PRIVACY POLICY

Introduction

Skiff, LLC ("Skiff," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Platform" or "Services").

Please read this Privacy Policy carefully. By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

This Privacy Policy is incorporated into and subject to our Terms and Conditions. Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms and Conditions.

TABLE OF CONTENTS

  1. Information We Collect

  2. How We Use Your Information

  3. How We Share Your Information

  4. Messages and Communications Monitoring

  5. Cookies and Tracking Technologies

  6. Your Privacy Rights

  7. How We Protect Your Information

  8. Data Retention

  9. Children's Privacy

  10. Geographic Restrictions

  11. International Data Transfers

  12. Third-Party Links and Services

  13. Background Checks

  14. Location Information

  15. Payment Information

  16. Insurance Information

  17. Changes to This Privacy Policy

  18. How to Exercise Your Privacy Rights

  19. Do Not Track Signals

  20. Contact Information

  21. Summary of Key Privacy Practices

  1. INFORMATION WE COLLECT

1.1 We collect information about you in various ways when you use our Platform. The information we collect falls into the following categories:

Personal Information You Provide

1.2 When you create an account, list a boat, book a rental, or use our Services, you may provide us with the following personal information:

1.2.1 Account Information: Full name, email address, phone number, date of birth, profile photo, username, password. 1.2.2 Identity Verification: Government-issued ID (driver's license, passport), photo verification, date of birth, address. 1.2.3 Payment Information: Credit card number, billing address, bank account information (processed by our payment processor). 1.2.4 Captain Licensing: U.S. Coast Guard license number, license type, expiration date, endorsements, medical certification. 1.2.5 Boat Information (Hosts): Boat registration number, make, model, year, photos, location, insurance information, capacity. 1.2.6 Booking Information: Rental dates, times, locations, number of passengers, special requests, booking history. 1.2.7 Reviews and Ratings: Reviews you write, ratings you give, comments, feedback. 1.2.8 Communications: Messages sent through the Platform, emails, customer support inquiries, phone calls.

Information Collected Automatically

1.3 When you access or use the Platform, we automatically collect certain information about your device and usage:

1.3.1 Device Information: IP address, device type, operating system, browser type, mobile carrier, unique device identifiers. 1.3.2 Usage Information: Pages viewed, features used, time spent on the Platform, search queries, links clicked. 1.3.3 Location Information: Precise GPS location (when you enable location services), approximate location based on IP address. 1.3.4 Cookies and Tracking Technologies: Cookies, web beacons, pixels, local storage, session data.

Information from Third Parties

1.4 We may receive information about you from third-party sources, including:

1.4.1 Background Check Providers: Criminal records, sex offender registry status (with your consent). 1.4.2 Payment Processors: Payment verification, transaction history, fraud detection information. 1.4.3 Social Media: If you choose to link your account to social media platforms, we may receive profile information. 1.4.4 U.S. Coast Guard: Captain license verification and status. 1.4.5 Insurance Providers: Insurance verification for boat listings.

  1. HOW WE USE YOUR INFORMATION

2.1 We use the information we collect for the following purposes:

To Provide and Improve the Platform

2.2 We use your information to:

2.2.1 Create and manage your account. 2.2.2 Process bookings and payments. 2.2.3 Connect Renters with Hosts and Captains. 2.2.4 Facilitate communication between users. 2.2.5 Verify identity and Captain licenses. 2.2.6 Send booking confirmations, updates, and reminders. 2.2.7 Provide customer support. 2.2.8 Improve Platform functionality and user experience. 2.2.9 Develop new features and services.

For Safety and Security

2.3 We use your information to:

2.3.1 Verify user identity and prevent fraud. 2.3.2 Conduct background checks (with consent). 2.3.3 Verify Captain licenses with the U.S. Coast Guard. 2.3.4 Detect and prevent illegal activity or violations of our Terms and Conditions. 2.3.5 Monitor messages for safety, disputes, and legal compliance. 2.3.6 Investigate complaints and resolve disputes. 2.3.7 Protect the rights, property, and safety of Skiff and our users.

