Privacy notice

Last updated 15 October 2026 · Free beta

Who we are

Shipfy (shipfy.ai) is run by Artur Vlasov, an individual based in the United Arab Emirates, who decides how your data is used (the "controller"). Contact for anything about your data: info@shipfy.ai. General questions: info@shipfy.ai.

This notice is written to meet the UAE Personal Data Protection Law, the UK GDPR and the EU GDPR, and the main US state privacy laws, for readers in those places.

What we collect and why

Data	Why	How long
Your network (IP) address	Daily limits per network, abuse protection, security	90 days, then replaced by a keyed pseudonymous code
A random browser ID in the shipfy_reader cookie	To list and open your own reports in this browser, show you your request and keep your rating. Set only when you start a report, rate one or leave a comment	1 year from your last visit
The name of the network you use (looked up from the address, e.g. a company or mobile operator), your browser type, the pages you open, the link or site that brought you, and the time	Shipfy's own visit statistics: which organisations and channels use Shipfy. Only if you accept "Statistics"	30 days without a visit
Usage data collected by Google Analytics (pages, device, approximate location, events)	Measuring how Shipfy is used. Only if you accept "Analytics"	14 months in Google Analytics
Your cookie choice: a random consent ID, the time, your choices and the policy version (no IP address)	To show we asked and what you chose	2 years
Your request (prompt) and the report made from it	To make your report; to improve Shipfy	While Shipfy runs, or until you ask us to delete it
Ratings, the parts you found useful, whether the report answered your question, your role, what you would pay	To improve the reports and set fair prices	Until 24 months after the beta ends
Comments you send	To improve Shipfy. They are read by the Shipfy team only, never published and never passed to the AI	24 months
Emails you send us	To answer you	As long as needed to answer, at most 24 months
Server logs (time, address, page, errors)	Security and fixing problems	30 days

Full retention periods are in the data retention policy.

We do not ask for your name, email or company to use Shipfy, and we do not sell or share personal data for advertising. Please do not put personal data or confidential details (for example vessel names, counterparties or contract terms) into requests or comments.

Legal basis

Consent (UK/EU GDPR Art. 6(1)(a)): visit statistics and Google Analytics. They run only after you accept them, and you can withdraw consent at any time in Cookie settings.
Legitimate interests (Art. 6(1)(f)): running a free service safely, daily limits, preventing abuse, making and improving reports, and keeping a record of your cookie choice. You can object at any time.

Cookies and your choice

When you first visit, a banner asks for your choice: "Accept all", "Reject" or "Settings". Cookies Shipfy needs to work are always set. Two kinds are optional and off until you accept them:

Statistics: Shipfy's own visit statistics (the avs_sid session cookie and a lookup of your network's name). If you do not accept, Shipfy sets no avs_sid cookie and does not look up your network's name.
Analytics: Google Analytics 4. If you do not accept, the Google script is not loaded at all. If you accept, it runs with Google Consent Mode v2, Google Analytics does not store your IP address, and its data is kept 14 months.

Your choice is kept in the shipfy_consent cookie for 6 months, then we ask again. Each choice is also recorded on our server with a random ID, the time, your choices and the policy version, without your IP address, for 2 years. You can change your choice at any time in Cookie settings. Every cookie is listed in the cookie policy.

Your request and the AI

Reports are written by an AI model, Claude, provided by Anthropic PBC in the United States. Your request, together with market data from public sources, is sent to Anthropic to write your report. Under Anthropic's commercial terms, data sent through its API is not used to train its models; Anthropic may keep it for a limited time for safety and abuse checks.

Your request is stored with the report. It is shown only in the browser that made the request; the report page you share with others never contains it.

Who else handles data

Anthropic (report writing), DigitalOcean (hosting in Frankfurt, Germany), Google (Analytics, only with your consent) and Telegram (staff alerts, no personal data). Details, locations and transfer safeguards are in the sub-processor list. Transfers outside the UAE, UK or EU rely on the providers' data processing terms, including standard contractual clauses where they apply.

Security

How we protect data is summarised in the data security summary.

Your rights

You can ask to see, correct, export or delete your data, object to how we use it, ask us to restrict it, or withdraw consent. Write to info@shipfy.ai with the link to your report or the approximate time and network you used, so we can find your data; we answer within 30 days. Because we do not ask who you are, we can only find data linked to a report link, a browser or a network.

You can also complain to a data protection authority: in the UAE the UAE Data Office, in the UK the Information Commissioner's Office, in the EU the authority of your country.

Age

Shipfy is for professionals aged 18 or over.

Changes

We will update this notice when Shipfy changes (for example when sign-in arrives) and change the date at the top. If a change affects what you agreed to in the cookie banner, we ask again.