Privacy Policy

Scope

What This Policy Covers

This policy applies to the Instant Sail website and application, account signup and login, published business websites, customer-facing proposals and payment workflows, support workflows, and related business tools.

Account access, billing, user content, acceptable use, disputes, and other service activity may also be governed by applicable service terms.

Instant Sail is designed so customer-facing pages can collect and display approved information while protected business decisions, record changes, and workflow updates are handled through controlled backend services.

Personal and Business Information

Data We Collect

Depending on the workflow used, Instant Sail may collect or process:

• Account identifiers such as user ID, name, display name, company name, email address, role, and account status.
• Signup details such as legal name, birthday for age eligibility, business name, email address, and password or supported single sign-on.
• Business profile details such as phone number, address, service area, public business statements, website settings, support settings, proposal defaults, tax settings, and payment preferences.
• Customer, client, product, property, proposal, contractor, tax-readiness, support, email-workflow, and accounting-adjacent records entered into a workspace.
• Operational records such as audit logs, server workflow events, checkout records, payment status records, diagnostics, timestamps, and security events.

Information may become public when an owner publishes it to a business website or sends it through a proposal, email, document, payment link, or support workflow.

Sensitive Data Notices

Privacy Notices Near Protected Workflows

Instant Sail may display this policy or a related notice near workflows requesting a legal name, birthday, Social Security number, taxpayer identification number, address, owner identity, payment settings, contractor records, customer records, or similarly regulated business information.

Users should review the notice before submitting protected information. Anyone submitting information for a business, customer, contractor, owner, or other third party is responsible for having the necessary authority and consent.

Login and Account Access

Login Data

Login may use email and password or supported single sign-on. Instant Sail verifies authenticated sessions before returning account data or performing protected business actions.

The signup process may collect a full name, birthday, company name, email address, and password. Password handling is performed by the authentication provider.

Users are responsible for protecting credentials, devices, browser sessions, and account access, and should report suspected unauthorized access promptly through the available support channel.

Minors may require parent or guardian participation before using account, business, payment, proposal, tax, or contractor workflows. Instant Sail does not determine a person's legal capacity to enter a contract, submit tax information, or operate a business.

Published Business Data

Business Websites and Public Data

Instant Sail business websites can display a company name, public statements, services, contact paths, proposal or customer workflow entry points, and other content configured for publication.

Do not publish private customer data, payment secrets, bank details, tax identifiers, private documents, or sensitive internal notes. Published content may be viewed by customers, prospects, search engines, and other public visitors.

Financial Information

Payments, Billing, and Accounting Data

Instant Sail may store subscription status, billing policy, proposal payment records, checkout identifiers, payment phase and status, balances, fees, refunds, disputes, accounting-export metadata, and audit history to support operational accounting and workflow visibility.

Stripe may provide card collection and hosted checkout. Instant Sail does not store full card numbers, CVV codes, or bank credentials in workspace forms. Stripe and participating financial institutions remain the payment and money-movement systems of record.

Payment processors, banks, card networks, and manual payment arrangements may control checkout availability, settlement timing, fees, refunds, disputes, chargebacks, verification, taxes, provider notices, and their own terms. Instant Sail records do not replace provider records.

Tax, contractor, vendor, payment-eligibility, and accounting-export information can be sensitive and should be available only to authorized account users.

Third-Party Use Cases

How Third-Party Services Are Used

Instant Sail may use third-party providers to support core operations, including:

• Authentication, identity, hosting, database, and file operations.
• Single sign-on when a user chooses a supported external account.
• Payment checkout, subscriptions, payment status, and payment-record workflows.
• Email delivery for support, review, proposal, contractor, and account messages.
• Browser, network, and infrastructure services used to serve pages, protect traffic, reduce abuse, and operate the service.

Third-party providers may process data under their own terms and privacy policies. Users should review those policies when using connected features.

AI and Web Research

AI Business Guide Data Use

When an authorized business owner uses the AI Business Guide, Instant Sail may send the owner's question, approved business-profile facts, Business Plan Survey information, readiness responses, and business-plan projection context to an AI service provider. The feature may use web-search grounding to provide current market comparisons, pricing ranges, and industry information.

