Privacy Policy

Last Updated: [Date]

lewotobi, inc. ("we", "us", or "our") operates the lewotobi application, website, widgets, and associated services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or interact with our embeddable widgets.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.


1. Information We Collect

A. Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

* Account Information: Email address, first name and last name, password, and profile picture (avatar). Note that your basic profile information (name and avatar) may be visible to other users on the platform.

* Professional Credentials: Dive certifications, agency affiliations, professional levels (e.g., Divemaster, Instructor), and languages spoken.

* Professional Roles: Your defined role within a dive shop (e.g., 'Owner', 'Manager', 'Staff') if you choose to join or create a shop on our platform.

B. Usage and Environmental Data

We may also collect information on how the Service is accessed and used.

* Dive & Site Data: Exact GPS coordinates of dive sites, water temperature, visibility, currents, wildlife sightings, dive logs, site difficulty, depth ranges, and structural metadata.

Note on B2B Syndication:* When professionals or dive shops upload environmental or site data, this information is intended to be publicly shared across our network (including third-party widgets) to accurately map dive conditions.

C. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information (such as authentication tokens to keep you logged in via our Edge Functions). You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.


2. How We Use Your Information

We use the collected data for various purposes:

* To provide, operate, and maintain our Service.

* To authenticate users and secure accounts.

* To facilitate Business-to-Business (B2B) data syndication, allowing dive shops to embed maps and share dive site conditions publicly.

* To improve, personalize, and expand our Service.

* To communicate with you, either directly or through one of our partners, including for customer service, updates, and marketing.

* To detect, prevent, and address technical issues and fraud.


3. Data Retention and "Soft Deletion"

To maintain historical accuracy, ensure data integrity across our B2B syndication network, and prevent abuse, we utilize a "soft deletion" architecture.

When you delete a connection—such as removing a shop member, revoking an invitation, leaving a shop, terminating a partnership, or deleting a dive log—the record is not permanently destroyed (hard deleted) from our active databases immediately. Instead:

  • 1. The data's status is changed to "inactive," "archived," "deleted," or "cancelled".
  • 2. Once marked as such, this data is strictly hidden from public queries, active maps, and live widgets.
  • 3. The data is securely retained in our backend to allow for account recovery, auditing, and compliance with our Terms of Service.

  • 4. Disclosure of Your Data

    We may share information we have collected about you in certain situations:

    * Public and B2B Syndication: By design, the environmental data, site conditions, reviews, and logs you choose to make public (or share with a dive shop) may be syndicated and displayed on third-party websites utilizing our map widgets and APIs.

    * Third-Party Service Providers: We may share your information with third parties that perform services for us (e.g., hosting via Supabase, emailing, analytics).

    * Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your Personal Data may be transferred.

    * Legal Obligations: We may disclose your data if required to do so by law or in response to valid requests by public authorities.


    5. Your Data Protection Rights (GDPR & CCPA)

    Depending on your location, you may have the following rights regarding your personal data:

    * The Right to Access: You have the right to request copies of your personal data.

    * The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.

    * The Right to Erasure ("Right to be Forgotten"): While our primary architecture relies on "soft deletion" for everyday use, you have the legal right to request the permanent and irreversible hard deletion of your personal account data. Upon verification of a valid erasure request, all identifying personal data will be purged from our active and backup systems within the legally mandated timeframe, except where retention is legally required.

    * The Right to Restrict/Object to Processing: You have the right to restrict or object to our processing of your personal data, under certain conditions.

    * The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

    To exercise any of these rights, please contact us using the information below.


    6. Security of Your Data

    The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means (including Row Level Security databases and encrypted edge functions) to protect your Personal Data, we cannot guarantee its absolute security.


    7. Links to Other Websites

    Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We assume no responsibility for the privacy practices of third-party sites or services.


    8. Changes to This Privacy Policy

    We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.


    Contact Us

    If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@lewotobi.com.