Privacy Policy

1. Who is responsible

Poseidon Distribution OPC ("we", "us"), the operator of DIVEOPS PRO, is responsible for the personal data processed through the DIVEOPS PRO website and mobile apps. Our registered address is 3rd Floor Perfectus Building, Door 1 & 2 Jacinto St., Barangay 32-D (Pob.), Poblacion, Davao City, Davao del Sur 8000, Philippines. For privacy questions and requests, email privacy@diveopspro.com.

Payments. Paid memberships are sold by the company for your region (Terms of Service, section 6). When your membership is sold by Rundzee, LLC (14900 Interurban Ave S, Ste 271, Tukwila, WA 98168-4654, USA), Rundzee, LLC is also responsible for the billing data of that membership: your name and email address, the plan, amounts, dates and payment records. Both companies are under common ownership and share only the data needed to run your membership.

2. What we collect

Account: your email address, name, password (stored only as a secure one-way hash; none if you only use Sign in with Google; if you use Sign in with Google in the Android app, your Google account ID and the name and verified email address Google shares with us), language, units and country, your confirmation that you are 18 or older, whether your email address is verified, the invite code you registered with, if any, and your membership status (plan, trial or founding-member seat).

Profile: the certifications you enter (agency, level, card number), the emergency contact you add (name and phone number), the signature image you draw on the website to sign your dives (it stays in your browser and is not sent to us), your online status (when you were last active; you can hide it from other users).

Dive logs and exposure ledger: the dives you log, import or scan, with their revisions, amendments and signatures; your tamper-evident exposure ledger; the operations, projects, chamber sessions and settings you sync; incident and near-miss reports you submit; and your job posts and job applications.

Certificates in files you attach: the photos and files you attach to messages can include certification cards, licences, training records, résumés and medical certificates. Medical certificates are health data: we keep them for you and show them only to the people you share them with. Incident reports can also contain health data, such as a description of decompression illness; only you and our administrators can read them. If, when you send a report, you agree that it may be shared anonymously, we may share it without your name or other details that identify you, so that other divers can learn from it.

Photos, files and messages: photos and files you upload or attach, including pictures of paper logbook pages you choose to scan; your direct messages, group and Lounge room posts and job-application messages; and your conversations, connections, invitations and blocks.

Calls: voice and video calls run directly between the participants' devices (WebRTC); they are encrypted and are never recorded or stored. To set up a call, our server relays short-lived call-signalling messages: who is calling whom, in which conversation and when, and the network connection details each device offers, which can include its IP addresses. During a call, the devices' IP addresses can be seen by the other participants, by the STUN servers that help connect the call (Google's public STUN servers) and, if a call is relayed, by the TURN relay server that carries its encrypted data.

Device ID: a random ID that the app or website creates the first time it runs on a device. It is not your device's hardware ID or advertising ID. It is sent when you register, sign in and sync, so that we can tell your devices apart, keep sync consistent and protect your sign-in sessions.

Security and technical data: your sign-in sessions (device ID, browser or app type and times); the IP address recorded with security events such as registration, sign-ins, failed sign-in attempts, password resets and email verification; and a record of each acceptance of these documents (version, time, IP address, browser or app type, platform and, if you typed one, the name you typed as your signature). Our hosting provider processes the IP address and other technical details of every request in order to deliver and protect the service. On the website, a few cookies remember your language, region, currency and country; your country is first estimated from your IP address by our hosting provider so that prices and emergency numbers match where you are, and you can change it. If you arrive through a partner's link, one more cookie holds the partner's referral code (section 15). The website uses no advertising or analytics cookies.

Emails we send you: a record of each account email and onboarding tip we send you (which email, its type, your language, when it was prepared and sent, whether it was delivered, and the message reference our email provider returns), your email preferences (whether you have stopped onboarding tips, and when), and delivery notices our email provider sends us, such as a bounce or a spam complaint, which include your email address.

Website analytics: the website counts page views with Vercel Web Analytics, which sets no cookies and does not track you across other websites or from one day to the next. We see only aggregated statistics, such as the pages viewed, the referring website, the country and the type of browser, operating system and device, never who you are. Codes and tokens in page addresses are removed before a page view is counted. The mobile apps contain no analytics.

Campaign attribution: when you first arrive on the website through a link with campaign tags (utm_source, utm_medium, utm_campaign, utm_content and utm_term), your browser keeps those tags with the page you arrived on and the time; a later tagged link does not replace them. If you then create an account, the tags are sent with your registration and stored with your account, so that we understand which campaigns bring new members. Only the tags of links you used are kept.

