Privacy policy | Marine Logic by growth.box

This Privacy policy explains how growth.box LLC, doing business as Marine Logic (“Marine Logic”, “we”, “us” or “our”), 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, collects, uses, shares and protects personal information. Marine Logic is a platform for marine dealerships. You can reach us about privacy at any time at support@marinelogic.app.

1. Who this policy covers

This policy covers three groups of people:

Visitors of our own websites, including https://marinelogic.app, and people who contact us, sign up or order the Service.
Dealers: the businesses that use Marine Logic, and the people who use it for them (their “Users”, such as owners, managers and sales staff).
Dealer customers: people who visit a dealer website or a marketplace built on Marine Logic, send an inquiry, save a search, or exchange emails or texts with a dealer.

For dealer customers, the dealer decides how their information is used, and we process it on the dealer’s behalf as its service provider (section 9). If you are a dealer customer, the dealer’s own privacy policy applies, and you should contact the dealer first.

This policy does not cover the websites, apps or services of others, such as Boats Group, Google or Meta, even when the Service links to them or sends them data.

2. Information we collect

Information you give us

Sign-ups, messages and orders: your name, work email, phone, dealership name and city, role, number of locations, the plan, billing period and add-ons you choose, and your message.
Account information: the name, email, phone, role, teams and locations of each User, a securely hashed password, and two-step sign-in settings.
Billing information: billing contact, company name, billing address, tax ID, plan, invoices and payment history. Card and bank payments are handled by Stripe. We receive only a reference to the payment method, its type, its last digits and its expiry, never the full number.
Support and communications: support tickets, custom build requests, emails and other messages you send us, and any feedback.
Business content: inventory, photos, documents, prices, locations, opening hours, team profiles, blog posts and settings that your Users enter. This is mostly business information, but it can include personal information, such as a salesperson’s name, photo and contact details on your website.

Information collected automatically

Server logs: IP address, browser, device, pages requested, referring page and time, kept briefly to deliver pages and protect the Service.
Website analytics: our websites and dealer websites count visits with our own first-party analytics, without cookies. The address and browser of a visit are turned into a pseudonymous code that changes every day; the key behind it is deleted after two days, and the address itself is not stored. We record the pages viewed, the approximate country, the referring site, campaign parameters (such as utm tags or a Google click ID) and actions such as clicking a phone number or a link.
Campaign details: our website remembers the campaign or page that brought you in your browser tab’s session storage, and sends it with a form if you submit one.
Dashboard activity: sign-ins, the device and browser used, and important actions in the dashboard (an audit log), to keep Accounts secure and to show dealers who changed what.
Spam protection: our forms use a small proof-of-work calculation solved in your browser. It uses no third-party service and sets no cookie.

See our Cookie policy for the few cookies and browser storage items the Service uses.

Information from third parties

Sign in with Google: if a User signs in with Google, Google gives us the account’s ID, name, email address and, for Google Workspace accounts, its domain.
Connected Pages: when a dealer connects Facebook and Instagram to post its listings, Meta gives us access tokens and the names and IDs of the Pages and Instagram accounts connected.
Payments: Stripe tells us whether a payment succeeded, and the reason if it was declined.
Text and email replies: Textbelt and our mail server deliver replies sent to a dealer’s texts and mailboxes.

3. How we use information

We use personal information to:

provide, set up, maintain and support the Service, including dealer websites, feeds, messaging and backups;
create and manage Accounts, verify Users and keep sign-in secure;
answer demo requests and questions, prepare proposals and process orders;
bill, collect payments, send invoices and receipts and keep accounting and tax records;
send service messages, such as security alerts, invoices, lead notifications, onboarding steps and changes to our terms;
send product news by email, if you agreed, with an unsubscribe link in every message;
understand which pages and campaigns bring dealers to our website, and improve the Service (using our own analytics and aggregated, de-identified data);
detect, prevent and respond to fraud, spam, abuse, security incidents and violations of our terms;
comply with the law, respond to lawful requests, and establish or defend legal claims.

We do not use personal information for automated decisions that have legal or similarly significant effects on you.

