1. Introduction

Welcome to Blue Green Intelligence ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our weather API services, vessel routing API, and related dashboard services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register for and use our Services:

• Account Information: Name, email address, username, and authentication credentials through AWS Cognito
• Profile Information: Given name, family name, and other profile details you provide
• Contact Information: Email address for account verification and communication

2.2 Usage Information

We automatically collect information about how you use our Services:

• API Usage Data: API calls made, timestamps, request parameters, and response data
• Technical Information: IP addresses, browser type, device information, and access logs
• Session Data: Login sessions, authentication tokens, and session duration
• Performance Data: API response times, error rates, and service availability metrics

2.3 Location and Maritime Data

When you use our weather and routing APIs, we process:

• Geographic Coordinates: Latitude and longitude data for weather queries and route calculations
• Vessel Information: Draft specifications, waypoints, and routing preferences
• Weather Parameters: Requested weather data types and historical query patterns

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Provide weather data, vessel routing, and related API services for guidance purposes only
• Process API requests and deliver weather and routing information to supplement navigation planning
• Maintain user accounts and manage subscriptions
• Generate API tokens for secure access to our guidance services

3.2 Service Improvement

• Monitor and analyze usage patterns to improve service performance
• Develop new features and enhance existing functionality
• Optimize API response times and data accuracy
• Conduct research and development for maritime weather services

3.3 Communication

• Send service-related notifications and updates
• Provide customer support and technical assistance
• Notify users about service changes, maintenance, or security issues
• Send billing and subscription-related communications

3.4 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, abuse, and security threats
• Enforce our terms of service and user agreements
• Respond to legal requests and court orders

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Services:

• AWS Cognito: For user authentication and identity management
• Cloud Infrastructure: For hosting, data storage, and service delivery
• Payment Processors: For billing and subscription management
• Analytics Services: For service monitoring and performance analysis

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Investigate potential violations of our terms of service
• Prevent fraud or other illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.

5. Data Security

We implement comprehensive security measures to protect your information:

5.1 Technical Safeguards

• Encryption: Data is encrypted in transit using HTTPS/TLS and at rest using industry-standard encryption
• Access Controls: Strict access controls and authentication mechanisms protect your data
• API Security: Secure API tokens with expiration dates and usage monitoring
• Infrastructure Security: Cloud infrastructure with built-in security features and regular updates

5.2 Operational Safeguards

• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy practices
• Incident response procedures for security breaches
• Regular backups and disaster recovery procedures

6. Data Retention

We retain your information for as long as necessary to provide our Services and comply with legal obligations:

Data Type	Retention Period	Purpose
Account Information	Duration of account + 2 years	Service provision and legal compliance
API Usage Logs	12 months	Service monitoring and billing
Session Data	24 hours (active sessions)	Authentication and security
Support Communications	3 years	Customer service and issue resolution
Billing Records	7 years	Financial and tax compliance

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information we hold
• Obtain a copy of your data in a portable format
• View your API usage statistics and account information through our dashboard

7.2 Correction and Updates

• Update your account information and profile details
• Correct inaccurate or incomplete information
• Modify your communication preferences

7.3 Deletion and Restriction

• Request deletion of your account and associated data
• Restrict processing of your information in certain circumstances
• Withdraw consent for data processing where applicable

7.4 Objection and Opt-out

• Object to certain types of data processing
• Opt-out of marketing communications
• Disable non-essential cookies and tracking

8. International Data Transfers

Our Services are hosted on cloud infrastructure that may involve international data transfers. We ensure that:

• Data transfers comply with applicable privacy laws and regulations
• Appropriate safeguards are in place for international transfers
• Service providers maintain adequate data protection standards
• Users are informed about the location of data processing

9. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

10.1 Types of Cookies

• Essential Cookies: Required for basic service functionality and security
• Session Cookies: Maintain your login session and authentication state
• Analytics Cookies: Help us understand service usage and performance
• Preference Cookies: Remember your settings and preferences

10.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services.

11. Third-Party Services

Our Services may integrate with third-party services and APIs. This Privacy Policy does not cover the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you use in connection with our Services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:

• Notify users of material changes via email or service notifications
• Post the updated Privacy Policy on our website with a new effective date
• Provide a summary of significant changes when applicable
• Maintain previous versions for reference when requested

Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.

13. Legal Basis for Processing (GDPR)

For users in the European Union, we process personal information based on the following legal grounds:

• Contract Performance: To provide the Services you have requested
• Legitimate Interests: To improve our Services and ensure security
• Legal Compliance: To comply with applicable laws and regulations
• Consent: Where you have provided explicit consent for specific processing activities