Privacy in the app.
This policy covers the YachtMotion app and the web desk. The website yachtmotion.com has its own privacy notice. Read with it: the data processing agreement, the subprocessors and your media and model training.
Who we are, and how to reach us
Digital Delivery GmbH, Rigiweg 21A, 6343 Holzhäusern ZG, Switzerland, operates YachtMotion. Its registered seat is Risch, canton of Zug, and its company number is CHE-178.105.720. It decides why and how your data is used. YachtMotion turns photographs you supply into a short film. For an inquiry a buyer sends about your film, your agency decides why it is used. We keep it for your agency and use it for nothing else.
Write to privacy@digitaldelivery.ch about anything in this policy. Ask what we hold about you, or ask us to correct or delete it. You can also object to how it is used.
What the app says it collects
What we collect
Your photographs, and video where you supply it. You choose them on your device and they are uploaded straight to our storage. We store the file exactly as your device sent it. We do not store the file name you gave it.
What your photographs are read for. Each photograph is described so a film can be cut from it. The description says which part of the subject it shows, and how well exposed and composed it is. It says which way the camera was pointing and when it was taken. It also says whether a person is visible anywhere in the frame. Nothing about who a person is or how many there are is ever recorded. Nor is where in the picture they are or what they are doing.
Your account. When you sign in, we receive your name and email address from the identity provider you signed in with. We also receive an identifier that provider uses for you. We never take them from anything you type into a form in the app.
Your business. At your first sign-in to open a business, you give us its name, country and line of work. You tick that you accept the business terms. We keep the name, the country and the line of work on the business. We keep your acceptance against the business too. This includes which version of the terms and a fingerprint of their wording. It also includes which kind of app you used and the moment. You become the business's first member.
What a business pays with. When a web checkout for a membership is offered, it is run by Stripe. It requires a billing address. In supported locations, Stripe offers fields for the business's tax number and legal name; providing a tax number is optional. Stripe keeps the details you give there. We do not save these checkout details in a dedicated business tax-identity record. Where a membership is taken through the App Store or Google Play, it is paid to that store. Our server receives the store's proof of the purchase.
Who sees it. The name of a business is shown to its members and to our staff. It is also in the email that asks an address to confirm it takes the business's inquiries. That email goes to the address a member typed. The name is also on the page that email's link opens. That page needs no sign-in, so whoever holds the link sees the name. The country and the line of work are kept on the business. Our server sends them to its members in their own account read. The app shows them there.
Your device. The app creates an identifier for the installation. This keeps a film you started before signing in yours afterwards. If you turn push notifications on, we store the address your phone is reached at and which platform it is.
What you write and choose. We collect the title and captions of a film and the words a narrator speaks. We collect your brand kit: logo, colors, typefaces, tagline, agency name and the contact lines your closing frame prints. We collect the boat name or listing address you searched for. We also collect the message and reply address you send with a Concierge request.
Your rights declaration. When you confirm you have the right to use the photographs, we record which standing you claimed. We record the exact wording you were shown, the moment you accepted, and which photographs it covered.
What you paid. Your balance, every movement of it, and the film credits you bought.
Use of the product, only if you switch it on. Six switches sit on the Settings screen and every one of them is off until you turn it on. One of them records milestones you reach in the product. When it is off, nothing is written — not written and filtered later, simply not written.
If you review a film through a private link. A customer can send you a private link to one of their films. You tell them what you think. You need no account. The customer types your name and your email address, and we keep both. We keep what you do on the page. That is the review notes you pin to a moment of the film, and your replies. That is also the marks that say a note is dealt with. That is also your decision to approve a version or ask for changes, with the time you made it. We use your address to send you the link when the customer makes it. We also mail you when a new version waits for you. We also mail you when anybody replies to one of your notes. That can be the customer or another holder of a link to the film. We use it for nothing else.
Who your photographs reach
To make a film, your photographs are sent to companies outside ours. There is no way to make the film without this. Each one gets what it needs and no more.
If you review a film through a private link. The customer can ask us to re-plan the film from the notes on a version. Only then do your notes and their replies go to the model companies the table names, as text. We do not add the name or email address supplied for your review link to this request. Your words may contain personal information you include. Your decision goes to no company. Your notes, your replies, your marks and your decision are shown to the customer who made the link. They are also shown to anyone else who holds a link to the same film. They show with the name the customer typed for you. Your address is used by the email service section 5 names, and by nothing else.