For Marketing and Communications

2.4 We use your information to:

2.4.1 Send promotional emails and notifications about new features, special offers, and updates. 2.4.2 Personalize your experience and show you relevant content. 2.4.3 Conduct surveys and collect feedback. 2.4.4 Send administrative communications about your account or the Platform.

For Legal Compliance

2.5 We use your information to:

2.5.1 Comply with applicable laws, regulations, and legal processes. 2.5.2 Respond to law enforcement requests, court orders, and subpoenas. 2.5.3 Enforce our Terms and Conditions and other policies. 2.5.4 Protect against legal liability.

For Analytics and Research

2.6 We use your information to:

2.6.1 Analyze usage patterns and trends. 2.6.2 Measure the effectiveness of marketing campaigns. 2.6.3 Conduct research and data analysis to improve our Services. 2.6.4 Generate aggregated, de-identified data for business purposes.

  1. HOW WE SHARE YOUR INFORMATION

3.1 We share your information in the following circumstances:

With Other Users

3.2 When you use the Platform, certain information is shared with other users:

3.2.1 Renters see: Host name, profile photo, boat details, location, reviews, ratings. 3.2.2 Hosts see: Renter name, profile photo, number of passengers, booking details, reviews, ratings. 3.2.3 After booking confirmation: Contact information may be shared to facilitate the rental.

With Service Providers

3.3 We share information with third-party service providers who perform services on our behalf:

3.3.1 Payment Processors: Stripe and other payment providers process payments and store payment information. 3.3.2 Cloud Hosting: AWS, Google Cloud, or similar providers host our servers and databases. 3.3.3 Customer Support Tools: Zendesk, Intercom, or similar platforms for customer service. 3.3.4 Analytics Providers: Google Analytics, Mixpanel, or similar services to analyze Platform usage. 3.3.5 Email Services: SendGrid, Mailchimp, or similar providers for sending emails. 3.3.6 Background Check Providers: Checkr or similar services for conducting background checks. 3.3.7 SMS Providers: Twilio or similar services for sending text messages.

For Legal Reasons

3.4 We may disclose your information if required by law or if we believe it is necessary to:

3.4.1 Comply with a legal obligation, court order, or subpoena. 3.4.2 Respond to law enforcement requests. 3.4.3 Protect the rights, property, or safety of Skiff, our users, or the public. 3.4.4 Detect, prevent, or investigate fraud, security issues, or illegal activity. 3.4.5 Enforce our Terms and Conditions or other policies.

In Business Transfers

3.5 If Skiff is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

With Your Consent

3.6 We may share your information with third parties when you explicitly consent to such sharing.

Aggregated or De-identified Data

3.7 We may share aggregated or de-identified information that cannot reasonably be used to identify you. This information may be used for research, analytics, marketing, or other business purposes.

  1. MESSAGES AND COMMUNICATIONS MONITORING

4.1 IMPORTANT: MESSAGES SENT THROUGH THE SKIFF PLATFORM ARE NOT END-TO-END ENCRYPTED. SKIFF MAY ACCESS, REVIEW, AND MONITOR YOUR MESSAGES UNDER CERTAIN CIRCUMSTANCES.

When We May Access Your Messages

4.2 By using the messaging features on the Platform, you acknowledge and consent that Skiff may access and review your messages in the following situations:

4.2.1 Dispute Resolution: When resolving disputes between Renters and Hosts, we may review message history to understand the facts and facilitate resolution. 4.2.2 Safety Investigations: When investigating reports of harassment, threats, unsafe behavior, or other safety concerns. 4.2.3 Terms Violations: When investigating suspected violations of our Terms and Conditions, including fraud, scams, or prohibited activities. 4.2.4 Legal Compliance: When responding to law enforcement requests, court orders, subpoenas, or other legal obligations. 4.2.5 Fraud Prevention: When detecting or preventing fraudulent activity, scams, or identity theft. 4.2.6 Platform Security: When investigating security incidents, spam, or malicious activity.

What You Should NOT Share in Messages

4.3 Because messages are not end-to-end encrypted and may be accessed by Skiff, you should NOT share the following information through the Platform's messaging system:

4.3.1 Social Security numbers or other government-issued identification numbers. 4.3.2 Full credit card numbers or banking information. 4.3.3 Passwords or security credentials. 4.3.4 Medical or health information. 4.3.5 Highly sensitive personal or confidential information.

