Privacy Policy

Last updated: March 9, 2026

1. Who we are

Hullproof is operated by Haukerede Holding AS, registered in Norway, with offices in Arendal. We are the data controller for the personal data described in this policy.

Contact: support@hullproof.com

2. What data we collect

Account data

Email address, display name, company name, role, and authentication credentials (via Firebase Authentication).

Uploaded content

Hull inspection video, images, and documents you upload for analysis. This may include vessel identifiers, location data, and timestamps embedded in the media.

Analysis data

AI-generated reports, risk scores, problem areas, and PDF exports stored in your account.

Usage data

Number of analyses performed, feature usage, and session metadata (IP address, browser type, access times) for service operation and security.

Payment data

Billing is handled by Stripe. We do not store credit card numbers. Stripe collects and processes payment information under their own privacy policy.

3. How we use your data

  • To provide and operate the Service (analysis, reports, fleet tools)
  • To process your subscription and payments
  • To communicate with you about your account and the Service
  • To maintain security and prevent abuse
  • To improve the Service based on aggregate, anonymized usage patterns

We do NOT use your video, images, or reports to train AI models.

Your uploaded content is processed solely to generate your analysis. It is not shared with third parties, used for advertising, or included in any training dataset.

4. Legal basis for processing (GDPR)

  • Contract performance — processing your data to deliver the Service you subscribed to
  • Legitimate interest — service improvement, security, and fraud prevention
  • Consent — for optional communications (you can opt out at any time)
  • Legal obligation — where we are required to retain data by law

5. Data storage and security

Your data is stored using Google Cloud Platform (Firebase/Firestore) and Google Cloud Storage. Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and logged.

Video uploads are stored in a dedicated Google Cloud Storage bucket. Analysis results and account data are stored in Firestore with per-user access controls (tenant isolation).

6. Data sharing

We share data only with:

  • Google Cloud / Vertex AI — to process your video and generate analysis (as a data processor)
  • Stripe — to handle payments (as a data processor)
  • Sentry — for error tracking and diagnostics (anonymized where possible)
  • Vercel — for hosting and serving the application

We do not sell your data. We do not share your data with advertisers. All service providers are bound by data processing agreements.

7. Data retention

  • Active accounts: data is retained for the duration of your subscription
  • Deleted accounts: data is deleted within 30 days of account deletion
  • Uploaded video: retained while your account is active; deleted upon request or account closure
  • Payment records: retained for 7 years as required by Norwegian accounting law

8. Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Portability — receive your data in a structured, machine-readable format
  • Restriction — limit how we process your data
  • Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at support@hullproof.com. We will respond within 30 days.

9. International transfers

Your data may be processed in the EU/EEA and the United States (Google Cloud, Stripe, Vercel). Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions as appropriate.

10. Cookies

Hullproof uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. Firebase Authentication uses local storage for session persistence.

11. Children

Hullproof is not intended for use by individuals under the age of 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. The "Last updated" date reflects the most recent revision.

13. Supervisory authority

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

14. Contact

Haukerede Holding AS
Arendal, Norway
Email: support@hullproof.com

See also: Terms of Service · Trust & Data