4. AI features

Some features, such as weekly post ideas and the AI Agent on every plan, use AI models from third-party providers (currently OpenAI). To suggest, write and refresh blog posts and write listing pages, we send the provider business information from the dealer’s Account: inventory, dealership and location details, the team details published on the dealer’s website, and existing posts. We do not send leads, client details, messages or texts to AI providers. We set up requests so the provider does not store them where it offers that option, and we use providers whose business terms do not allow them to use this data to train their models. We will update this policy before an AI feature processes other kinds of personal information.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. Our own website shows no third-party advertising and loads no third-party tracking tags.

We share personal information only as follows:

Service providers who process it for us under contracts that protect it, and only to provide their service:
- our server hosting provider: servers, databases and file storage;
- Cloudflare: DNS for our domains;
- Backblaze: encrypted backups of each dealer Account;
- Stripe: card and bank payments;
- Textbelt: sending and receiving text messages;
- AI model providers such as OpenAI: AI features (section 4);
- Google and Meta: Sign in with Google, posting to the Facebook and Instagram Pages a dealer connects, and the Google and Meta tags a dealer adds to its website (section 9).
We run our own mail server for email hosting and for the emails the Service sends.
Channels a dealer switches on: when a dealer turns on a feed or posting, we send its inventory and the content needed to Boats Group, Google Merchant Center, Facebook, Instagram or other channels. Listings normally contain no personal information beyond the dealer’s business contact details.
Marketplaces we operate: dealer listings may appear on Marine Logic marketplaces such as listed.boats. An inquiry sent there goes to the dealer that listed the unit.
Dealers: information a dealer customer sends through a dealer website or marketplace goes to that dealer.
Our team: authorized Marine Logic staff can access dealer Accounts to provide support and keep the Service running. Each access is recorded in an audit log.
Business transfers: if we are involved in a merger, acquisition, financing or sale of all or part of our business, information may be transferred as part of that transaction, under this policy.
Legal reasons: where we believe in good faith that the law, a court order or a government request requires it, or to protect the rights, safety and property of our users, the public or Marine Logic, including to enforce our terms.
With your consent or at your direction.

6. Google user data

Marine Logic’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Google user data only to sign the User in to Marine Logic.
We do not use it for advertising, we do not sell it, and we do not use it to develop or train AI or machine learning models.
We do not let people read it, except with the dealer’s permission, for security purposes, to comply with the law, or where it is aggregated and anonymized for internal operations.
We do not transfer it to others except as needed to provide or improve these features, for security, to comply with the law, or as part of a business transfer.

Users can remove Marine Logic’s access at any time at myaccount.google.com/permissions and keep signing in with their password.

7. Facebook, Instagram and Meta data

When a dealer connects Facebook and Instagram, we use the access only to post the listings the dealer chooses to its Pages. Access tokens are stored encrypted. To remove this data, disconnect from your dashboard or remove Marine Logic from your Facebook settings under Apps and websites; we then delete the tokens and stop collecting data. You can also ask us to delete any data we received from Meta by writing to support@marinelogic.app, and we will confirm when it is done.

8. Text messages

Dealers use the Service to text their customers one message at a time; the Service sends no automated or bulk marketing texts. Replying STOP (or UNSUBSCRIBE, CANCEL, END or QUIT) to a dealer’s text stops further texts from that dealer, and START turns them back on. Message and data rates may apply. Mobile phone numbers and text messaging consent are never shared with third parties or affiliates for their own marketing purposes. We share them only with the providers needed to deliver the messages.

9. Information we process for dealers

When someone uses a dealer website or marketplace built on Marine Logic, for example to send an inquiry, make an offer, ask about financing or a trade-in, request service, save a search, or exchange emails and texts with the dealer, that dealer decides how the information is used. We process it only on the dealer’s instructions and under our data processing terms, as the dealer’s service provider.

On dealer websites:

visits are counted with our cookieless first-party analytics (section 2);
Google Analytics, Google Ads and the Meta Pixel load only if the dealer adds their codes and the visitor agrees in the site’s consent banner, and the visitor can change that choice at any time from the site’s footer. When a visitor who agreed sends an inquiry, the site tells those tools that a lead happened, without the visitor’s name, email or phone. Google and Meta handle that data under their own policies;
price-drop and new-match alerts are sent only after the visitor confirms by email, and every alert has an unsubscribe link.

