Andrias Marine — Privacy Policy

Last updated: August 13, 2026

Andrias Marine, Inc., a Delaware corporation ("Andrias," "we," "us," or "our"), operates andriasmarine.com and the Andrias Marine platform, including the mechanic and owner portal, engine-monitoring hardware and software, and verified engine records. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have.

By using our website, portal, hardware, or services (together, the "Services"), you agree to the practices described here. If you do not agree, please do not use the Services.

1. Who this policy covers

The Services are used by several kinds of people, and we handle their information differently:

Boat owners who create engine records, view their vessels, or purchase reports.
Marine service shops and technicians ("shops") who log service, manage a customer roster, and connect third-party business tools.
Buyers who purchase a verified engine report for a vessel they are considering.
Website visitors who browse andriasmarine.com without an account.

Where a distinction matters, we call it out below.

Two different roles. For a shop's own business records — its customers, its invoices, the work it performed — we act as a service provider processing that information on the shop's behalf and under its instructions. For the record about a particular engine, and specifically for the decision to publish it to a buyer, we treat the vessel's owner as the person whose choice governs. A shop cannot publish its customer's record, and we will not publish one on a shop's instruction.

2. Information we collect

2.1 Information you provide

Account information: name, email address, phone number, password, and (for shops) shop name and business details.
Vessel and engine information: hull identification numbers (HINs), engine make/model/serial, horsepower, model year, engine hours, ownership and home-port details, and the maintenance and service history you or a shop enters.
Service records: descriptions of work performed, parts, dates, engine hours at service, notes, and any documents or photographs attached to a service entry — invoices, receipts, and photographs of the work itself.

How attachments are held. Attachments are stored in a private bucket that is not publicly addressable. There is no public URL for any file, and no file can be reached by guessing an address. When someone with access to that vessel opens an attachment, we generate a link for that request which stops working after five minutes. Deleting an attachment removes the file itself, not only the reference to it.

We accept images and PDFs. We do not accept video. A photograph of an engine bay can contain a hull number, a boat name, or a person, so attachments are visible only to accounts with current access to that vessel — the owner and any shop they have authorised. Attachments are never included in a report sold to a buyer (see Section 4.2).

Payment information: when you purchase a report or hardware, payment is processed by our third-party payment processor. We do not store full card numbers on our servers; we receive limited transaction details (such as confirmation and the last four digits) from the processor.
Communications: messages you send us, support requests, and information you submit through forms on our website.

2.2 Information from connected third-party services

If a shop connects a third-party business tool (for example, QuickBooks Online), we access information from that service only as needed to create engine records: customer names and contact details, invoice numbers and dates, line item descriptions, and amounts. We access this information under the permissions you grant when you connect the service, and you can disconnect at any time (see Section 8). We store the original imported record alongside the record we create from it, and we encrypt the access credentials for connected services (AES-256-GCM).

What a connected service does not put into a buyer report. Imported customer names, contact details and invoice amounts are used to build and attribute the shop's own records. They are never included in a report sold to a buyer. See Section 4.

2.3 Information from monitoring hardware

If Andrias monitoring hardware is installed on a vessel, we collect engine sensor data — primarily temperature readings, engine-speed (tachometer) signals, and derived measures such as thermal slope and cross-engine coherence — along with device identifiers and timestamps. This data is tied to the engine and vessel it monitors. Our hardware does not require access to a vessel's ECU or NMEA network and does not read navigation, location (except as described below), or personal-device data.

2.4 Photographs of plates and documents

You can photograph an engine's data plate, or a registration, title, bill of sale or dealer invoice, so the portal can fill in make, model, horsepower and weight instead of asking you to type them. To read a photograph we send it to a third-party AI provider (Anthropic). A document photograph may contain a hull identification number, an engine serial, and an owner's name.

Two limits apply to these images:

We do not store them. A photograph is held in server memory only long enough to check the serial or hull number you type against it — at most fifteen minutes — and is then discarded. It is not written to our database.
The serial is never filled in for you. What the photograph reads is withheld from your browser and used only to check what you type. This is a deliberate design choice: an identity number a person confirms is more reliable than one a machine proposes.

