Privacy Policy
This Privacy Policy explains how CrewDeck, operated by Spyros Chatzigiannis, an individual sole proprietor based in Greece ("CrewDeck", "we", "us"), collects, uses, shares, and protects personal data when you use crewdeck.gr, join our waitlist, contact us, or use the CrewDeck mobile application (the "App"; together, the "Services"). CrewDeck connects maritime crew with people and organisations looking to hire them ("Finders").
We are committed to protecting your privacy in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is Spyros Chatzigiannis, trading as CrewDeck, based in Greece. For privacy questions or requests, email support@crewdeck.gr.
2. What Data We Collect
| Category | Examples | Why |
|---|---|---|
| Website & waitlist data | Email address, subscription status, submission date, source, IP address and basic server logs | Manage the waitlist, send requested launch updates, secure the website |
| Support data | Name, email, subject, message, bug details and any screenshot you choose to upload | Answer requests and investigate bugs |
| Account data | Email address, password (stored hashed), authentication provider (email, Apple, Google) | Create and secure your account |
| Profile data | Full name, profile photo, nationality, base location / port, languages | Build your public crew or Finder profile |
| Professional data | Role, years of experience, certifications, vessel types, availability, job status, rate | Let Finders discover and assess you |
| Contact data | Phone number, email, WhatsApp (if you choose to add them) | Allow connected users to contact you |
| Usage data | Profile views, blocks, reports, notifications, in-app activity | Operate features and keep the platform safe |
| Device data | Device push token, app language, app version | Send notifications and provide support |
| Website analytics | Cookie identifiers, pages viewed, interactions, browser/device information and approximate location derived from IP | Understand and improve the website |
| Purchase data | Subscription status, product and transaction identifiers, and entitlements supplied by Apple | Provide and restore paid features |
We do not intentionally collect special categories of data (health, religion, etc.). Please do not include such data in free-text fields like your bio.
3. How We Use Your Data (Legal Bases)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the App and your account | Performance of a contract |
| Showing your profile to Finders / crew | Your consent & performance of a contract |
| Sending notifications you opted into | Consent |
| Sending waitlist and optional launch updates | Consent |
| Answering support requests and investigating bugs | Performance of a contract and legitimate interests |
| Measuring website use with analytics | Consent where required by law |
| Safety, moderation, fraud & abuse prevention | Legitimate interests |
| Legal compliance and responding to requests | Legal obligation |
You may withdraw consent at any time (for example by disabling notifications or deleting your account); this does not affect processing already carried out.
4. Visibility of Your Profile
CrewDeck is a discovery platform. If you publish a public profile, your professional information (name, role, photo, experience, location, availability) is visible to other authenticated users of the App. Your contact details (phone/email) are only shown to authenticated users within the App and are subject to access controls. You can make your profile private or delete it at any time from Settings.
5. Sharing & Sub-Processors
We do not sell your personal data or use it for targeted advertising. We share data only with service providers who process it on our behalf under contract, including Supabase (database, authentication, file storage and backend hosting), Resend (waitlist and transactional email delivery), Apple and Google (sign-in, in-app purchases and push notifications, where applicable), Google Analytics (website measurement), and our website hosting and infrastructure providers. We may also disclose information to professional advisers, authorities or courts when reasonably necessary to comply with law, protect users, or establish or defend legal claims.
Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Cookies & Website Analytics
The website uses technologies needed for security and operation. It also uses Google Analytics 4 to understand visits, pages viewed, device or browser type, and interactions such as waitlist sign-up clicks. Google Analytics may use cookies or similar identifiers. You can block or delete cookies through your browser. Where law requires consent for analytics cookies, we rely on that consent and you may withdraw it through the cookie controls made available on the website.
7. Data Retention
We retain account and profile data while your account is active and delete or anonymise it after account deletion, subject to limited legal, fraud-prevention and backup retention. Inactive account data may be removed after 24 months. We keep waitlist data until you unsubscribe, request deletion, or the waitlist and launch-update purpose ends; we may retain a minimal suppression record to honour an unsubscribe. Support and bug-report data is retained only as long as reasonably needed to resolve the issue, maintain security records, and establish or defend legal claims. Purchase and accounting records are retained where tax or accounting law requires it.
8. Your Rights
Depending on your location, you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and to withdraw consent. EU/UK users may also lodge a complaint with their local supervisory authority — in Greece, the Hellenic Data Protection Authority (ΑΠΔΠΧ), www.dpa.gr. To exercise any right, contact support@crewdeck.gr. We respond within the timeframes required by law (usually within one month).
9. Deleting Your Account
You can request permanent account deletion directly in the App: Settings → Delete Account. Deletion removes the account and associated profile data from active systems, except information we must retain for legal compliance, fraud prevention, dispute resolution, or limited backup cycles. You may also email support@crewdeck.gr if you cannot access the App.
10. Children
CrewDeck is intended for professionals and is not directed to children. You must be at least 18 years old to use the App. We do not knowingly collect data from anyone below this age; if we learn that we have, we will delete it.
11. Security
We protect your data with encryption in transit (HTTPS/TLS), row-level access controls, hashed passwords, and least-privilege backend rules. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.
12. Changes to This Policy
We may update this Policy from time to time. We will update the "Last updated" date and, for material changes, notify you in the App.
13. Contact
Questions about this Policy or your data? Email support@crewdeck.gr