To access, correct or delete information you gave a dealer, contact the dealer. If you contact us, we pass your request to the dealer and help it respond.

10. How long we keep information

Information	How long
Sign-ups that did not become customers and messages	Up to 2 years after our last conversation, unless your dealership becomes a customer
Dealer Account data and data we process for dealers	While the subscription is active, then deleted from the live Service within 90 days after the Account ends
Backups of dealer Accounts	Weekly copies, each kept up to 6 months, then deleted
Pages of sold units on dealer websites	Kept online for 90 days after the sale, unless the dealer removes them sooner
Invoices, payments and tax records	As long as tax and accounting law requires, normally 7 years
Audit logs	While the Account exists, and as needed for security and legal claims
Server logs	Normally no longer than 30 days
Daily analytics keys	Deleted after 2 days
Access tokens for connected accounts	Until the dealer disconnects, or the Account ends

We may keep information longer where the law requires it, or to resolve disputes, prevent fraud and enforce our agreements.

11. Security

We protect information with encryption in transit (HTTPS), encryption of stored secrets and access tokens, hashed passwords, two-step sign-in for our staff, role-based access in every dealership, separation of each dealership’s data at the database level, audit logs, regular encrypted backups and timely security updates. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security breach that affects your personal information, we will notify you as the law requires.

12. Your privacy rights

Depending on where you live, you may have the right to:

know what personal information we hold about you and how we use it, and get a copy in a portable format;
correct inaccurate information;
delete your information;
opt out of the sale or sharing of personal information, targeted advertising, and profiling with significant effects (we do none of these);
limit the use of sensitive personal information (we do not collect it for those purposes);
withdraw consent you gave us, at any time;
appeal if we decline your request.

These rights apply, for example, to residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with similar laws. We extend them to all our US users.

How to make a request. Email support@marinelogic.app with the subject “Privacy request”. We will confirm we received it within 10 business days and respond within 45 days, or the time your law sets. We may need to verify your identity, usually by confirming details we already hold or by email. An authorized agent may make a request for you with your signed permission, and we may ask you to confirm it directly. If we decline your request, you may appeal by replying to our answer; if you are still not satisfied, you may contact your state attorney general. We will not discriminate against you for exercising your rights.

Global Privacy Control. Because we do not sell or share personal information, there is nothing to opt out of, but we honor Global Privacy Control and similar browser signals as an opt-out request where the law requires it. Our website does not respond differently to “Do Not Track” signals, as there is no common standard for them.

California notice. In the last 12 months we collected these categories of personal information under the California Consumer Privacy Act: identifiers (such as name, email, phone, IP address and account IDs); customer records (such as billing address and payment method details); commercial information (such as plans bought and invoices); internet or network activity (such as pages viewed and dashboard activity); approximate location derived from IP address; professional information (such as job title and employer); and inferences about interest in our products. The sources, purposes and recipients are described in sections 2, 3 and 5. We disclosed these categories for business purposes only to the service providers and recipients listed in section 5. We have not sold or shared personal information, and we do not knowingly sell or share the personal information of anyone under 16. California residents may also ask us once a year about disclosures to third parties for their direct marketing; we make none.

Canada. We handle personal information in line with PIPEDA and applicable provincial laws. You can ask for access to and correction of your information, and withdraw consent, by writing to support@marinelogic.app.

European Economic Area, United Kingdom and Switzerland. If these laws apply to you, we process your information on these legal bases: to perform our contract with you or your dealership; our legitimate interests in running, securing and promoting the Service and answering requests, balanced against your rights; to comply with legal obligations; and your consent, for product news. You may access, correct, delete, restrict or object to the processing of your information, receive a copy, and complain to your local data protection authority.

13. International transfers

Marine Logic is based in the United States. Information may be stored and processed in the United States and in other countries where we or our service providers operate. Where the law requires it, we use appropriate safeguards for those transfers, such as standard contractual clauses.

14. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us at support@marinelogic.app and we will delete it.

15. Changes to this policy

We update this policy when our practices or the law change. The date at the top shows the current version. If we make a material change, we will tell dealers by email or in the dashboard before it takes effect.

16. Contact us

growth.box LLC 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801 Email: support@marinelogic.app · Phone: +1 307 461-9948