Location: the Emergency screen can show your current coordinates (approximate or precise, as you allow) so that you can read them out to rescuers. It asks for permission and reads your location only when you tap "Get my location". The coordinates are shown on your screen only: they are never sent to us or to anyone else and are not stored. DIVEOPS PRO does not use background location.

Support and feedback: emails you send to support@diveopspro.com or privacy@diveopspro.com, with our replies, and feedback you send in the app or on the website (category, rating, message, the page you were on and your language).

Payment records: paid plans are not sold inside the mobile apps, and the apps never handle payment details. When a payment is made on the website, card, e-wallet and bank details are entered on the payment provider's own page (Stripe, PayMongo or Xendit) and never reach us. We give the provider your account email address and account ID with the payment, and we keep the payment records the provider sends us: plan, amount, currency, dates, status, the provider's reference numbers and customer ID, and the provider's payment notifications, which can include the billing name and email address and payment-method details such as the card brand and last four digits.

If you buy a Lobby ad. We keep what you submit for the ad (company name, headline, text, link, images, the countries you choose), the package and price, the payment record and our review decision, so that we can show the ad, bill for it and meet our accounting duties. If you delete your account, ads that were not yet paid or approved are cancelled; an ad that was paid for and approved runs until the end of its booked period without any link to your account, and the payment record is kept for tax law without your name or email.

3. How we use it

To run the logbook and sync it between your devices; verify signatures, credentials and records you share; deliver messages and connect calls; send the emails described below; process payments and keep billing records; keep the service secure and prevent abuse, for example by limiting repeated sign-in attempts and by automatically checking room posts and incident reports against our community rules inside our own service; and answer support requests.

Account emails. We send every account the emails needed to use it and to tell you about changes to it: confirming your email address (when you register, and a new link if the first one expires), password resets, a notice before your trial ends, a notice when your trial has ended and your logbook has become read-only, and, for founding members, a notice before the founding membership ends and when it has ended. These emails are part of the service and are not promotional, so they have no unsubscribe link. They may state what a paid plan costs, without offers.

Onboarding tips. During your trial we may send up to four short emails on using DIVEOPS PRO: logging a first dive, getting a dive signed, preparing for work with no signal, and a summary of what your logbook holds. They are not advertising. Each one has a link to stop them with one click (also offered by your email app through the "unsubscribe" header), and you can switch them off at any time in Profile. Stopping tips does not stop account emails. Tips stop when your trial ends. To learn whether the tips are useful, a fixed group of about one in ten accounts, chosen at random, receives no tips.

To decide which email is due and to fill it in, we use: your email address, the first word of your name, your language, when you registered, whether and when you confirmed your email, when you were last active, your trial dates, whether you have a paid plan and until when, your founding-member seat and its end date, and counts from your logbook: how many dives have synced, when the first one synced, the date of your latest dive, and how many signatures your dives carry. We do not use the content of your dives, your certifications, your emergency contact or your location for these emails, and we do not track whether you open them or which links you click. Links in these emails carry campaign tags, as described in section 2.

Promotional emails. We do not send newsletters or offers. If we offer them in future, we will send them only to people who have opted in, with an unsubscribe link in every message.

Legal basis for emails. We send account emails because they are needed to provide the service under our terms (performance of a contract). We send onboarding tips on the basis of our legitimate interest in helping you use the service you signed up for, and you can object at any time with one click or in Profile. Where the law of your country requires your consent for such emails, we will ask for it first.

We do not use your data for advertising or profiling. The apps and website contain no crash-reporting tools and no advertising tools from other companies; the only analytics are the website's cookieless page-view statistics and the campaign tags described in section 2.

Lobby ads. The Lobby (on the website and in the apps) can show a few cards marked "Sponsored", from companies in the diving industry, and cards about DIVEOPS PRO itself. They are never shown on dive logging, emergency or safety screens. The ads are not targeted at you: everyone who opens the Lobby sees the same ads, except that an advertiser can limit its ad to certain countries, and the Lobby uses the country set in your app or website to choose them. We do not use your logbook, profile, CV, documents, messages, health data or anything else about you to choose ads, and we build no advertising profile. We do not count which ads you see or click, and we place no advertising cookies, pixels or identifiers. The ad images are delivered by DIVEOPS PRO, so advertisers receive nothing from you when an ad is shown. If you tap an ad, your browser opens the advertiser's website, and from then on that website's own privacy policy applies; like any link, it can see that you came from diveopspro.com, but not who you are. If you are signed in, you can report an ad; we keep your report (your account, the ad, your reason, the time and the IP address of the request) so that our team can review the ad and pause or remove it, and advertisers are not told who reported their ad.

