Skip to content

Legal

Privacy Policy

This Policy explains how Tugboat Supply collects, uses, discloses, and protects information in connection with our maritime procurement platform and this marketing website.

Effective:
July 1, 2026
Last updated:
July 1, 2026
Geographic scope. Tugboat Supply operates exclusively within the United States of America. We do not knowingly offer services to, or collect personal information from, residents or businesses located in Canada, Mexico, or any other jurisdiction outside the United States. If you are accessing this site from outside the United States, you do so at your own risk and outside the scope of our intended service.

1.Who We Are

Tugboat Supply (“Company,” “we,” “our,” or “us”) operates the marketing website at tugboatsupply.com and the multi-tenant procurement platform accessed through supplier-branded subdomains (e.g., supplier.tugboatsupply.com). The internal repository name for this project is maritime-supply.

We provide B2B software-as-a-service to marine distributors (“Suppliers”) who serve tugboat and workboat fleets (“Fleets”). Fleet companies, captains, and crew access the platform through a Supplier’s tenant and are therefore customers of that Supplier.

Contact: privacy@tugboatsupply.com

2.Information We Collect

2.1 Marketing Website (tugboatsupply.com)

When you interact with this marketing website we may collect:

  • Lead intake data— name, company, work email, phone, home port, vessel count, and any notes you voluntarily submit through our “Request a Demo,” “Connect me with a supplier,” or “Request coverage” forms.
  • Invite-redemption data— invite codes entered on the Sign In page.
  • Usage and analytics data — IP address (truncated), browser type, referring URL, pages visited, and session duration collected through server logs and analytics tools.
  • Cookie data — as described in our Cookie Policy.

2.2 Platform (Supplier Tenants)

Within a Supplier’s tenant the Supplier is the primary data controller for its Fleet customers’ data. We process that data on behalf of the Supplier as a data processor under a Data Processing Addendum. Data processed within the platform includes:

  • Supplier account data — company name, billing contact, authorized users, catalog and pricing data, subdomain configuration.
  • Fleet & vessel data — fleet company name, vessel names and identifiers, order history, shift records.
  • Captain data — name, work email, role within the fleet hierarchy.
  • Crew data (pseudonymous)— crew members authenticate using an 8-digit PIN assigned by the Supplier. We do not collect crew members’ names, email addresses, or other personal identifiers. PIN records are treated as pseudonymous identifiers and associated only with shift-level order records.
  • Order and requisition data — line items, quantities, submitted prices, approval status, timestamps, and vessel/shift associations.
  • Technical logs — authentication events, API requests, error logs, and idempotency keys used for duplicate-order protection.

2.3 Information We Do Not Collect

  • Payment card numbers or bank account details (billing is handled by a PCI-compliant third-party processor).
  • Social Security numbers or government-issued identification numbers.
  • Precise geolocation data from end-user devices.
  • Biometric data of any kind.
  • Personal information from individuals known to be under the age of 18.

3.How We Use Information

  • To provide and operate the platform — account management, order processing, fulfillment queue, tenant administration, and subdomain provisioning.
  • To respond to lead inquiries — demo scheduling, Supplier onboarding, Fleet-to-Supplier matching, and coverage-request routing to our sales team.
  • To maintain security and integrity — fraud detection, duplicate-order protection via idempotent submit keys, abuse prevention, and audit logging.
  • To improve the platform — aggregate, de-identified analytics on feature usage and conversion flows.
  • To communicate with you — transactional emails (order confirmations, invite notifications, account alerts) and, where you have opted in, product updates and marketing messages.
  • To comply with legal obligations — responding to lawful requests from U.S. governmental authorities, enforcing our Terms of Use, and resolving disputes.
  • To build the supplier-recruitment pipeline — aggregated, non-attributable counts of coverage requests per region (e.g., “8 fleets requesting coverage in Puget Sound”) are displayed to prospective Suppliers. Individual requestor identities are never published.

5.Disclosure of Information

5.1 Within the Platform

Supplier tenant data is fully isolated. A Supplier can only access its own Fleets’ data; no Supplier can view another Supplier’s catalog, pricing, orders, or Fleet relationships. This isolation is enforced at the data model level, not merely by application logic.

