Optimarine is a fleet operations platform run by OptiMarine. It has two parts: a web app used ashore by ship owners and managers, and a tablet app used on board by the crew to file daily reports. This policy also covers our public website, optimarine.io. It explains what information the platform keeps, why, who can see it, and what you can ask us to do with it.
Who is responsible
OptiMarine runs the platform and is responsible for the information in it about the people who use it. The shipping companies that use Optimarine decide what they record about their vessels and crew; for that information we act on their behalf and follow their instructions.
Questions and requests about your information: info@optimarine.io.
What we keep
About people who sign in to the web app:
- your name and work email address
- your password, stored only as a one-way hash that cannot be turned back into the password
- which vessels you can see and what you are allowed to do
- for each signed-in session, the browser used and the IP address it came from, so that a session can be recognised and ended
About tablets on board:
- a record of each enrolled tablet: its label, platform, app version, the vessel it belongs to and when it last connected
- the address Firebase Cloud Messaging gives each tablet for notifications, and the language the tablet is set to
- the PIN for each role (Bridge, Engine Room and Supplies), stored only as a one-way hash
- which role and which tablet filed each report. Reports are recorded against a role, such as the Master or the Chief Engineer, not against a named person
About crew, if your company records them: names, ranks, nationality, date of birth and vessel assignments.
Files you upload, such as certificates, documents and vessel photos, together with their file names. Some of these may contain personal information.
Vessel and operational records: reports, fuel and stock records, requisitions and vessel positions. These describe vessels, not people.
What we do not collect
- The tablet app asks for internet access, permission to show notifications, and its location. It reads its location only when an officer taps “Use tablet GPS” while filing a report, to fill in the ship’s position, and never in the background. It does not use the camera, contacts or microphone.
- Neither app contains advertising, analytics or crash-reporting tools.
- The web app sets no cookies. It keeps your sign-in in your browser’s local storage until you sign out or the session expires.
- We do not sell information or use it for marketing.
Why we use it
- to sign you in and keep your account secure
- to show each company only its own vessels, reports and records
- to calculate the figures built from the reports your crew file
- to keep the tablets on board in step with the office, including after a vessel has been out of contact
- to answer your support requests
Where it is kept and who can see it
The platform currently runs on servers operated by Hetzner Online GmbH in Helsinki, Finland. If the hosting provider changes, this policy will be updated.
Each company’s records are kept separate from every other company’s. Within a company, people see only the vessels and actions they have been given access to.
To show vessel positions we send vessel identifiers to Datalastic, a vessel-tracking provider. No personal information is sent to them.
To tell a tablet that the office has moved one of its orders, we send the tablet’s notification address and the notice itself, such as an order reference and its new stage, to Google’s Firebase Cloud Messaging, which delivers it through Google or Apple. No personal information is in the notice.
We do not share personal information with anyone else unless the law requires it.
On the tablet
- The tablet keeps the vessel’s records on the device so the crew can work without a connection. Filings wait on the tablet until it can send them.
- The tablet’s sign-in key is kept in the device’s secure storage (the Android Keystore or the iOS Keychain).
- If a tablet is revoked from the office, it deletes everything it holds the next time it connects: its key, PINs, queued filings and stored records.
On our website
The public website, optimarine.io, is separate from the platform and has no sign-in.
If you ask for a demo, we keep what you type into the form: your name, work email and company, and your phone number and message if you add them. We also keep the language the page was in, which button opened the form, and when you agreed to be contacted. A copy is emailed to our team’s mailbox. We use it only to reply to you and arrange the demo, and we delete it when you ask.
How long we keep it
We keep information for as long as your company uses Optimarine. Signed-in sessions expire. When a company stops using the platform, we delete or return its records as agreed with that company.
How it is protected
- All connections to the platform are encrypted (HTTPS).
- Passwords and PINs are stored as one-way hashes.
- Each company’s records are separated in the database itself, not only in the apps.
- Platform staff sign in with two-factor authentication.
Your rights
You can ask to see the personal information we hold about you, to have it corrected, or to have it deleted, by writing to info@optimarine.io. If the information was recorded by your employer, such as a crew record, we will pass your request to them, because they decide what is kept.
Your company’s administrators can also correct users, crew records and tablets directly in the web app.
Children
Optimarine is a professional tool for shipping companies and their crews, and is not directed at children.
Changes to this policy
If this policy changes, the date at the top will change with it, and customers will be told about significant changes before they take effect.
Contact
OptiMarine — info@optimarine.io