4. Where it is stored

Your records are kept on your device first — on the website in your browser's storage, in the phone app in the app's on-device storage — and synced to our servers when you are signed in and online.

Hosting is in Singapore: our API runs in Vercel's Singapore region, and your account data and synced records are stored in a Neon Postgres database in the Singapore region. Uploaded files are kept in private Vercel Blob storage; they are never publicly reachable, and our API checks access before it serves a file.

The website is delivered through Vercel's global network, and some of the service providers listed below process data in other countries, including the United States.

5. Service providers

These service providers run parts of DIVEOPS PRO for us:

Vercel — hosting of the website and API, including private file storage (Vercel Blob), and the website's page-view statistics (Vercel Web Analytics).

Neon — the Postgres database.

Expo — sends push notifications to the mobile apps (through Apple Push Notification service and Google Firebase Cloud Messaging), only if you allow notifications; it receives the device's push token and the notification line, never message text.

Resend — sends our emails: account emails (email confirmation, password reset and notices about your trial, plan and founding membership) and onboarding tips. It receives your email address and the content of each email, and sends us delivery notices such as bounces and spam complaints. It may process this data in the United States.

ImprovMX — forwards the emails you send to support@diveopspro.com and privacy@diveopspro.com to the mailbox where we read and answer them.

Stripe (for memberships sold by Rundzee, LLC), PayMongo and Xendit (for memberships sold by Poseidon Distribution OPC) — payments made on the DIVEOPS PRO website; they receive your account email address, your account ID and what you enter at checkout, and keep their own payment records as the law requires of them.

Google — Sign in with Google (Android app only): if you choose it, Google confirms your identity and gives us your Google account ID, name and verified email address. Google also runs public STUN servers that help connect voice and video calls; they see the IP addresses of the devices on a call, never its content. In the Android app, the QR-code scanner uses Google's ML Kit, which reads the code on your phone; while the scanner runs, ML Kit sends Google technical diagnostics (device model and system version, app version, a per-installation ID, and performance and error data). It does not send the camera image or what the code contains.

Anthropic — only when the logbook scanner is switched on: a photo of a paper logbook page you choose to scan is sent to Anthropic's AI service to read the entries, which come back to you as drafts to review. Nothing else about you is sent with the photo.

6. Who sees your data

We never sell your personal data or dive records.

Other signed-in DIVEOPS PRO users can find you by your name or your exact email address and see your name and country; unless you hide your online status, they can also see when you were last active. Everything else is visible to others only when you choose: messages and calls, job posts and applications (open job posts are also listed publicly on diveopspro.com; the listing does not show your name), what you post in rooms, records and credentials you share, signatures you give on other divers' records, the parts of your CV you make visible to companies (section 13; there are no public CV pages), employer verification codes you hand out, and invite links you share, which show your name.

Apart from that, we share data only with the service providers above, between Poseidon Distribution OPC and Rundzee, LLC as far as needed to run paid memberships (section 1), with the group partner hub as section 15 describes, and when the law requires it.

7. How long we keep it

We keep your account, profile, records, files and messages for as long as your account exists, unless you delete them sooner. Shorter periods apply to:

Sign-in sessions: each session record expires 60 days after it is issued (using the app renews it) and is deleted a day after it expires.

Email links: verification links expire after 48 hours and password-reset links after 30 minutes; they are deleted after they expire, or a day after they are used.

Email records: the record of each email we send you, and your email preferences, are kept while your account exists, so that the same email is never sent twice and so that we can answer questions about what was sent. Test runs of our email system, which send nothing, leave records that are deleted after 14 days. If an email to you bounces permanently or is reported as spam, we keep a one-way hash of your email address, without your name or any link to your account, so that we do not email that address again; this hash is kept after your account is deleted.

Call-signalling messages: deleted once delivered, and otherwise automatically within about a day.

Rate-limit counters, which can contain an email or IP address: deleted a day after their time window ends.

Security records and your acceptances of these documents, with their IP addresses, are kept while your account exists, as evidence of security events and of what you agreed to. Billing records are kept after your account is deleted, without a link to you, for the period tax and accounting law requires (see section 12).

Deleted data can remain for a short time in our database provider's automatic restore history until that history expires. Service providers may also keep operational logs, such as email delivery logs, for limited periods under their own terms.

