Privacy notice
Last updated 2 October 2026.
Who we are. Adryn Ltd (company 17308893, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ) provides VesselOverview. We are registered with the Information Commissioner's Office, registration ZC189798. Contact: support@adryn.co.
Two roles, stated plainly
- Your vessel's operational data is anything your vessel enters: crew names and roles, cabins, logs, watch schedules, guest details. Your vessel (our customer) is in charge of that data, and we process it on its instructions. Questions about it should go to your vessel's administrator. Our Data Processing Agreement governs how we handle it.
- Account, sign-in and billing data is what this notice covers. For that data, we are the controller.
What we collect, why, and on what basis
| Data | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Name and email address of each user | To create your account and email you sign-in links | Contract, or our legitimate interest in providing the service your vessel pays for |
| Sign-in records: single-use links, sessions, when you signed in | To keep accounts secure and sessions working | Legitimate interest: security |
| During a free trial: when people on your vessel sign in or open VesselOverview, and how many changes are made (never what was changed) | So we can see whether the trial is being used, and offer help or follow up | Legitimate interest: supporting a trial your vessel started |
| Which vessels you belong to, and your role | To show you the right vessel with the right permissions | Contract / legitimate interest |
| Billing contact, company name and address, VAT number | To take payment and issue invoices | Contract; legal obligation (tax records) |
| Support emails and any diagnostic bundle you send us | To fix problems you report | Legitimate interest |
| Your display settings (theme, board, layout) | To remember how you like the board shown on that device | Legitimate interest |
We use no advertising or analytics trackers. VesselOverview sets only functional cookies. These are your sign-in session, the vessel you are viewing, and your display choices: theme, board, layout direction, compact view and fit. None is used for tracking.
Card details are entered directly with Stripe and never reach us.
Who we share it with
We use these service providers to run VesselOverview:
| Provider | What for | Where the data is processed |
|---|---|---|
| Supabase | Database | Frankfurt, Germany (EU) |
| Vercel | Application hosting | Frankfurt, Germany (EU) |
| Resend | Sign-in and account emails | Ireland (EU) |
| Stripe | Payments and invoicing | UK / EU |
These providers are headquartered in the United States, so their staff there may be able to access data. Where that is a restricted transfer, it is covered by the safeguards in each provider's own data processing terms. Those are the UK International Data Transfer Addendum, or the UK Extension to the EU-US Data Privacy Framework. We never sell personal data, and we share it with nobody else unless the law requires it.
How long we keep it
- Account data is kept while you have access to a vessel, then for 30 days.
- Sign-in links expire after 60 minutes. Sessions end after at most 180 days.
- Billing records are kept for 6 years, as UK tax law requires.
- Backups roll off after 7 days.
Your rights
You can ask to see, correct or delete your data, to object to our using it, or to restrict how we use it, and you can ask for a copy in a portable format. Email support@adryn.co and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any update here and email account holders if a change is significant.