Users must not enter customer information, payment or bank details, tax identifiers, passwords, credentials, private addresses, or other protected information. Instant Sail may record limited technical telemetry such as model and prompt versions, token counts, latency, outcome, and selected guidance identity without treating temporary generated answers as authoritative business records.

When search grounding is used, the provider may retain derived search queries and contextual information according to its applicable service terms and privacy commitments. Search-derived sources may be shown with an answer so the business owner can review them.

Service Providers

Cloud Service Providers

Instant Sail uses trusted cloud service providers for authentication, hosting, backend processing, and data storage. Production systems are separated from development and test environments where appropriate.

Authentication providers help manage sign-in credentials and session verification. Protected records are accessed or changed only after appropriate authorization checks.

Cookies and Sessions

Cookies, Local Storage, and Session Mirrors

Instant Sail may use cookies, browser storage, session tools, and provider-managed authentication storage to keep users signed in, remember account context, support protected pages, and operate the application.

The application may temporarily display or cache limited session details in the browser. Browser-visible information is not treated as authoritative business data and does not replace backend authorization checks or protected records.

Google tools such as Translate may use cookies or similar browser storage under Google's policies. Core page content remains available without choosing a translated language.

Instant Sail does not intend to use optional analytics, marketing pixels, ad signals, or session replay without providing any notice or consent choice required by law. Sensitive pages should not use marketing or replay tools unless specifically reviewed and approved for that workflow.

Privacy Rights

Access, Correction, Deletion, and Sharing

Users may request access, correction, deletion, portability review, or restriction of certain personal information through Instant Sail support. A request may be verified before action is taken. Some records may be retained for security, fraud prevention, audit history, accounting, tax support, payment disputes, legal obligations, completed transactions, signed-proposal history, or business continuity.

Instant Sail may promote a user's business by sharing public business information, published website content, service descriptions, contact paths, and other user-approved public details. Instant Sail does not intend to sell private account, tax, payment, protected customer, contractor, or support records. If future activity is considered a sale or sharing under applicable law, Instant Sail will provide any required notice and opt-out path.

Privacy Representatives

EU, EEA, and UK Representative Review

Instant Sail does not currently assign an EU or UK privacy representative because the service is presently intended for United States availability and is not intentionally marketed to EU or UK users.

Before expanding availability to EU, EEA, or UK users, Instant Sail should review whether GDPR, UK GDPR, representative, or Data Protection Officer obligations apply.

Accessibility

Accessibility Statement

Instant Sail aims to make public pages and core application workflows accessible and usable. The target for new and updated public-facing pages is WCAG 2.2 AA where reasonably achievable for the feature, technology, and workflow. Accessibility barriers may be reported through Instant Sail support with the page URL, device and browser details, assistive technology used when relevant, and a description of the barrier.

Data and Security

Security Approach

Instant Sail safeguards account information, published business content, payment-related records, proposals, customer records, workflow data, and operational history through server-owned validation, access controls, audit history, account settings, and operational safeguards designed to preserve confidentiality, integrity, and authorized use.

• Protected account data requires authenticated and authorized access before it is returned or changed.
• Protected backend services handle business validation, workflow transitions, payment records, and audit history.
• Production business data is handled through controlled production storage.
• Sensitive provider credentials are not intended to be exposed in browser code or public pages.
• Payment-provider confirmations are validated before related records are updated.
• Audit history may preserve important workflow events and protected business actions.

No internet service can guarantee absolute security. Users are responsible for strong passwords, safe device access, prompt account review, and keeping private business records out of public fields.

Retention and Deletion

Data Retention

Instant Sail keeps account, workflow, payment, audit, and business records as needed to provide the service, maintain security, support accounting and tax workflows, resolve disputes, comply with obligations, and preserve historical business context.

Some records may be deactivated instead of hard-deleted so audit history, accounting records, signed proposals, and payment records remain consistent. Users may request an account or data review through support.

Policy Versions

Privacy Policy Versions

This notice displays its effective date and version identifier. Instant Sail may preserve prior versions and associate the applicable version with account, workflow, support, security, or audit history. Later use of the service is subject to the notice in effect at the time of that visit or action.

Contact

Questions and Requests

For privacy, security, account-data, accessibility, or privacy-rights questions, contact Instant Sail through its current support workflow.