediately and permanently erases your account and everything it owns, and where you signed in with Apple we also revoke that sign-in with Apple. Stripe retains payment records as required for financial compliance.
- Notifications and location — both are optional and controlled in the app and your device settings.
- You can also email support@yathop.com for any privacy request. We may ask you to confirm the request from the email address on your account.
Retention
We keep your data while your account exists. Deleting your account erases it immediately from our production systems; routine encrypted backups expire on a rolling schedule shortly after. Web-server access logs are kept for a short period and then deleted. Payment records held by Stripe are retained for as long as financial regulations require.
Children
Yathop is not directed at children under 13, and we don't knowingly collect their data. If you believe a child under 13 has created an account, email us and we will delete it.
Notice to EU and UK residents (GDPR)
For the purposes of the General Data Protection Regulation (GDPR) and the UK GDPR, the controller of your personal data is YATCO, LLC at the address above. You can reach our data protection contact at DPO@yatco.com.
Legal bases
- Performance of a contract — creating and running your account, delivering tickets, messages, and the features you use.
- Consent — location access, push notifications, and optional profile details. You can withdraw consent at any time in the app or your device settings.
- Legitimate interests — keeping Yathop secure, preventing abuse, fixing crashes, and personalising your feed based on your activity in the app, balanced against your rights.
- Legal obligation — keeping payment records and responding to lawful requests.
Your rights
You have the right to access, rectify, or erase your personal data; to restrict or object to our processing; to receive your data in a portable format; to withdraw consent; and to lodge a complaint with your local supervisory authority. Export and deletion are available directly in the app; for anything else, email DPO@yatco.com or support@yathop.com. We respond within one month.
Transfers to the United States
We process your data in the United States, which the European Commission and the UK have not found to provide an adequate level of data protection by law. We rely on the derogations in Article 49 GDPR: the transfer is necessary to perform the contract you have with us (your Yathop account) and, for optional features such as notifications and location, on your explicit consent to that feature. Our service providers are bound by contract to protect your data.
Notice to California residents (CCPA/CPRA)
This section applies to California residents and supplements the rest of this policy. In the last 12 months we have collected the following categories of personal information, as defined in the California Consumer Privacy Act:
| Category | Examples in Yathop | Collected? |
|---|---|---|
| A. Identifiers | Name, email address, phone number, account ID, push token, IP address in server logs | Yes |
| B. Personal information (Cal. Civ. Code §1798.80(e)) | Name, phone number, date of birth | Yes |
| C. Protected classifications | Age (date of birth), if you give it | Yes, optional |
| D. Commercial information | Event tickets purchased; vessels saved or viewed | Yes |
| E. Biometric information | — | No |
| F. Internet or network activity | Swipes, searches, screens and vessels viewed, QR scans | Yes |
| G. Geolocation data | Location when you ask for nearby events; used for that request only | Yes, not retained |
| H. Sensory data | — | No |
| I. Professional information | Your self-described role in yachting, if you give it | Yes, optional |
| J. Education information | — | No |
| K. Inferences | Interests used to personalise your feed | Yes |
| L. Sensitive personal information | Account password (stored as a hash); message contents (encrypted) | Yes, to run the service only |
Sources: you, your device, the sign-in provider you choose, and Stripe (payment confirmation). Purposes: the business purposes listed under "How we use it". Disclosures for a business purpose: to the service providers listed under "Who we share data with".
No sale or sharing. We do not sell personal information and do not share it for cross-context behavioural advertising, and have not done so in the last 12 months. We do not knowingly sell or share the personal information of anyone under 16. Because we do not sell or share, there is no opt-out to offer; we treat Global Privacy Control signals as a request not to sell or share, which we already honour.
Your rights. You have the right to know what personal information we collect, use, and disclose; to access it; to correct it; to delete it; to receive it in a portable format; to limit the use of sensitive personal information (we use it only to run the service); and not to be discriminated against for exercising these rights.
How to exercise them. Use the export, edit, and delete tools in the app, or email support@yathop.com or info@yatco.com. We will verify the request by matching it to the email address on your account and may ask for more detail. An authorised agent may submit a request with your written permission; we may still ask you to confirm it. We respond within 45 days and will tell you if we need up to 45 more. We do not charge for requests unless they are excessive or repetitive.
Changes
If this policy changes materially we will update this page and the date above, and tell you in the app or by email where the change affects you. Continued use of Yathop after the change takes effect means the updated policy applies.
Contact
700 W Hillsboro Blvd, Suite #4-201
Deerfield Beach, FL 33441, USA
+1 561 204 1925
Yathop support and privacy requests: support@yathop.com
YATCO: info@yatco.com · Data protection: DPO@yatco.com