2.5 Information collected automatically

When you use our website or portal, we automatically collect standard technical information such as IP address, browser type, device information, pages viewed, and timestamps, using cookies and similar technologies. We use this to operate, secure, and improve the Services.

2.6 Location information

Some features (such as fleet-cluster or service-routing features) may use a vessel's registered home port or, where hardware provides it, geographic position. We use this to provide the relevant feature and for aggregate analysis. We do not track individuals' real-time personal location.

2.7 Information about people who are not yet users

A shop may enter a customer's name, email address or phone number when it creates a record for that customer's boat — before that person has any account with us. When that happens:

we hold an invitation against that email address, so that the person becomes the owner of their own record the first time they sign in;
we may generate a single-use claim code for the shop to give the customer, which does the same thing without an email address;
we do not email, text or otherwise contact that person because a shop entered them. The shop tells them, or they arrive on their own.

Until the owner claims the record, the shop holds working access to it and the record cannot be published to a buyer.

3. How we use information

We use the information we collect to:

create, maintain, and display engine records and service history;
provide the mechanic/owner portal, the customer roster, service-due tracking, and the work-list;
import and normalize business records from connected services into engine records;
generate verified engine reports and process report and hardware purchases;
operate monitoring hardware and generate predictive and advisory insights;
authenticate users, secure accounts, and prevent fraud and abuse;
respond to your requests and provide support;
analyze usage and improve the Services, including developing and improving our predictive models; and
comply with legal obligations.

A note on our models and aggregate data. We use data across the platform to improve our predictive and analytical models and to build industry-level insights. When we use data for these purposes beyond your own records, we use it in aggregate and de-identified form — that is, in a way not intended to identify you, your customers, or a specific vessel.

4. The verified engine record and buyer reports

The engine record is a durable history tied to an engine. A buyer considering a vessel can purchase a report drawn from it. This is the part of the Services with the clearest privacy consequences, so we describe it exactly.

4.1 A report is off unless the owner turns it on

A record is not available to buyers by default, and no amount of inaction makes it available. It becomes purchasable only when the vessel's owner affirmatively publishes it. Specifically:

only an account holding the owner role on that vessel can publish it — a shop that services the boat cannot;
a record whose owner has not yet claimed it cannot be published at all, by anyone;
every act of publishing and un-publishing is recorded with the date and the account that did it, and that log is append-only — closing a record does not erase that it was open;
an owner can un-publish at any time, and the record stops being purchasable immediately.

Before an owner publishes, a person who types a hull number or engine serial is told only that a record exists and is not available. They are shown nothing from it.

4.2 What a purchased report contains

A report discloses:

engine make, model, serial number, horsepower and hours;
vessel type, hull identification number, boat make/model and year;
dated service entries by category (for example "impeller", "oil and filter"), the engine hours at the time, who logged each entry and in what role, and whether an entry was later voided or corrected;
a grade for each entry describing how well it is evidenced, and a summary of the record as a whole.

A report does not disclose:

the owner's name, email address, or phone number;
where the vessel is kept — the registered home port is withheld from reports entirely;
any free-text notes written by an owner or a technician. These are removed when the report is assembled, not filtered afterwards;
prices, invoice amounts, or anything about what the work cost.

Dealer inventory. Where an engine is held in a dealer's or shop's inventory rather than fitted to a boat, a report covers only the engine whose serial the buyer searched for. It does not disclose the other engines that business is holding.

4.3 Records travel with the engine

When a vessel or engine changes hands, its record may transfer to the new owner, and entries a shop logged may remain part of that engine's permanent record. Attribution — who logged an entry and when — is part of what makes the record worth anything, and it persists.

4.4 If you are a shop

You are responsible for having an appropriate basis to enter your customers' information, and for informing your customers as your own obligations require. If you have accepted a Founding Shop Agreement with us, that agreement's terms apply to your data in addition to this Policy, and control wherever they are more protective of you or your customers.

