In short: Atlas Owner is an invite-only app for owners whose boats are managed by a charter company that uses Atlas. Sail Atlas is responsible for your Atlas Owner account and its security. The charter company is responsible for the boat, booking, financial, document and maintenance records it shows you; Sail Atlas processes those records only for the company. The app does not use analytics, does not ask for access to your camera, photos, microphone or location, and does not send notifications. Your data is stored on servers in Germany (Frankfurt); it is never sold or used for advertising. Questions and requests: info@sailatlas.app.
1. About this notice
This Privacy Notice explains how HeyAtlas.ai LLC (“Sail Atlas”, “we”, “us”), a company established in New Jersey, United States, collects, uses, shares and protects your personal data through the Atlas Owner mobile app.
It applies to all Atlas Owner users, wherever they live. Depending on where you are, you may have additional rights:
- European Economic Area (EEA) and United Kingdom: this notice provides the information required by Articles 13 and 14 of the EU General Data Protection Regulation (“GDPR”) and the UK GDPR.
- Türkiye: this notice is the privacy notice (aydınlatma metni) required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”).
- United States: the rights granted by the privacy laws of your state of residence.
Region-specific rights are set out in section 11.
The notice covers boat owners, and people acting for them, who have been invited to Atlas Owner by a charter company that manages their boats (the “charter company”). You cannot sign up to Atlas Owner on your own: the charter company creates your owner record and sends you an invitation. With the app you can see your boats, their booking calendar, your Owner Report (bookings, payments, expenses and account statement), the boat documents and guides the company shares with you, and the maintenance history. The only thing you can add is an Owner Week, a reservation of your own boat for your own use.
Separate notices apply to charter company staff, to guests of charter companies, to Crew App users and to visitors of our website.
2. Data controller and roles
Data controller: HeyAtlas.ai LLC, doing business as Sail Atlas Address: 2037 Lemoine Ave, Suite 330, Fort Lee, NJ 07024, United States Email: info@sailatlas.app
Two different roles apply in Atlas Owner:
- Where Sail Atlas is the controller: your Atlas Owner account (sign-in details, sessions and the list of companies you can switch between), the security of the app and our servers, preventing abuse, answering your support requests and meeting our own legal obligations.
- Where the charter company is the controller: your owner record (for example your name, contact details, address and balance), your boats and their records, bookings and the calendar, the Owner Report and other financial records, boat documents, guides, maintenance history and the Owner Weeks you book. These records belong to the charter company. For that processing the charter company is a separate controller and Sail Atlas acts only as its processor (KVKK: veri işleyen), on its behalf and on its instructions. You can send requests about those records directly to the company; if you write to us, we will help you reach it.
If more than one charter company has invited you, each company is a separate controller for its own records. You can switch between companies in the app, and each company sees only its own records.
3. Personal data we process
| Category | Data |
|---|---|
| Account and security | Name, email address, password (stored as an irreversible hash), the charter companies you belong to and the one currently selected, session and refresh tokens, sign-in and activity records, IP address |
| Owner record (held by the charter company) | First name, last name, email, phone number, address, country and region, owner type, account balance and currency, notes the company keeps about the relationship |
| Boats | Boat name, make, model, year, type, base, technical specifications, registry details, photos, equipment, check-in and check-out times |
| Calendar and Owner Weeks | Reserved periods and their status, available nights; the boat, dates, times and start and end bases of the Owner Weeks you book |
| Owner Report and financial records | For each booking: booking number, dates, status, number of weeks, price, discount, net customer price, agency commission, management fee, owner income with and without tax, tax amount and payment status; payments to and from you; expenses charged to your boat; account statement; boat summary; season comparison |
| Documents and guides | Boat documents the company makes visible to you (title, description, dates, category and files); boat guides and their attachments |
| Maintenance history | Maintenance jobs on your boat, the component, status, dates, the vendor and the name of the staff member who carried out the work |
| Technical | IP address and request records in our server logs |
Data about other people. The app does not show the names or contact details of guests on your boat. The maintenance history shows the names of charter company staff and vendors who carried out the work. Use this information only for matters concerning your boat.