8. Deleting your account

You can delete your account in the app or on the website (Profile → Delete account), confirmed with your password, or with Google if you sign in with Google and have no password. If you cannot sign in, email support@diveopspro.com from the address on the account; we confirm the request and delete the account, usually within 7 days. The steps are published at diveopspro.com/account/delete. Deletion cannot be undone, so export your logbook first if you want a copy.

Deletion starts at once. A paid membership that renews automatically is first cancelled with the payment provider so that you are never charged again; if that cannot be done, nothing is deleted and you are asked to try again. Unfinished checkouts are cancelled, you are signed out on every device, your data is deleted as listed below, and your uploaded files are removed from storage straight afterwards.

Deleted: the link to your Google account, if any; your profile (name, country, certifications, emergency contact, CV settings and online status); your dives with their revisions and signatures, and dive proposals made to your logbook; your exposure ledger; your synced operations, projects, chamber sessions and settings; every file you uploaded, including certificates, medical certificates, photos, chat attachments and logbook scans; the messages you sent; your conversation memberships, invitations and bans; your connections and blocks; call signals; your job applications and the job posts nobody applied to; your incident reports; employer verification codes, invite links and share cards; organisation memberships; sessions, email links and rate-limit counters; your email records and email preferences; your security records, including IP addresses and failed sign-in attempts on your email address; your acceptances of these documents; trial records; and personal data inside provider notifications (payment and email providers).

Kept, without your name or any link to your account: signatures you gave on other divers' dives stay on their records as "Former supervisor (account deleted)", without your signature image, so that their records still verify; credential grants other divers gave you (revoked) and dives you proposed into their logbooks stay in their history; job posts that someone applied to are closed, with their description and pay details removed, and offer messages you wrote on them are removed; reports you filed, feedback you sent and room bans you issued stay without your account; and groups and rooms you created that still have members pass to their longest-standing member; and, if an email to you bounced permanently or was reported as spam, a one-way hash of your email address so that it is never emailed again.

Billing records — plan, amounts, currency, dates, status and provider references — are kept for tax and accounting law, without your account or provider customer ID, and with the payment-provider data in them redacted.

A minimal deletion record stays: the account ID with its creation and deletion dates (the email address is replaced and no password can work), your founding-member seat if you had one (seats are never reused), and one log entry identified only by a one-way hash of the account ID, holding the versions and dates of the documents you accepted and how many items were deleted — no IP address, device or name. A CV address you chose before public CV pages were retired (the handle text only) stays reserved for 90 days so that old links never show someone else.

What other people wrote about you in their own records, such as dive notes, messages or reports, belongs to their records and is not changed; this includes the note on a dive another diver accepted from you, which says who entered it. Payment providers keep their own records of your payments under the laws that apply to them.

Deleting your account in the phone app or on the website also erases the logbook stored on that phone or in that browser. Copies kept on your other devices — another browser, phone or tablet — stay there until you remove the app or clear the website's data, and exports and backups you made are yours to keep or delete.

9. Your choices and rights

You can export your logbook at any time (UDDF and full backup) and, on the website, download a copy of your account data (Profile → Download my data). You can correct your details in your profile, hide your online status, stop onboarding tips (with the link in any tip, or in Profile), stop sharing, revoke access you granted to others, delete messages and delete your account.

You can ask for a copy, correction or deletion of your data by emailing privacy@diveopspro.com or support@diveopspro.com.

Records you shared with others or signed for others may be retained by them as part of their own records.

DIVEOPS PRO is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a person under 18 has an account, email support@diveopspro.com.

10. Security

Data is encrypted in transit (HTTPS, and WebRTC encryption for calls). Passwords are stored only as secure hashes, uploaded files are private, and access to our systems is restricted.

11. Changes to this policy

If we change this policy we will update the version date and ask you to review and accept the new version before continuing.

12. Legal basis, transfers, retention and complaints

Legal basis. We process your data to provide the service you signed up for under our terms (performance of a contract): your account, logbook and sync, signatures and sharing, messages and calls, payments and account emails. We rely on our legitimate interests to keep the service secure and prevent abuse, to send onboarding tips you can stop at any time, and to count anonymous page views and campaign tags. We rely on your consent for the health data you choose to store (medical certificates and incident reports), for showing your location on the Emergency screen and for sharing an incident report anonymously; you can withdraw consent at any time without affecting what was done before. We keep billing records and answer lawful requests from authorities because the law requires it (legal obligation).