5. When we share information

We do not sell your personal information. We share information only as follows:

With the vessel's authorized users. Owners and the shops they authorize can see the records for vessels they own or have been granted access to.
With buyers of a report, limited to the contents described in Section 4.2, and only where the owner has published the record.
With service providers who perform functions on our behalf — hosting and database (DigitalOcean, Supabase), payment processing (Stripe), AI processing of text, voice and photographs (Anthropic), and voice transcription (Deepgram) — under obligations to protect the information and use it only to provide those services.
With Andrias staff helping a shop set up, and only where that shop has asked us to. See Section 5.1.
On engine/vessel transfer, as described in Section 4.
For legal reasons — to comply with law, respond to lawful requests, enforce our terms, or protect the rights, safety, and property of Andrias, our users, or others.
In a business transaction — if Andrias is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We may share aggregate or de-identified information (which does not identify you) for research, product development, benchmarking, and industry insights.

5.1 Setup help

A shop can ask us to enter its vessels and engines for it, so that it starts with its own fleet on screen. If a shop asks:

the access is granted by the shop, never assumed by us;
it expires after fourteen days on its own;
it is shown in the shop's portal for its whole life, with the days remaining and a control to end it immediately;
it covers vessel and engine details only. We do not log service work on a shop's behalf under any circumstances — a repair record carries the name of whoever logged it, and it should never carry ours.

6. Third-party services

The Services integrate with third parties (for example, QuickBooks Online for imports, our payment processor for purchases, and AI providers for processing service descriptions). Your use of those third-party services is governed by their own terms and privacy policies. When you connect a third-party account, you authorize the data access described at the time of connection.

7. Data retention and the "void, not delete" model

We retain information for as long as needed to provide the Services and for legitimate business and legal purposes.

Because the value of an engine record is its integrity, the platform generally uses a "void, not delete" approach: rather than erasing a mistaken or superseded entry, we mark it as voided or corrected while preserving the history, so the record remains tamper-evident. This means some information may be retained in the record even after it is voided. Where you have a right to deletion (see Section 9), we will honor it consistent with our legal obligations and the integrity of records that may belong to or affect other parties (such as a subsequent owner of an engine). [Confirm specific retention periods with counsel — e.g., account data, telemetry, transaction records.]

If we shut down. If Andrias ceases operating, we will give at least 90 days' notice and provide a full export of the records you have entered.

Photographs of plates and documents are not retained at all (Section 2.4). Claim codes expire after one year or on first use, whichever is sooner.

8. Your choices

Access and update: you can view and update much of your account and vessel information in the portal.
Disconnect third-party services: shops can disconnect a connected service (such as QuickBooks) at any time from the portal; we stop importing new records from it, and you may request deletion of stored access credentials.
Publishing a record: a record is not available to buyers unless its owner publishes it. An owner can publish or un-publish at any time from the portal, and un-publishing takes effect immediately.
Setup help: a shop that has granted setup access can end it at any time from the bar shown in its portal.
Cookies: you can control cookies through your browser settings; some features may not function without them.
Marketing email: you can opt out of non-essential emails using the unsubscribe link.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing, or to object to processing. To exercise a right, contact us at privacy@andriasmarine.com. We will respond as required by applicable law. We will not discriminate against you for exercising these rights.

If you are in a jurisdiction with specific privacy laws (for example, certain U.S. states or the EEA/UK), additional rights may apply; contact us and we will honor the rights available to you under applicable law. [Add jurisdiction-specific disclosures with counsel if you have users in those regions.]

10. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption of sensitive credentials (such as access tokens for connected financial services) and access controls that limit records to authorized users. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

12. International users

Andrias is based in the United States, and we process information in the United States. If you access the Services from outside the U.S., you understand your information will be transferred to and processed in the U.S.

13. Changes to this policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date, and, where required, provide additional notice.

14. Contact us

Andrias Marine, Inc.

254 Chapman Road, Suite 208 #28154

Newark, Delaware 19702, USA

Email: privacy@andriasmarine.com

This Privacy Policy is provided as a starting point and should be reviewed by qualified legal counsel before publication, particularly regarding jurisdiction-specific privacy rights, retention periods, and the requirements of third-party platforms (such as Intuit/QuickBooks and payment processors) you integrate with.