Message Retention

4.4 We retain messages for the following periods:

4.4.1 Active conversations: Retained indefinitely while your account is active. 4.4.2 After account deletion: Messages are deleted within 90 days. 4.4.3 Legal holds: Messages may be retained longer if subject to legal proceedings or investigations.

  1. COOKIES AND TRACKING TECHNOLOGIES

5.1 We use cookies and similar tracking technologies to collect information about your use of the Platform. Cookies are small data files stored on your device.

Types of Cookies We Use

5.2 We use the following types of cookies:

5.2.1 Essential Cookies: Required for the Platform to function properly (e.g., authentication, security). 5.2.2 Analytics Cookies: Help us understand how users interact with the Platform (e.g., Google Analytics). 5.2.3 Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. 5.2.4 Preference Cookies: Remember your settings and preferences.

Managing Cookies

5.3 Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but this may affect your ability to use certain features of the Platform. To learn more about cookies and how to manage them, visit: www.allaboutcookies.org.

Third-Party Cookies

5.4 We may allow third-party service providers to place cookies on your device for analytics and advertising purposes. These third parties have their own privacy policies governing their use of your information.

  1. YOUR PRIVACY RIGHTS

General Rights

6.1 You have the following rights regarding your personal information:

6.1.1 Access: Request access to the personal information we hold about you. 6.1.2 Correction: Request correction of inaccurate or incomplete information. 6.1.3 Deletion: Request deletion of your personal information. 6.1.4 Portability: Request a copy of your information in a structured, machine-readable format. 6.1.5 Objection: Object to certain processing of your information. 6.1.6 Restriction: Request that we restrict processing of your information. 6.1.7 Opt-out of Marketing: Unsubscribe from promotional emails and notifications.

Additional Rights for Residents of Certain States

6.2 If we expand our services to states with comprehensive privacy laws (such as California, Virginia, Colorado, or Connecticut), residents of those states will have additional privacy rights as required by applicable state law. These rights may include enhanced disclosure requirements, data sale opt-out rights, and additional procedural protections.

6.3 We will update this Privacy Policy and notify users when we expand to states with additional privacy requirements.

Exercising Your Rights

6.4 To exercise any of your privacy rights, please contact us at team@skiffmiami.com or through the Privacy Settings in your account.

  1. HOW WE PROTECT YOUR INFORMATION

7.1 We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

7.1.1 Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS. 7.1.2 Secure Servers: Our servers are hosted in secure data centers with physical and electronic security controls. 7.1.3 Access Controls: Access to personal information is limited to authorized employees and service providers who need it to perform their duties. 7.1.4 Authentication: Password-protected accounts with secure authentication mechanisms. 7.1.5 Regular Security Audits: We conduct regular security assessments and vulnerability testing. 7.1.6 Employee Training: Our employees receive training on data privacy and security best practices.

7.2 IMPORTANT: WHILE WE IMPLEMENT REASONABLE SECURITY MEASURES, NO SYSTEM IS 100% SECURE. WE CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION. YOU USE THE PLATFORM AT YOUR OWN RISK.

  1. DATA RETENTION

8.1 We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

8.2 The following retention periods apply:

8.2.1 Account Information: Retained while your account is active and for 3 years after account deletion (for legal compliance and dispute resolution). 8.2.2 Booking Information: Retained for 7 years after the booking date (for tax and accounting purposes). 8.2.3 Payment Information: Retained by our payment processor according to their policies and legal requirements. 8.2.4 Captain Licenses: Retained while the Host is active on the Platform and for 2 years after listing removal. 8.2.5 Messages: Retained while your account is active and for 90 days after account deletion. 8.2.6 Reviews and Ratings: Retained indefinitely to maintain Platform integrity, even after account deletion. 8.2.7 Legal Holds: Information subject to legal proceedings may be retained longer as required.

Data Deletion

8.3 When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, subject to the retention periods described above. Some information may remain in backup systems for a limited period before being permanently deleted.

  1. CHILDREN'S PRIVACY

9.1 The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

9.2 If you are under 18 years old, you may not create an account or use the Services. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible.

9.3 If you believe we have collected information from a child under 18, please contact us immediately at team@skiffmiami.com.

