Privacy Policy
Last updated: December 13, 2024
Introduction
ReefTanker ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (if provided)
- Authentication credentials (managed by our authentication provider, Clerk)
Tank and Parameter Data
When you use our service, we collect:
- Tank information (name, volume, target parameters)
- Water parameter readings you log
- ICP test results you upload
- Action logs (dosing, water changes, equipment changes)
- Salt mix recipes and batch data
Device and Usage Information
We automatically collect:
- Device type and browser information
- IP address
- Usage patterns and feature interactions
- Error logs and performance data
Neptune Apex Data
If you choose to connect your Neptune Apex controller:
- Controller IP address (stored locally)
- Controller credentials (if password-protected)
- Synced parameter readings (pH, temperature, salinity)
How We Use Your Information
We use your information to:
- Provide and maintain our service
- Store and display your tank data
- Parse ICP lab reports using AI (OpenAI)
- Improve our service and develop new features
- Send service-related communications
- Respond to support requests
- Detect and prevent fraud or abuse
Data Processing
ICP Report Processing
When you upload ICP lab reports, we use OpenAI's API to extract element values from the PDF. The PDF content is sent to OpenAI for processing. OpenAI's data usage policies apply to this processing. We do not use your ICP data to train AI models.
Authentication
We use Clerk for user authentication. Clerk manages your login credentials and session data according to their privacy policy.
Data Storage and Security
Your data is stored in a secure PostgreSQL database hosted on Supabase. We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS)
- Secure database connections
- User data isolation (you can only access your own data)
- Regular security updates
Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Third parties that help us operate our service (hosting, authentication, analytics)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt out of non-essential communications
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes.
Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the service.
Contact Us
If you have questions about this Privacy Policy or your data, contact us at: