Loading...
Loading...
Last Updated: April 2026
Effective Date: April 2026 | Version 1.0
Rhumby, Inc. ("Rhumby", "we", "us") operates the regatta management platform at rhumby.com. This policy describes how we collect, use, disclose, and protect personal information when you use our services. Yacht clubs that use Rhumby to manage their events act as separate data controllers for their member and registration data; please review your club's own privacy notices as well.
Contact: privacy@rhumby.com | Rhumby, Inc., 123 Harbor Way, Sarasota, FL 34236
We collect the following categories of personal information, for the purposes and retention periods listed:
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Identifiers | Name, email, IP address | Account management, fraud prevention | Account lifetime + 30-day grace |
| Contact information | Phone, emergency contact, parent/guardian | Safety, event operations | Account lifetime + 30-day grace |
| Sensitive: Medical information | Allergies, conditions disclosed voluntarily | Race committee safety use only; explicit consent required | Account lifetime + 30-day grace |
| Sensitive: Precise geolocation | GPS tracks during races | Race analysis, replay; consent required | 2 years from event date |
| Commercial information | Registration fees, payment intent IDs | Payment processing; financial records | 7 years (tax/legal) |
| Race results & standings | Finish times, handicap corrections | Public historical record | Indefinite (legitimate interest) |
| Usage & technical data | Log files, request IDs | Security, debugging | 2 years |
| Sensitive: Youth / COPPA data | DOB, parent email, consent records for sailors under 13 | COPPA verifiable parental consent; safety | 7 years (consent records) |
We do not use personal information for behavioral advertising or sell it to third parties.
Under California law and other state privacy statutes, certain information is classified as "sensitive." We collect the following sensitive categories only with your explicit consent and for limited purposes:
You may withdraw consent for sensitive data at any time by submitting a data request or contacting privacy@rhumby.com. Withdrawal does not affect the lawfulness of prior processing.
We disclose personal information only as described below. We do not sell personal information and do not share it for cross-context behavioral advertising.
Rhumby does not sell personal information and does not share personal information for cross-context behavioral advertising. You do not need to opt out because we do not engage in these activities.
We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC header, we automatically disable Vercel Analytics for your session and record your opt-out preference.
We do not sell or share the personal information of sailors we know to be between 13 and 16 years of age without their affirmative opt-in. At signup, sailors in this age group receive age-appropriate disclosures and must explicitly acknowledge them before proceeding.
For sailors under 13, see our Children's Privacy Notice.
Depending on your state of residence, you may have some or all of the following rights:
To exercise these rights, submit a Data Subject Access Request or email privacy@rhumby.com. We verify identity before processing requests and respond within 45 days (CCPA statutory deadline). Requests from authorized agents are accepted with written permission.
To report a security vulnerability, see our Security Policy.
We use essential cookies for authentication (Clerk session) and payments (Stripe). We use analytics cookies (Vercel Analytics) only with your consent or when no GPC signal is present.
For the full cookie inventory, see our Cookie Policy.
| Vendor | Purpose | Data Categories |
|---|---|---|
| Clerk | Authentication, session management | Email, auth metadata |
| Stripe | Payment processing | Payment intent IDs (no card numbers stored) |
| Vercel | Hosting, CDN, analytics | Usage data, IP addresses |
| Resend | Transactional email | Email address, name |
| Anthropic | AI features (MCP integration) | Event/results data only; no PII |
We comply with the Children's Online Privacy Protection Act (COPPA). Sailors under 13 require verifiable parental consent before we collect any personal information. For full details, see our Children's Privacy Notice.
We will post changes to this page with an updated "Last Updated" date. Material changes affecting your rights will be notified by email or in-app alert at least 30 days before taking effect.
Privacy inquiries: privacy@rhumby.com
Data requests: rhumby.com/privacy/request
Mailing address: Rhumby, Inc., 123 Harbor Way, Sarasota, FL 34236