Privacy Policy

AhoyOS is operated by the person who publishes ahoyos.xyz and ahoy.rocks, based in Chicago, Illinois. This policy does not name a corporation because a formal legal entity is not stated here.

When you create an account we store your email address, a hash of your password, an optional display name, and the time you accepted the Terms and this policy.

When you use the product we store the vessel records, documents, and chat messages you add. Those records are tied to your account.

The contact form stores your name, email, topic, message, an optional page source, and a hash of the network address. We do not store the raw IP address.

Signed-in sessions use an httpOnly cookie. The marketing pages do not set advertising cookies and do not use a third-party analytics tracker.

If you start a paid plan, Stripe processes the card. We store Stripe's customer and subscription identifiers, not your card number.

The homepage demo is not connected to any real vessel or account. A short question may be sent to our model provider so it can draft a general answer, within a daily cap. Scripted answers are used when that cap is reached or the model is unavailable. Do not type secrets, passport details, or anything you would not put on a public form.

Cloud chat sends the text needed to answer you to the configured model provider (for example Anthropic or OpenAI). We do not offer a promise that your documents are never seen by that provider.

For an enterprise vessel, operational records may be mirrored into that customer's own Salesforce org. We do not copy one customer's records into another customer's org.

We use this information to run the workspace, reply to contact-form notes, bill a plan you choose, and keep the service reliable. We do not sell personal information.

Production traffic uses HTTPS. Passwords are hashed. That is not a certification, a compliance program, or an "enterprise-grade" audit. A formal security review has not been completed.

Account data stays until you delete the account or ask us to delete it. Password-reset links expire after one hour. Contact us through the contact form to ask about access or deletion. A formal privacy-request process will be added after lawyer review.

AhoyOS is not directed at children under 13, and we do not knowingly collect their information.