Privacy Policy

This privacy policy (the “Policy”) describes how Yachtlista (“Yachtlista,” “we,” “our”) handles personal data collected when you access yachtlista.com (the “Site”) or use our yacht marketplace platform and related services (collectively, the “Services”). Yachtlista is a marketplace where private yacht owners and licensed brokers list yachts for sale and connect with potential buyers.

As used in this Policy, “personal data” means any information that relates to, describes, or could be used to identify an individual, directly or indirectly.

This Policy applies to personal data that Yachtlista collects, uses, and discloses, which may include: (i) data collected through the Services, (ii) data collected through our website, and (iii) data collected from third-party sources. When you make purchases, we use Stripe as our payment processor to collect credit card or other financial information. Yachtlista does not store your credit card or payment information — only confirmation that payment was made.

We may update this Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, through email or a notice on the Site. Your continued use of the Services after changes go into effect constitutes acceptance of the revised Policy.

Definitions:

• You, Your: The individual accessing or using the Services, or the company or other legal entity on whose behalf such individual is accessing the Services.
• Company, We, Us, Our: Refers to Yachtlista.
• Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit or which listings you view).

We collect information in several ways depending on how you interact with the Services:

Information you provide directly

• Account information: Your name, email address, phone number, and profile details provided during registration through Clerk, our authentication provider.
• Listing information: Yacht details including make, model, year, length, specifications, asking price, photos, descriptions, and location data you provide when creating or editing a listing.
• Broker profile information: Company name, license details, brokerage address, logo, and professional biography for broker accounts.
• Payment information: Billing name, address, and payment method details processed securely through Stripe. We do not store your full credit card number on our servers.
• Communications: Messages, lead inquiries, and support requests you send through the platform, including buyer-to-seller contact forms.

Information collected automatically

• Device and browser data: Browser type and version, operating system, screen resolution, device type, and language preferences.
• Log data: IP address, access times, pages viewed, referring URLs, and actions taken on the Site (such as listings viewed, searches performed, and filters applied).
• Location data: Approximate geographic location derived from your IP address or, if you grant permission, more precise location data from your device.

We use the information we collect to:

• Operate, maintain, and improve the marketplace, including displaying your yacht listings to potential buyers.
• Process payments and manage your account, including FSBO one-time fees and broker subscription billing.
• Deliver lead notifications and buyer inquiries to sellers and brokers.
• Send transactional emails such as account confirmations, payment receipts, listing status updates, and security alerts.
• Provide customer support and respond to your requests.
• Analyze usage patterns to improve the user experience, fix bugs, and develop new features.
• Detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data to third parties. We do not use your listing photos or personal information for purposes unrelated to operating the marketplace without your consent.

We use cookies and similar technologies to operate the Site, remember your preferences, and understand how you use our Services. Cookies are small text files stored on your device by your browser.

Types of cookies we use

• Essential cookies: Required for the Site to function properly, including authentication (managed by Clerk), session management, and security. You cannot opt out of these.
• Analytics cookies: Help us understand how visitors interact with the Site, which pages are most popular, and where users encounter issues. We may use services like Google Analytics or similar tools.
• Preference cookies: Remember your settings, such as search filters, currency preferences, and display options.

Managing cookies

Most browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may affect the functionality of the Site, including your ability to stay logged in or save preferences. For more information on managing cookies, refer to your browser's help documentation.

Yachtlista may share your personal information in the following situations:

• Public listing data: Information you include in your yacht listings — such as photos, descriptions, pricing, location, and contact preferences — is visible to other users of the marketplace. Broker profiles, including company name and contact information, are also publicly displayed.
• Service providers: We share data with third-party vendors that help us operate the platform, including Stripe (payment processing), Clerk (authentication), Amazon Web Services (cloud hosting and image storage), and Neon (database hosting). These providers only access data necessary to perform their services and are bound by their own privacy policies.
• Analytics providers: We may share aggregated or de-identified usage data with analytics providers to help us understand how the Site is used. This data cannot be used to identify you personally.
• Business transfers: If Yachtlista is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• Legal obligations: We may disclose your personal data if required by law, subpoena, or court order, or in response to valid legal requests from government authorities. Where permitted, we will notify you of such requests.
• Protection of rights: We may share data to protect the rights, property, or safety of Yachtlista, our users, or the public, including to detect, prevent, or address fraud or security issues.
• With your consent: We may disclose your personal data for other purposes with your explicit consent.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

We retain your personal data for as long as your account is active or as needed to provide you the Services. Specifically:

• Account data: Retained for the duration of your account. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
• Listing data: Active listings remain on the platform until you remove them or mark the yacht as sold. After removal, listing data may be retained in backups for up to 90 days.
• Payment records: Transaction records are retained for up to 7 years to comply with tax and accounting obligations.
• Usage and log data: Retained for up to 24 months for analytics and security purposes, then deleted or aggregated.

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it, including:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified. We never see or store your full card number.
• Authentication is managed by Clerk, which provides secure session management and supports multi-factor authentication.
• Listing images are stored securely on Amazon S3 with access controls and presigned URLs.
• Database access is restricted and encrypted at rest using industry-standard encryption.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

Depending on your location, you may have certain rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update or correct inaccurate personal data through your account settings or by contacting us.
• Deletion: You can request that we delete your personal data. We will comply unless we are required to retain it for legal or legitimate business purposes (such as fulfilling payment obligations or fraud prevention).
• Opt out of marketing: You can unsubscribe from promotional emails at any time using the link in any marketing email. This will not affect transactional emails (such as payment receipts or account notifications).
• Data portability: Where applicable, you can request your data in a structured, machine-readable format.
• Withdraw consent: Where we process data based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at the email address listed in Section 13 below. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to know: You can request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collection, and the third parties with whom we share it.
• Right to delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale: We do not sell your personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link on the Site.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request under the CCPA/CPRA, contact us using the information in Section 13.

Yachtlista is based in the United States. If you access the Services from outside the United States, your personal data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Data protection laws in these countries may differ from those in your country of residence.

By using the Services and providing your personal data, you consent to the transfer of your data to the United States and other jurisdictions as described in this Policy. We take steps to ensure that your data receives adequate protection in accordance with this Policy regardless of where it is processed.

The Services are not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. We will take prompt action to delete such data from our records.

The Site may contain links to external websites or services not operated by Yachtlista, including links to Stripe for payment processing and Clerk for account management. We are not responsible for the content, privacy policies, or practices of third-party websites. We encourage you to review the privacy policy of any website you visit through links on our Site.

If you have any questions about this Privacy Policy, would like to exercise your data rights, or have concerns about how we handle your information, please contact us:

• Email: privacy@yachtlista.com
• Website: yachtlista.com

We aim to respond to all privacy-related inquiries within 30 days of receipt.