Privacy Policy
Last updated: 2026-04-06
1. About this policy
Moorly ("we", "our", "the platform") is a port and marina management platform operated from Quebec, Canada. This policy explains how we collect, use, store, and protect your personal information in compliance with Quebec's Law 25 (Act respecting the protection of personal information in the private sector) and the Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Information we collect
Account information
When you create an account, we collect: name, email address, phone number (optional), organization name, and billing address.
Client data (tenant-managed)
Port administrators manage their own client databases. This data may include: client names, contact information, boat registrations, mooring agreements, and invoices. Each tenant is the data controller for their client data. Moorly acts as a data processor.
Payment information
Payments are processed by Stripe. We never store credit card numbers. Stripe's privacy policy applies to payment data.
Technical data
We automatically collect: IP address, browser type, pages visited, and access timestamps for security and platform operation.
3. Cookies
We use only essential cookies:
moorly_session— Authentication session (JWT token, 24h expiry)moorly_lang— Language preference (1 year)moorly_consent— Cookie consent choice (1 year)
We do not use tracking cookies, analytics cookies, or advertising cookies. No data is shared with advertising networks.
4. How we use your information
- To provide and maintain the platform
- To process payments via Stripe
- To generate content using AI providers (Claude, ChatGPT, or Gemini) when requested by the user
- To send transactional emails (account creation, password reset)
- To ensure platform security and prevent abuse
We never sell, rent, or share your personal information with third parties for marketing purposes.
5. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Name, email, payment details |
| Anthropic (Claude) | AI content generation | Prompts and instructions (no personal data) |
| OpenAI (ChatGPT) | AI content generation | Prompts and instructions (no personal data) |
| Google (Gemini) | AI content generation | Prompts and instructions (no personal data) |
| OpenStreetMap / Google / ESRI | Map tiles | IP address (standard web request) |
6. Data storage and security
Data is stored on servers located in Canada. Each tenant's data is isolated in a separate database. We use encryption in transit (HTTPS/TLS), hashed passwords (bcrypt), and JWT-based authentication.
7. Data retention
Account data is retained for the duration of your account. Upon account deletion, all associated data is permanently deleted within 30 days. Tenant client data is the responsibility of the tenant administrator.
8. Your rights (Law 25 & PIPEDA)
You have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your personal information ("right to be forgotten")
- Withdraw consent at any time
- Data portability — receive your data in a standard format
- File a complaint with the Commission d'accès à l'information du Québec (CAI)
9. Privacy officer
For any privacy-related request, contact:
Moorly — Privacy Officer
Email: privacy@moorly.ca
10. Changes to this policy
We may update this policy from time to time. Significant changes will be communicated via the platform. The date at the top indicates the last revision.