Sensitive data. Atlas Owner does not ask for special category (sensitive) data. Financial information about your boat’s income and expenses is personal data about you; we treat it as confidential.
Device permissions and tracking. Atlas Owner does not ask for access to your camera, photo library, microphone, contacts or location, and it does not send push notifications. It does not contain analytics, session recording, crash-reporting or advertising tools.
Exported reports. When you export your Owner Report as PDF or Excel, the file is created temporarily on your device so you can share or save it, and the temporary file is deleted when sharing ends. Where you send the file is your choice.
4. How we collect data
We collect personal data electronically: from the charter company (your owner record, invitation and the boat, booking, financial, document and maintenance records it manages); from you (when you accept the invitation and set your password, sign in, switch companies and book Owner Weeks); and automatically from your device when the app communicates with our servers (IP address, request records).
5. How we use your data
We use your data for the purposes below. For users in the EEA, the United Kingdom and Türkiye, the table shows the legal basis for each purpose.
Where Sail Atlas is the controller:
| Purpose | GDPR legal basis | KVKK legal basis |
|---|---|---|
| Creating your account from the charter company’s invitation, signing you in, keeping your session and letting you switch between companies | Performance of a contract (Art. 6(1)(b)) | Establishment and performance of a contract (Art. 5(2)(c)) |
| Keeping the app and our servers secure, preventing abuse and fraud, keeping server logs, monitoring server errors | Legitimate interests (Art. 6(1)(f)) | Legitimate interests (Art. 5(2)(f)) |
| Answering your support requests | Art. 6(1)(f) | Art. 5(2)(f) |
| Meeting legal obligations, answering requests from competent authorities, keeping proof of notices | Legal obligation (Art. 6(1)(c)) | Legal obligation (Art. 5(2)(ç)) |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) | Art. 5(2)(e) |
Where Sail Atlas processes data for the charter company: we show you your boats, calendar, Owner Report, documents, guides and maintenance history, and we record your Owner Week bookings in the company’s workspace. The charter company decides these purposes and their legal basis, typically the performance of its management or charter agreement with you and its legal obligations, for example under accounting and tax law (GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(c) and (ç)).
We do not use your data for advertising or marketing, we do not use analytics in Atlas Owner, and we do not make decisions about you based solely on automated processing. You can object at any time to processing based on legitimate interests.
6. Who we share your data with
We do not sell or rent your personal data, and we do not use or share it for advertising. We share it only in the situations below, and only as far as the purpose requires.
Charter companies
- The charter company that invited you sees your account in its workspace and the Owner Weeks you book. Changes to and cancellations of an Owner Week are made by the company.
- If several companies invited you, each one sees only its own records. We do not share one company’s records about you with another company.
- The charter company may connect booking systems (such as BookingManager/MMK or NauSYS) to keep your boat’s bookings in sync. These services act for the company, not for Sail Atlas.
Our service providers
We work with the following providers to deliver the service, under contractual confidentiality and security obligations. They process data only on our behalf and on our instructions.
| Provider | Service | Location |
|---|---|---|
| Amazon Web Services (AWS) | Servers, database, file storage and email delivery (Amazon SES), including invitation emails | Germany (Frankfurt) |
| Sentry (Functional Software, Inc.) | Monitoring errors on our servers | EU (Germany) |
| Laravel Holdings Inc. (Forge, Envoyer) | Server management and software deployment | United States |
| Cloudflare, Inc. | Domain name (DNS) and network security | Global |
Other recipients
- Competent public authorities and courts: where we are legally required, and only as far as requested.
- Our legal, financial and audit advisers: under confidentiality obligations.
- Parties to a merger, acquisition or sale of assets: limited by the safeguards in this notice.
- Authorised Sail Atlas staff: may access your account and the records shown in the app for support, security and abuse prevention, and only as far as needed.
