Core commitment
We operate as data stewards, not brokers. Personal information stays within Ocean Pulse systems unless you explicitly publish it or we must comply with the law.
Privacy Policy
Your reef discoveries, handled with care
Ocean Pulse collects the minimum data needed to operate the mission, empower divers, and protect reef ecosystems. This policy explains what we collect, how we use it, and the controls you have today.
Summary
Your controls
You can withdraw consent, delete submissions, or request export at any time from your profile settings or by emailing crew@oceanpulse.io.
Information we collect
- Account basics such as name, email, and authentication identifiers supplied through Supabase social login.
- Contribution metadata including dive site names, submission timestamps, image storage paths, and reputation scores.
- Optional profile details you share (bio, social handles) plus product feedback submitted through forms or surveys.
- Operational diagnostics generated by Ocean Pulse (request logs, error traces, moderation decisions).
How we use your data
- Run the Ocean Pulse platform: authenticate divers, store underwater imagery, calculate reputation, and present the public gallery.
- Moderate submissions for safety and quality, including manual review by trusted community members and mission staff.
- Generate anonymized analytics to understand engagement, mission growth, and community health.
- Communicate updates about the service, policy changes, or required actions (e.g., data deletion confirmations).
Sharing & storage
- Ocean Pulse operates on Supabase (database, storage, edge functions) and Vercel (frontend hosting). These processors host data in the United States.
- Public submissions appear in the gallery and can be shared via public URLs; removal or moderation will hide them and delete associated files per our retention schedule.
- We do not sell contributor data. We may share aggregated, de-identified trends with conservation partners and sponsors.
- Backups and audit exports are encrypted at rest and retained according to the schedules documented below.
Retention & deletion
- Submitted imagery and metadata remain active until you delete the submission or close your account. Deleted items leave anonymized counts for mission reporting.
- Audit logs of database access are retained for 12 months to support compliance reviews (see Epic 5.3).
- Privacy requests filed from your profile initiate account-level deletion—handled within 30 days with email confirmation.
Your choices
- Manage submissions, profile details, and consent status from your Ocean Pulse profile.
- Submit a privacy request to remove data or export your contributions; we respond within 30 days.
- Opt out of mission emails via the unsubscribe link or request additional controls through support.
Contact
- Questions or concerns? Email us at crew@oceanpulse.io.
Updates
We document every substantive change so divers know how our practices evolve. Major revisions will be announced in-product and via email.
2025-10-02
Initial privacy policy drafted and self-certified by the Ocean Pulse product team.