  1. GEOGRAPHIC RESTRICTIONS

10.1 The Platform is currently available only to residents of Florida. By creating an account, you represent and warrant that you are a resident of Florida.

10.2 We may verify your residency through:

10.2.1 Government-issued ID showing a Florida address. 10.2.2 GPS location data. 10.2.3 IP address verification.

10.3 If we determine that you are not a Florida resident, we reserve the right to suspend or terminate your account.

10.4 Skiff currently operates exclusively in the waters of Florida. All boat rentals arranged through the Platform take place in Florida waters.

10.5 Future Expansion: We may expand our services to additional states in the future. If we do so, we will update this Privacy Policy and our Terms and Conditions accordingly, and will notify users of any material changes to our geographic coverage or privacy practices.

  1. INTERNATIONAL DATA TRANSFERS

11.1 The Platform is hosted in the United States and is currently intended for use by residents of Florida. By using the Platform, you consent to the processing and storage of your information in the United States in accordance with this Privacy Policy.

11.2 If we expand our services to other states or countries in the future, your information may be transferred to, stored, and processed in those jurisdictions. We will update this Privacy Policy to reflect any such expansion and will comply with applicable data protection laws in those jurisdictions.

  1. THIRD-PARTY LINKS AND SERVICES

12.1 The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by Skiff. This Privacy Policy does not apply to those third-party services.

12.2 We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

Third-Party Services We Use

12.3 The Platform integrates with the following third-party services, each of which has its own privacy policy:

12.3.1 Stripe: Payment processing (www.stripe.com/privacy). 12.3.2 Google Maps: Location services (policies.google.com/privacy). 12.3.3 Google Analytics: Usage analytics (policies.google.com/privacy).

  1. BACKGROUND CHECKS

13.1 Skiff may conduct background checks on users to promote safety and trust on the Platform. By creating an account, you consent to Skiff conducting background checks as described below.

What We Check

13.2 Background checks may include:

13.2.1 Criminal records and history. 13.2.2 Sex offender registry status. 13.2.3 Terrorist watch lists. 13.2.4 Sanctions lists.

When We Conduct Background Checks

13.3 We conduct background checks:

13.3.1 When you create an account (may be conducted before account approval). 13.3.2 When you list a boat as a Host. 13.3.3 Periodically during your use of the Platform. 13.3.4 When investigating safety concerns or Terms violations.

How We Use Background Check Information

13.4 We use background check information to:

13.4.1 Approve or deny account registration. 13.4.2 Suspend or terminate accounts. 13.4.3 Investigate safety concerns. 13.4.4 Comply with legal obligations.

Your Rights Under the Fair Credit Reporting Act (FCRA)

13.5 If we deny your account or take adverse action based on information in a background check report, you have rights under the Fair Credit Reporting Act (FCRA), including:

13.5.1 The right to receive a copy of the background check report. 13.5.2 The right to dispute inaccurate information with the background check provider. 13.5.3 The right to receive notice before adverse action is taken.

13.6 For more information about your FCRA rights, visit: www.consumer.ftc.gov/articles/pdf-0096-fair-credit-reporting-act.pdf.

  1. LOCATION INFORMATION

How We Collect Location Information

14.1 We collect location information in the following ways:

14.1.1 GPS/Device Location: When you enable location services on your device, we collect precise GPS coordinates. 14.1.2 IP Address: We derive approximate location from your IP address. 14.1.3 User-Provided Location: When you enter a location manually (e.g., when searching for boats).

How We Use Location Information

14.2 We use location information to:

14.2.1 Show you boats near your location. 14.2.2 Provide directions and navigation. 14.2.3 Verify that Captains and Renters are at the correct meeting location. 14.2.4 Improve safety and security. 14.2.5 Analyze usage patterns by geographic area.

Managing Location Settings

14.3 You can disable location services at any time through your device settings. However, this may limit your ability to use certain features of the Platform, such as finding boats near you.

  1. PAYMENT INFORMATION

15.1 Payment information (credit card numbers, bank account details) is collected and processed by our third-party payment processor, Stripe. Skiff does not directly store your full payment information on our servers.