7. Where your data is processed and international transfers
Sail Atlas is a company established in the United States. Your data is stored on Amazon Web Services servers in Germany (Frankfurt), and some of our service providers are in the United States. Your data is therefore processed outside the country where you live.
- EEA and United Kingdom: transfers outside the EEA or the UK rely on adequacy decisions (including the EU-U.S. Data Privacy Framework and its UK Extension for certified U.S. providers) or on the European Commission’s Standard Contractual Clauses (SCCs).
- Türkiye: where the charter company is established in Türkiye, it transfers its records to Sail Atlas abroad as controller, and we put the safeguards required by Article 9 of the KVKK in place together with that company. Data we obtain directly from you in the app is processed in line with the KVKK and the safeguards in this notice.
8. How long we keep your data
We keep your data only as long as the purpose requires, then delete or anonymise it.
| Data | Retention |
|---|---|
| Account data | While at least one charter company gives you access; deleted or anonymised within 30 days after your access ends or you delete your account |
| Session tokens | Invalidated when you sign out; the session stored on your device is deleted at sign-out |
| Exported report files on your device | Temporary file deleted when sharing ends |
| Owner record, boat, booking, financial, document and maintenance records | Subject to the charter company’s retention policy and its legal obligations (for example accounting and tax records) |
| Server and application logs | 14 days |
| Error records (Sentry) | Up to 90 days |
| Security and activity records | 12 months |
| Records of notices | During your account and afterwards for the limitation period for potential legal claims |
9. How we protect your data
- Your password is stored as an irreversible hash (bcrypt) and never in plain text.
- All traffic between the app and our servers is encrypted with TLS.
- In the app, your session is kept in your device’s secure storage (iOS Keychain or Android Keystore). Financial data is not stored in the app’s cache on your device.
- You see only the records of the boats linked to you in the selected company; each charter company can access only its own records.
- Our systems are continuously monitored and regularly reviewed for security.
10. Children
Atlas Owner is intended for adults aged 18 or over, and we do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we will close it and delete the data.
11. Your rights
Wherever you live, we will handle your requests to access, correct or delete your data. For records held by the charter company (section 2), please contact the company first; if you write to us, we will pass your request to it and help it respond. Depending on where you are, you have the additional rights below.
EEA and United Kingdom
Under the GDPR you have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interests. You can lodge a complaint with the data protection supervisory authority in the country where you live or work.
Türkiye
Under Article 11 of the KVKK you have the right to learn whether your data is processed and request information about it, learn the purpose of processing and whether data is used accordingly, know the third parties in Türkiye or abroad to whom it is transferred, request correction of incomplete or inaccurate data, request deletion or destruction under Article 7 and that third parties to whom data was transferred be notified of this, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing. We conclude your request free of charge within 30 days. If you are not satisfied with our answer, you can complain to the Personal Data Protection Board (KVKK Kurulu).
United States
If the privacy laws of your state give you the right to access, correct, delete or obtain a copy of your personal information, you can exercise these rights as described in section 12. We do not sell your personal information, share it for targeted advertising or use your sensitive personal information for purposes other than those described in this notice. We will not discriminate against you for exercising your rights. If we deny your request, you can appeal the decision.
Sail Atlas does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
12. How to make a request
You can send requests about your rights:
- by email to info@sailatlas.app from the email address registered to your Atlas Owner account, or
- by post to our address above.
Please include your name, the email address on your account, the charter company concerned and the subject of your request. We may ask for additional information to verify your identity. Where the law allows, we also accept requests from an authorised agent acting on your behalf. For requests under the KVKK you can also apply in writing, by registered electronic mail (KEP), with a secure electronic or mobile signature, or from the email address registered with us.
We respond within 30 days. If we need more time because of the complexity of a request, we will tell you why, to the extent the law allows.
To delete your Atlas Owner account, use the account deletion page or write to us. The charter company can also end your access. Deleting your account does not delete the charter company’s own records about you and your boats; those stay subject to its retention policy.
13. Changes to this notice
We may update this notice when our services or the law change. The current version and its effective date are always shown at the top of this page. We will tell you about material changes in the app or by email.