Privacy Policy

CheeHuu Captains (“CheeHuu,” “we,” “us,” or “our”) provides a dashboard that helps charter-boat captains run the business side of their vessel — bookings, charter revenue, and operating expenses. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our application, you agree to the practices described here.

Information we collect

• Account information. When you create an account, we collect your name, email address, and the details you provide about your boat and business.
• Bank transaction data (via Plaid).If you choose to connect a bank account, we use Plaid Inc. (“Plaid”) to securely access your transaction history on a read-only basis. We use this to import and categorize expenses for bookkeeping. We do not use Plaid to move money, and we do not access more data than is needed for this purpose.
• Booking and guest information. Information you enter about charters, bookings, and guest contacts.
• Payment information. Card and charter payments are processed by Stripe. We do not store full card numbers; that information is handled directly by Stripe.
• Usage data. Basic technical information such as log data and device information, used to operate and secure the service.

How we use your information

• To provide and operate the dashboard and its features.
• To import, categorize, and reconcile bank transactions into an expense ledger and profit-and-loss view.
• To process bookings and payments you initiate.
• To secure the service and prevent fraud or abuse.
• To communicate with you about your account.

How we use Plaid

We use Plaid to connect your bank account and retrieve transaction information. By connecting an account, you also agree to Plaid's End User Privacy Policy, available at plaid.com/legal. The bank credentials you enter are handled by Plaid and are not shared with us; we receive only the transaction data needed for bookkeeping, plus a secure access token that is stored server-side and never exposed in our application.

How we share information

We do not sell your personal information. We share information only with the service providers that power our application — Plaid (bank connectivity), Stripe (payments), and our cloud infrastructure providers (Supabase and Vercel) — and only as needed to provide the service. We may disclose information if required by law.

How we protect your information

We restrict access to sensitive data to server-side code only. Bank transaction data and access tokens are stored in a database protected by row-level security, encrypted at rest, and reachable only by our server. All data is transmitted over encrypted connections (TLS). Access to the systems that store financial data is protected by multi-factor authentication.

Your choices

You can disconnect a connected bank account at any time, which revokes our access and invalidates the stored connection. You may request access to, correction of, or deletion of your personal information by contacting us at the address below.

Data retention

We retain your information for as long as your account is active or as needed to provide the service, and as required to comply with our legal obligations. When you delete your account or disconnect a bank, the associated connection is removed.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above.

Contact us

If you have questions about this Privacy Policy or your data, contact us at captaincheehuu@gmail.com.