Privacy Policy
Last updated: May 7, 2026
1. Overview
OceanRecovery ("we", "us", or "our") operates the website at oceanrecovery.vercel.app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using OceanRecovery you agree to the practices described here.
2. Information We Collect
Account information
When you sign up we collect your email address and, optionally, your name.
Payment information
Payments are processed by Stripe. We never store your card number, CVV, or full payment details on our servers. Stripe provides us with a tokenised reference and basic billing metadata (last 4 digits, card brand, expiry).
Usage data
We collect log data including IP address, browser type, pages visited, and actions taken within the product to operate and improve the service.
Communications
If you join our waitlist or newsletter, or contact us by email, we store the email address and message content you provide.
3. How We Use Your Information
- To create and manage your account
- To process payments and issue invoices
- To send transactional emails (receipts, payment failure alerts, recovery links)
- To send product updates and newsletters you have opted into
- To diagnose bugs and improve the service
- To comply with legal obligations
We do not sell your personal data to third parties.
4. Third-Party Services
We use the following sub-processors to operate the service:
- Supabase — database and authentication (EU/US data centres)
- Stripe — payment processing (PCI DSS Level 1 certified)
- Resend — transactional and marketing email delivery
- Vercel — hosting and edge infrastructure
Each provider has its own privacy policy governing their handling of data.
5. Cookies
We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but some parts of the service may not function correctly without them.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. financial records).
7. Your Rights
Depending on your jurisdiction you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below.
8. Security
We use industry-standard measures including TLS encryption in transit, AES-256 encryption at rest, and role-based access controls to protect your data. No system is perfectly secure; if you discover a vulnerability please disclose it responsibly to us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance.
10. Contact
For privacy-related questions or requests, contact us at: noahoceankeenan@gmail.com