crewopen Privacy Policy

This policy explains what crewopen ("we", "us") collects when you use crewopen.com, why, and how to reach us about it. crewopen is the community side of Yahull, based in Vancouver, British Columbia: people who boat and fish around Vancouver post, comment, meet up and go out on the water together.

This is an interim version written by our team. A version reviewed by a lawyer will replace it.

We collect only what you give us or what the site needs to work:

• Your account — your email address. You sign in with a one-time link sent to that email, or with Google (see below). We hold no passwords.
• Your profile — what you choose to add: your name, a photo you upload, a short bio, links, skills and boats.
• What you post — posts, comments, photos you upload, likes, and the gatherings you start or join.
• What you ask Ora — the words you type to Ora, our assistant on the site.
• Requests — if you ask us to take down or hand over a post that was brought in from another site, the name and contact you give us.
• Automatically — standard server logs (IP address, browser type, pages requested, time).

When you choose Continue with Google, Google tells us your name, your email address and your profile picture. We ask for nothing else, and we never see your Google password.

We use them to sign you in, to show your name on what you post on crewopen, and to send the emails you have agreed to (for example, about a gathering you joined). We don't use your Google profile picture on the site today; you choose your own photo on your profile.

We do not sell this information, and we do not use it for advertising.

To delete your account, see Deleting your account below.

We use your information to run your account, to show what you post to other people on crewopen, to run the gatherings you start or join, to answer you, and to keep the site safe.

What other people see. What you post, your name on it, and your profile page are public on crewopen. Your email address is never shown.

We do not sell personal information. We do not use it for advertising.

We share what is needed, with whom it is needed:

• The host of a gathering you join sees your name, so they know who is coming.
• Services that run the site — hosting (Vercel), database and sign-in (Supabase), email (Resend), and the AI model behind Ora (Anthropic), which reads what you type to Ora so she can answer. They work on our instructions only.
• Payments — if a gathering is paid, you pay on Stripe's secure page; we never see your card number.
• Authorities, where the law requires it.

We set a cookie when you sign in, to keep you signed in. If you come to the site through a link that says where it was shared (for example, a post on Instagram), we keep only that label, such as "ig", with the campaign and the post it came from and the day you came, in a cookie for 7 days, so we know which links bring people to us: if within those 7 days you sign in or start a gathering, we note the label with it, and we count those visits without anything about you. These cookies hold nothing else about you.

Email support@yahull.com from the address you sign in with and ask us to delete your account. We delete your account and your profile within 30 days. What you posted is removed, or kept without your name where others replied to it. Records the law requires us to keep (for example, of a paid booking) stay for as long as the law requires.

You can also ask us what we hold about you, or to correct it, at the same address.

Questions about this policy or your information: support@yahull.com.