Privacy Policy

Updated October 19, 2026. Unless you opt out, we measure page views, visible yacht listing impressions and views, listing-link clicks, searches, favorites, saved searches, phone and email clicks, brochure-link clicks, form starts, video plays, accepted inquiries, campaign sources (UTM parameters), referring domains including AI services, landing pages, and optional chat interactions, including when you browse without an HMY account. We use this information to understand which campaigns and pages help visitors find yachts.

Anonymous website analytics stores the event type, time, campaign fields, referring domain, and landing-page address with query strings and fragments removed. These records do not contain a visitor identifier, account ID, name, email, phone number, IP address, or user agent. We do not link these anonymous records to an account if you later sign in. Campaign tags should not contain personal information.

Listing measurement also stores the listing ID, website or iOS platform, display location, and traffic classification supplied by Cloudflare when available. Random event and page or screen exposure IDs prevent duplicate counts; they are not persistent visitor or device IDs. Pending events are retried from browser tab or app storage for up to 24 hours and cleared when you opt out.

Campaign attribution is kept in browser storage for up to 90 days; an untagged landing page is kept for the browser tab session. Anonymous listing records are available in reports for 90 days and deleted by an hourly cleanup, subject to job processing time. Daily totals by listing, platform, campaign, source, and landing page are retained for up to 25 months for daily, weekly, and year-over-year reporting. These totals contain no visitor or account identifier. Inquiry reporting uses the submitted inquiry and its consented attribution; inquiry and business records follow their separate retention practices. Deleted records may remain in recovery backups for up to seven days. Cloudflare and hosting providers also process requests and maintain separate security and operational logs under the infrastructure retention practices described below.

Optional analytics and marketing are enabled by default in every region. Opting out or enabling Global Privacy Control prevents new optional website and chat analytics and clears our stored marketing attribution. Your choice is remembered for up to 180 days; an explicit opt-out remains until you change it or clear browser storage. Opting out does not delete previously collected records.

Chat remains available when you decline. Messages, session state, inquiries, and necessary service and security records are still processed to answer you and deliver requests. Signed-in account features retain their own activity records; marketing attribution is attached only when allowed. Our authorized staff and service providers process this data. For access or deletion requests, contact marketing@hmy.com. Because anonymous website records have no visitor identifier, we cannot reliably associate them with an individual.

The iPhone and iPad app lets you browse without an account. When you sign in, HMY processes your account information, saved yachts and searches, browsing activity, and alert preferences to provide account features and understand yacht interests. Inquiry forms send the contact details and message you enter to HMY and its customer-service provider, HubSpot.

With your permission, the app sends listing impressions, views, clicks, and campaign source to HMY through Cloudflare, including when you are not signed in. This listing measurement excludes your account, contact details, advertising ID, and persistent device identifiers. Raw events are retained for 90 days and daily totals for up to 25 months. Change this choice with Listing analytics in My HMY; turning it off clears pending events and stops new collection. This choice controls HMY listing measurement separately from Firebase analytics described below.

Google Analytics for Firebase measures app usage, such as screen views, searches, and completed actions, using an app-instance identifier and general location derived from masked IP addresses. HMY does not send your name, email, phone number, or account ID to Firebase. The app does not collect an advertising identifier or use device location services for analytics.

Optional notifications use Apple Push Notification service and ReelPushy. HMY associates a notification token with your account to deliver requested alerts and selected HMY updates. Choose news, event, and featured-listing updates in Account > Notifications; manage price and saved-search alerts on the saved items. You can also turn off notifications in iOS Settings.

Account > Delete Account removes your profile and saved content. Inquiry and business records may be retained to handle your requests and applicable recordkeeping obligations. For access, correction, or deletion requests, email marketing@hmy.com.

This section covers the HMY Yacht Sales public yacht-search integration in ChatGPT, Codex, and other approved MCP clients. It supplements the website disclosures below. The integration searches public yacht listings, retrieves listing details, compares similar yachts, and provides available search filters. It does not require an HMY account, send broker inquiries, submit offers, edit listings, or process payments.

Information We Process

HMY receives the structured inputs your client sends to its tools, such as search terms, yacht preferences, price and size filters, a city or ZIP code for a nearby search, and listing identifiers. The tools do not request your full conversation, passwords, payment information, or government identifiers. Avoid including unrelated personal information in search text.

We also record technical audit and search-analytics information, including request time, method and tool names, request identifiers, connection IP address, client software information, response status, latency, tool inputs, and summaries of listing results. An IP address may identify a shared client platform rather than your device. Our audit records redact specified sensitive fields and email and phone patterns. New MCP search-analytics records use these filters as well. This does not guarantee that every personal detail in free text is removed.

How We Use and Process This Data

We use tool inputs to answer the yacht search or comparison you request. We use audit and search-analytics records to troubleshoot failures, maintain security and reliability, and improve search quality and performance, including choosing searches to cache. The public MCP service does not send its tool inputs to AI-model APIs. Your client platform processes information under its own policies.

Requests pass through Cloudflare and HMY's Rails API, hosted on DigitalOcean infrastructure. Authorized HMY personnel and infrastructure, hosting, security, and support providers process data for these service purposes. Access to HMY's AI audit interface requires an authenticated account with permission to read AI audits. Infrastructure administrators have separate operational access.

Retention

HMY retains AI audit and AI-related search-analytics records for 90 days. Expired audit records are excluded from the audit interface and deleted from the database by an hourly cleanup, subject to job processing time. Deleted records may temporarily remain in DigitalOcean recovery backups within its seven-day recovery window.

Separate Cloudflare infrastructure records have their own retention periods: Workers logs are retained for up to seven days and security events for up to 31 days. General Rails and Docker operational logs currently have no automatic age limit. Historical operational logs may contain request parameters captured before the additional AI request-log filtering deployed on October 6, 2026. New MCP tool arguments and submitted AI audit payloads are filtered from general Rails request logs. The 90-day database cleanup does not apply to every infrastructure-log copy.

Your Choices and Requests

You can stop using the integration and disconnect it in your client. There is no per-request logging opt-out or self-service audit deletion control. To ask about your information or request access, correction, or deletion, email marketing@hmy.com or call 561-277-4200. If available, include the approximate request date and request identifier to help us locate the relevant records. Do not send passwords or your full chat history. We may need additional information to verify a request; shared client-platform IP addresses can limit our ability to associate anonymous records with a particular person.

ChatGPT, Codex, and other client platforms have their own privacy policies and controls. When you follow a listing link or contact a broker outside the integration, HMY's website and contact-process disclosures apply.