Privacy Policy

Last Updated: July 3, 2026

This Privacy Policy explains how Dive Connect, LLC, a limited liability company based in St. Petersburg, Florida, USA ("DiveConnect," "we," "our," "us"), collects, uses, and protects information when you use DiveConnect.ai — our business-to-business dashboard, hosted storefront and website builder, and related services (the "Service"). By using the Service, you agree to this policy. This policy covers our B2B SaaS product; our consumer marketplace at Diveconnect.io has its own privacy policy.

Two roles. For information about your own account and business, and about how you use the Service, DiveConnect is the controller. For the personal data of your customers that you upload or manage in the Service, you are the controller and DiveConnect acts as your processor under our Data Processing Addendum.

Information We Collect

• Account & contact information you provide — such as your name, email, and, for dive shops, business name and address.
• Content you upload or generate — listings, trips, media, and text or images you create with our AI tools.
• Customer records you manage — information you enter about your own customers and bookings (see "Data You Manage About Others" below).
• Payment & billing information — subscription payments are handled by our billing provider, and payouts to you are handled by Stripe; we do not store full card numbers on our servers.
• Usage & device data — page views and feature usage (via our own analytics and Vercel Web Analytics, only with your consent), plus device, browser, and diagnostic/error logs.

How We Use Information

• To provide, maintain, secure, and improve the Service
• To generate the content and media you request with our AI tools
• To process subscription payments and send transactional and account email
• To monitor for errors, prevent abuse, and enforce our terms
• To communicate updates and provide support

Legal Bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data to perform our contract with you (providing the Service), on the basis of our legitimate interests (securing and improving the Service and preventing abuse), to comply with legal obligations, and — for non-essential cookies and analytics — with your consent.

Cookies & Consent

We use strictly necessary cookies to run the Service, and — only with your consent — analytics cookies. Non-essential cookies are disabled until you accept them. You can change or withdraw consent at any time using the "Cookie preferences" link in the footer. For details, see our Cookie Policy.

Third-Party Services (Subprocessors)

We rely on the following trusted providers to operate the Service. Each processes data on our behalf under contract and its own privacy terms:

• Supabase — database, authentication, and file storage.
• Stripe — subscription and payout processing (Stripe Connect).
• Vercel — hosting and, with your consent, Web Analytics.
• Sentry — error and performance monitoring (legitimate interest; not used for advertising).
• Resend — sending and receiving transactional and account email.
• AI providers — Anthropic (Claude), OpenAI, ElevenLabs, and Replicate to generate the content you request (see "AI & Content Processing" below).
• Serper and Apify — web search and public-page analysis used only to power features you invoke (for example, analyzing a website URL you provide).

AI & Content Processing

When you use our AI features, the content you submit (such as prompts, business details, or a website URL to analyze) is sent to AI providers to produce the output you request. We use Anthropic (Claude) and OpenAI for text and speech, ElevenLabs for AI voice, Replicate for AI image generation, and Serper for image search. When you ask us to analyze an existing website, we fetch and parse that public page. We do not use your content to train our own models, and these providers process it under their own terms. Please do not enter your customers' personal information into AI prompts. If you use AI-assisted email drafting, the inbound customer message you choose to reply to is sent to Anthropic (Claude) to generate a draft, which is shown to you for review and never sent automatically. See our AI & Content Terms for more.

Data You Manage About Others

If you are a dive shop, information you upload about your own customers is processed by us on your behalf: you are the controller of that data and we act as your processor under our Data Processing Addendum. You are responsible for having a lawful basis and your own privacy notice for the people whose data you enter.

International Data Transfers

DiveConnect is based in the United States and our providers may process data in the U.S. and elsewhere. If you are in the European Economic Area, the UK, or Switzerland, we rely on appropriate safeguards for these transfers, including the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum where applicable.

Data Retention & Deletion

We retain data for as long as needed to provide the Service and comply with legal obligations. You may delete your account from your dashboard settings, or request deletion at any time using our data deletion page. On account deletion we remove your data in the ordinary course, subject to the Data Processing Addendum and legal retention requirements.

Your Rights

Depending on where you live, you may have rights over your personal data:

• EEA/UK (GDPR): to access, rectify, erase, restrict, and port your data, and to object to processing or withdraw consent.
• California (CCPA/CPRA): to know what personal information is collected, to delete it, to correct it, and to opt out of any "sale" or "sharing." Dive Connect, LLC does not sell or share your personal information for cross-context behavioral advertising.

To exercise these rights, contact us at privacy@diveconnect.io. If you are one of our customers' end-customers, please contact that business (the controller of your data) directly.

Children's Privacy

The Service is a business tool intended for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy here and revise the "Last Updated" date above.

Contact

Dive Connect, LLC
7901 4TH ST N STE 27295, St Petersburg, FL 33702, USA
Privacy requests: privacy@diveconnect.io
General: admin@diveconnect.io