Privacy Policy

SYG Yachts LLC ("we", "us", "our") operates HELM Fleet Command at helm-command.com and app.helm-command.com. We are the data controller for personal data collected through the Platform. Contact: hello@helm-command.com | Fort Lauderdale, FL, USA For EU/EEA users, our representative for GDPR purposes is reachable at hello@helm-command.com.

We collect the following categories of personal data: 2.1 Account data: Name, email address, password (hashed), company name, vessel name(s), billing address, payment method details (via Stripe — we do not store card numbers). 2.2 Usage data: Module interactions, feature usage, session duration, log entries created, AI feature queries, browser type, device type, IP address, and time-zone. 2.3 Vessel and operational data: Any data you enter into the Platform including crew profiles, maintenance records, compliance logbook entries, financial data, charter records, voyage data, and GPS positions. 2.4 Communications: Emails you send us, support tickets, feedback, and demo booking information. 2.5 Cookies and tracking: See our Cookie Policy at /cookies.

We process your personal data for the following purposes: (a) To provide and operate the Platform — contractual necessity (b) To process payments and manage your subscription — contractual necessity (c) To send service communications including receipts, account alerts, and product updates — contractual necessity and legitimate interests (d) To improve the Platform through aggregate usage analysis — legitimate interests, no individual profiling (e) To respond to enquiries and provide support — contractual necessity (f) To comply with legal obligations — legal compliance (g) To detect and prevent fraud and unauthorised access — legitimate interests and legal compliance We do not use your personal data for advertising profiling, behavioural advertising, or sale to third parties.

HELM uses Claude Sonnet 4.5 by Anthropic to power AI features. When you use AI features, relevant vessel and operational context from your account is sent to Anthropic's API to generate responses. Anthropic processes this data as a sub-processor under data protection safeguards. Anthropic does not use your data to train AI models. AI queries may be logged for platform improvement and support purposes. You may opt out of AI query logging by contacting hello@helm-command.com.

We share your data only as necessary to operate the Platform: Stripe — payment processing (stripe.com/privacy) Anthropic — AI feature processing (anthropic.com/privacy) Supabase — database and backend infrastructure (supabase.com/privacy) Emergent.sh — platform hosting and development infrastructure Resend — transactional email delivery All sub-processors are bound by data processing agreements. We do not share your data with any third party for their own marketing purposes. We may disclose your data if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of SYG Yachts LLC, our users, or the public.

Our primary servers are located in the United States. If you are located in the European Economic Area (EEA) or United Kingdom, your personal data will be transferred to and processed in the United States. Such transfers are conducted under appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.

We retain your personal data for as long as your account is active. After account termination: account data is retained for 30 days before deletion. Operational vessel data (logbook entries, compliance records) may be retained for up to 7 years where required by maritime regulations. Financial transaction records are retained for 7 years as required by US tax law. AI query logs are retained for 90 days.

If you are located in the EU/EEA or UK, you have the following rights under GDPR: Right of access — request a copy of your personal data Right of rectification — correct inaccurate data Right of erasure ("right to be forgotten") — delete your data, subject to legal retention obligations Right to restrict processing — limit how we use your data Right to data portability — receive your data in a portable format Right to object — object to processing based on legitimate interests Right to withdraw consent — where processing is consent-based Right to lodge a complaint — with your national data protection authority For California residents: You have rights under the CCPA including the right to know what data we collect, the right to delete your data, and the right to opt out of the sale of your data. We do not sell personal data. To exercise any of these rights, email hello@helm-command.com. We will respond within 30 days.

We implement AES-256 encryption at rest, TLS 1.3 encryption in transit, row-level security, role-based access control, and continuous Supabase replication with point-in-time recovery. Despite these measures, no system is perfectly secure. You use the Platform at your own risk with respect to data security.

The Platform is not directed at or intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a person under 18, we will delete it promptly. Contact hello@helm-command.com if you believe we have collected data from a minor.

We may update this Privacy Policy at any time. Material changes will be notified by email at least 14 days before they take effect. The current version is always available at helm-command.com/privacy.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: SYG Yachts LLC d/b/a HELM Fleet Command Email: hello@helm-command.com Subject line: Privacy Request For data protection matters, you may also contact the supervisory authority in your jurisdiction. Last updated: 1 May 2026