Where it is processed
Your account, your films and your photographs are held in Spain, in Microsoft Azure. Two things sit elsewhere in Europe. Push notifications are delivered from Western Europe. Our email is sent from a European service. The video models are the exception — some of them run in the United States.
When a web checkout for a membership is offered, it is Stripe's. Stripe keeps the billing address. Where its tax-ID form is supported and you provide them, Stripe keeps the business's tax number and legal name. We do not save these checkout details in a dedicated business tax-identity record.
How long we keep it, and what deleting actually does
None of your films or photographs expires on its own. We do not delete your films or your photographs after a period of time. A film and its photographs stay until you delete the film or the account that holds it ends. A photograph you keep in your yacht's library stays there until you delete it. It also goes when the account that holds it ends.
Deleting a film destroys its files. Anybody holding the address of one of your photographs can open it without signing in. That is how the app and the film player reach them. The only way to withdraw that access is for the file to stop existing. Deleting a film does exactly that, in the same operation. The record of the film stays in our database, marked deleted. The photographs you kept in your yacht's library are copies of their own. Deleting the film leaves them in the library.
Your yacht's library keeps photographs for your next film. You can keep the photographs you uploaded for a film in your yacht's library. Then the next film of the same yacht can start from them. They stay there when you delete the film. To delete one, open Settings, "Your yacht's library", and choose "Delete photo". We then destroy the file and keep trying until it is gone. The photograph is no longer offered for your next film. A film that already used the photograph keeps its own copy. That copy goes when you delete that film. We never keep photographs copied from an online listing in your library.
Ending your account revokes your sessions. It empties your name, your email address, your picture and your device identifier from your account record. It destroys every file of every film your account holds, and of every copy made from those films. It also destroys every file of your account itself, including every photograph in your yacht's library. It removes your push registrations and any voice we had cloned from your recordings. It asks Microsoft to delete the account you sign in with.
If you review a film through a private link. The link stops working 14 days after the last version sent to it. Each new version gives it 14 more days. The number is a setting, and every stage runs it at 14. The customer can also stop a link at once, by withdrawing it. A stopped link opens nothing and sends no more mail. The film's public page, if it has one, does not change. Review links for the same film version use one private copy. When no live link can play that version, our nightly cleanup attempts to destroy its private copy. Failed removals stay recorded for retry. Stopping a link keeps your name, your address, the text of your notes and your decision with the film. When the customer deletes the film, your name, your address and the text of your notes and replies are emptied. When the customer ends their account, their films are deleted first, so the same happens. The rows stay, marked deleted, as with every other record above.
If you work for an organization, the films, photographs and other work you make for it belong to the organization. They do not belong to your account. Ending your account leaves them in place and ends your place in the organization. The organization's records of what you did keep your account's identifier. Your name, your email address and your picture are emptied as above. The organization's films and files are destroyed when the organization asks us in writing to end it. No single person can end an organization. The other people of the organization see your name and your email address, and you see theirs. Your account id is shown only to you, to send when a business adds you, and to our staff. The person who signs up a business opens it and is its first member. Our staff can also open a business by name, with no first member. After that, our staff add and remove its people; no member can. A person may belong to several businesses. In each session they work as the one business they chose. The people of each business see them as above, and never see which other businesses they belong to.
What you can ask for
You can ask us for a copy of what we hold about you, or to correct or delete it. You can ask us to restrict or object to how it is used. You can also ask to receive it in a portable form. Write to the address in section 1.
If you review a film through a private link. To see, correct or remove what we keep, write to the address in section 1. Name the film and the address the link was sent to. A person answers, because the review page has no way to ask for your data. The link lapsing does not remove the data.
What we never do
We do not track you across other companies' apps or websites, and we do not sell your data. We do not measure whether you opened an email we sent you. A film's public page sets no cookie and counts no visit. We never write to the sender of an inquiry: the only mail an inquiry causes goes to the agency.
Your media and model training. We do not use your photographs, films, words, voice or music to train or improve any model.
This commitment is ours. It does not describe what the companies on our subprocessors list do.
When a film contains people who were never there
A film that contains AI-generated people carries a line saying so, on screen, in its last seconds. The line says: "Includes AI-generated people."