15.2 When you provide payment information, it is transmitted directly to Stripe using secure encryption. Stripe stores your payment information according to their privacy policy and security standards, which comply with PCI-DSS (Payment Card Industry Data Security Standards).

15.3 We receive limited information from Stripe for billing and transaction purposes, such as:

15.3.1 Last four digits of your credit card. 15.3.2 Card type (Visa, Mastercard, etc.). 15.3.3 Expiration date. 15.3.4 Billing address. 15.3.5 Transaction status and history.

15.4 For more information about how Stripe handles your payment information, please review Stripe's Privacy Policy at: www.stripe.com/privacy.

  1. INSURANCE INFORMATION

16.1 Hosts who list boats on the Platform must provide proof of insurance. Insurance information may include:

16.1.1 Insurance provider name. 16.1.2 Policy number. 16.1.3 Coverage amounts. 16.1.4 Policy effective dates. 16.1.5 Proof of coverage documentation.

16.2 We use insurance information to:

16.2.1 Verify that listed boats have adequate insurance coverage. 16.2.2 Ensure compliance with our Terms and Conditions. 16.2.3 Facilitate claims in the event of damage or incidents.

16.3 Insurance information is shared only with:

16.3.1 Renters who book your boat (limited information). 16.3.2 Insurance providers and adjusters (in the event of a claim). 16.3.3 Law enforcement or legal authorities (when required by law).

  1. CHANGES TO THIS PRIVACY POLICY

17.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by:

17.1.1 Posting the updated Privacy Policy on the Platform with a new "Last Updated" date. 17.1.2 Sending you an email notification to the email address associated with your account. 17.1.3 Displaying a prominent notice on the Platform or within the App.

17.2 Your continued use of the Platform after we post changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated Privacy Policy, you must stop using the Platform and may delete your account.

17.3 We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

  1. HOW TO EXERCISE YOUR PRIVACY RIGHTS

Through Your Account Settings

18.1 You may exercise the following rights directly through your account settings:

18.1.1 Update your personal information. 18.1.2 Manage your communication preferences. 18.1.3 Control location settings. 18.1.4 View your booking history. 18.1.5 Delete your account.

By Contacting Us

18.2 For requests that cannot be completed through your account settings, please contact us at:

Email: team@skiffmiami.com Subject Line: Privacy Request - [Your Request Type]

18.3 Please include the following information in your request:

18.3.1 Your full name and email address associated with your account. 18.3.2 A description of your request. 18.3.3 Any relevant details or documentation.

Response Timeline

18.4 We will respond to your privacy request within 30 days.

Verification

18.5 To protect your privacy and security, we may need to verify your identity before processing your request. We may ask you to provide additional information or documentation to confirm that you are the account holder.

  1. DO NOT TRACK SIGNALS

19.1 Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. The Platform does not currently respond to DNT signals or similar mechanisms.

  1. CONTACT INFORMATION

20.1 If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us at:

Skiff, LLC Miami, FL United States Email: team@skiffmiami.com Subject Line: Privacy Inquiry

20.2 We will investigate your concern and respond within a reasonable timeframe.

  1. SUMMARY OF KEY PRIVACY PRACTICES

21.1 Information We Collect: Account information, payment details, Captain licenses, boat information, location data, usage information, messages.

21.2 How We Use It: Provide services, verify identity, process payments, ensure safety, improve Platform, comply with laws.

21.3 Who We Share With: Other users (limited info), service providers, law enforcement (when required), business partners (with consent).

21.4 Message Privacy: Messages are NOT end-to-end encrypted and may be accessed for disputes, safety, and legal compliance.

21.5 Data Retention: Account info retained for 3 years after deletion; booking info retained for 7 years; messages deleted 90 days after account deletion.

21.6 Your Rights: Access, correct, delete, and port your data; opt out of marketing communications.

21.7 Children: Platform not intended for users under 18; we do not knowingly collect data from children.

21.8 Security: SSL encryption, secure servers, access controls; however, no system is 100% secure.

21.9 Data Location: Hosted in the United States; users consent to data transfer to the U.S.

21.10 Sale of Data: We do NOT sell personal information to third parties.

Document Reference: SKIFF-PP-2026 Last Updated: May 6, 2026

END OF PRIVACY POLICY