Summary: VEMO FuelIQ collects only what is necessary to provide our maritime compliance platform. We do not sell your data. We process data under GDPR. You can request deletion or export at any time by emailing privacy@vemofuel.com.
1. Who We Are
VEMO FuelIQ ("we", "us", "our") operates the maritime compliance platform at vemofuel.com and the web application at the same domain. We are the data controller for personal data collected through our services.
Contact: privacy@vemofuel.com
2. Data We Collect
2.1 Account Data
- Email address (required for login)
- Name (optional, used for display)
- Company name and role
- Password (hashed — we never store plaintext passwords)
2.2 Vessel & Voyage Data
- Vessel details: name, IMO number, MMSI, DWT, engine type
- Voyage data: ports, dates, fuel consumption, cargo data, route information
- Compliance calculations: CO₂, CH₄, N₂O emissions, ETS costs, CII ratings
- Daily reports: noon/COSP/IOSP/EOSP operational data
This operational data is your business data. We process it solely to provide the compliance calculation service.
2.3 Usage Data
- Page views and feature usage (via Google Analytics — optional, requires consent)
- API request logs (for security and debugging, 30-day retention)
- Browser type, device type (anonymised)
2.4 Communication Data
- Demo request submissions (name, email, company, fleet size)
- Support communications
3. How We Use Your Data
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Providing the compliance platform | Contract performance | Account data, voyage data |
| User authentication and security | Legitimate interest | Email, session tokens |
| Sending transactional emails | Contract performance | Email address |
| Analytics and platform improvement | Consent | Usage data (anonymised) |
| Responding to demo requests | Legitimate interest | Contact data |
| Billing and subscription management | Contract performance | Account data, payment data |
| Legal compliance | Legal obligation | As required |
4. Data Sharing
We do not sell your data. We share data only with the following processors under data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database hosting (PostgreSQL) | AWS ap-south-1 (Mumbai) |
| Vercel Inc. | Application hosting and CDN | USA (with EU edge) |
| Resend Inc. | Transactional email delivery | USA |
| Razorpay | Payment processing (India) | India |
| Stripe Inc. | Payment processing (international) | USA |
| Google LLC | Analytics (if consented) | USA |
| Upstash Inc. | Rate limiting / caching | USA |
All international transfers use appropriate safeguards (Standard Contractual Clauses where applicable).
5. Data Retention
- Account data: Retained for the duration of your account + 30 days after deletion request
- Voyage and compliance data: Retained for 7 years (required for maritime regulatory record-keeping under IMO DCS/EU MRV obligations)
- API logs: 30 days
- Analytics: 26 months (Google Analytics default)
- Demo request data: 2 years
6. Your Rights (GDPR)
If you are in the EEA, UK, or Switzerland, you have the following rights:
- Access: Request a copy of all data we hold about you
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your account and personal data
- Portability: Export your data in machine-readable format (JSON/CSV)
- Restriction: Restrict processing of your data
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw analytics consent at any time
To exercise any right: email privacy@vemofuel.com or use the GDPR tools in your account Settings page. We will respond within 30 days.
You can also use the built-in GDPR tools inside the app: Settings → Privacy → Export / Delete Account.
You have the right to lodge a complaint with your supervisory authority. In the UK: ico.org.uk. In the EU: your national DPA.
7. Cookies
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Essential | User authentication session | Session / 1 week |
| cookie_consent | Essential | Stores your cookie preference | 1 year |
| _ga, _ga_* | Analytics (optional) | Google Analytics — usage tracking | 2 years |
You can withdraw analytics consent at any time by clicking "Cookie Settings" in the footer or clearing your browser cookies.
8. Security
- All data transmitted over HTTPS (TLS 1.3)
- Passwords hashed using bcrypt (never stored in plaintext)
- Database access restricted by Row Level Security (RLS) — users can only access their own data
- API rate limiting via Upstash Redis
- Regular security reviews
9. Children's Data
VEMO FuelIQ is a professional B2B platform for maritime operators. We do not knowingly collect data from persons under 18 years of age.
10. Changes to This Policy
We will notify registered users by email of any material changes to this Privacy Policy. The "Last updated" date at the top of this page will always reflect the most recent version.
11. Contact
For all privacy-related enquiries:
Email: privacy@vemofuel.com
Support: support@vemofuel.com
Website: vemofuel.com