5.2 Service Providers

We share information with trusted U.S.-based third-party service providers who assist us in operating the platform, including cloud hosting, email delivery, payment processing, and analytics. All service providers are contractually obligated to process data only on our instructions and to maintain appropriate security standards.

5.3 Legal and Safety Disclosures

We may disclose information when required by applicable U.S. law, court order, or lawful governmental authority; to protect the rights, property, or safety of Tugboat Supply, our Suppliers, Fleets, or the public; or to enforce our Terms of Use.

5.4 Business Transfers

In connection with a merger, acquisition, or sale of all or substantially all of our assets, information may be transferred to the acquiring entity, provided the acquiring entity agrees to honor this Policy or provide materially equivalent protections.

5.5 No International Transfers

Because we operate exclusively within the United States and do not serve Canada, Mexico, or other foreign jurisdictions, we do not transfer personal information internationally and do not rely on cross-border transfer mechanisms such as Standard Contractual Clauses.

6.Data Retention

  • Marketing lead data — retained for up to 36 months from last contact, then deleted or anonymized.
  • Supplier account data — retained for the duration of the contract plus 7 years to satisfy commercial record-keeping obligations.
  • Order and requisition records — retained for 7 years from order date to support audit, dispute resolution, and legal compliance.
  • Crew PIN records — retained for 3 years from last active use, then purged.
  • Server and security logs — retained for 12 months.
  • Deleted account data — upon a verified deletion request, personal data is purged within 45 days except where retention is required by law.

7.Your Privacy Rights

These rights apply to U.S. residents only. We do not accept privacy rights requests from individuals outside the United States.

7.1 California Residents (CCPA / CPRA)

California residents have the right to:

  • Know — request disclosure of the categories and specific pieces of personal information we collect, use, disclose, or sell.
  • Delete — request deletion of personal information we hold about you, subject to certain exceptions.
  • Correct — request correction of inaccurate personal information.
  • Opt out of sale / sharing — we do not sell or share personal information for cross-context behavioral advertising, so this right is not currently applicable.
  • Limit use of sensitive personal information — we do not use sensitive personal information beyond purposes permitted by the CPRA.
  • Non-discrimination — we will not discriminate against you for exercising any CCPA right.

To submit a request, email privacy@tugboatsupply.comwith the subject line “CCPA Request.” We will verify your identity before processing and respond within 45 days (extendable by 45 additional days with notice).

7.2 Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with enacted comprehensive privacy laws have substantially similar rights. We honor access, deletion, correction, and portability requests from all U.S. residents regardless of state of residence, subject to applicable exemptions. Contact privacy@tugboatsupply.com to submit a request.

7.3 Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We will require written authorization and may verify your identity directly before processing the request.

8.Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Security measures include:

  • Per-supplier tenant isolation enforced at the data model level.
  • Encryption of data in transit (TLS 1.2 or higher) and at rest.
  • Role-based access controls and principle of least privilege.
  • Idempotent order-submit keys to protect against duplicate processing over unreliable connections (satellite, low-bandwidth Wi-Fi).
  • Audit logging of authentication events and privileged actions.
  • Regular review of service-provider security practices.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to industry-appropriate practices. If you believe a security incident has occurred, contact security@tugboatsupply.com immediately.

9.Children's Privacy

The platform is a commercial B2B service intended solely for use by businesses and their authorized employees. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will delete it promptly. Contact privacy@tugboatsupply.com if you have concerns.

10.Cookies and Tracking

We use cookies and similar technologies as described in our Cookie Policy. You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use this marketing website.

12.Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page and, where required by law, by direct notification to affected users. Continued use of the platform after the effective date of a revised Policy constitutes your acceptance of the changes.

13.Contact Us

For privacy inquiries, to exercise your rights, or to report a concern:

This document is provided for informational purposes and does not constitute legal advice. Tugboat Supply recommends that you consult qualified legal counsel regarding your specific situation. For questions about this document, contact legal@tugboatsupply.com.