Transfers to other countries. Your data is stored in Singapore, and some of the service providers in section 5 process it in the United States and other countries. Where the law of your country requires it, these transfers rely on safeguards such as the standard contractual clauses in our providers' data-processing terms.

Billing records. After your account is deleted we keep billing records, without a link to you, for as long as the tax and accounting law of the seller's country (the Philippines for Poseidon Distribution OPC, the United States for Rundzee, LLC) requires, and for no longer than ten years.

Complaints. If you think we have not handled your data properly, please email privacy@diveopspro.com first. You can also complain to the National Privacy Commission of the Philippines (privacy.gov.ph) or, if you live in the European Union, the European Economic Area or the United Kingdom, to the data-protection authority of your country.

13. Your profile, CV, documents and sharing with companies

What you can add. All of this is optional. Profile: a photo, your full name, country and city of residence, phone number and contact email, nationality, languages, a short bio, a headline and your availability. CV: work history, certificates and qualifications, skills, references, training, work photos, and remarks that supervisors wrote when they signed your dives. Documents wallet: copies of certificates and credentials you upload, for example diving certificates, medical fitness certificates, offshore survival, first aid and oxygen certificates, your CV and, only if you choose, a passport or ID.

You enter it; we do not check it. Everything on your profile and CV is entered by you and every document is uploaded by you. We do not check, verify or approve any of it. A remark written by a referee you invite is shown as written by that person; a supervisor remark is shown as written by the person you named as supervisor. DIVEOPS PRO is a digital companion to your official logbook; it does not replace it.

Medical certificates are health data. Health data is a special category of personal data. We store and show a medical certificate only because you explicitly ask us to: you give explicit consent when you upload it, and again each time you include it in a share package. You can withdraw that consent at any time by deleting the document or revoking the package; this does not affect what was done before you withdrew it. We never use health data for any other purpose.

Passports and ID documents. A passport or national ID is sensitive in many countries (for example, government-issued identifiers are sensitive personal information under the Philippine Data Privacy Act, and passport numbers are sensitive personal information under California law). Upload one only if a company you deal with needs it, and consider covering numbers you do not need to show. We use it only to store it for you and to share it with the recipients you choose.

Private by default, and never public. There are no public CV pages: your CV and documents cannot be opened by the public or found through search engines. Every detail, CV section, CV entry and document starts as private. For each one you choose who can see it: Private (only you) or Companies (member companies on DIVEOPS PRO that have an active paid company plan, plus the people and companies you send a share package to). Company accounts without a paid plan see only your name and headline. Medical certificates are never shown through the Companies setting; they leave your account only in a share package you send with explicit health consent. If you make something private later, it disappears from what companies see and from every share package at once.

Share packages. You choose exactly which details, documents, dive logs (all, or a date range and type), CV and exposure history a package contains, and who receives it. You confirm your consent each time you share, and we record when you consented and which version of the consent text you saw. You can send a package to a DIVEOPS PRO account, which sees it under "Shared with us" (if you share with a company, every member of that company account can see it); to any email address, as a secret link, of which we store only a scrambled (hashed) form, so we cannot recover it; or with a job application, in which case the person who posted the job, and their company if the job belongs to one, receives it.

What recipients can do. Recipients can view the package, download a PDF summary and a ZIP of the original files you included, and contact you only through the details you shared. A package ends when it expires (30 days unless you choose another period, up to 365 days) or when you revoke it or a recipient; the link and in-app access then stop working. A recipient who downloads your files decides for itself how to use and keep them and is responsible for them under the law that applies to it; copies already downloaded are outside our control, so share only what you are comfortable with them keeping.

Recipients in other countries. The companies you choose may be anywhere in the world, including countries whose data protection laws differ from yours. We send a package there only because you direct us to; we never choose recipients for you.

Access log. We record each time a recipient views or downloads your package (the account, for in-app recipients, or which email link, plus the action and the time) and show this log to you, so that you can see who used what you shared and revoke access if needed. The log is kept until you delete the package or your account.

Referee invitations. If you invite a referee, we create a one-time link. The referee's name and remark are stored with your CV. You can hide the remark but cannot change it. A referee can ask us to remove their remark by emailing privacy@diveopspro.com.

Email to recipients. When you share by email, we send one email to the address you enter, naming you and the package. We do not use that address for anything else.

Files and security. We accept PDF, JPG and PNG files up to 3 MB, check that the file content matches its type, and refuse PDFs that contain scripts, launch actions or embedded files. Files are kept in private storage, are always delivered as downloads, and are served only to you, to the recipients you choose and, for CV photos and documents you set to Companies, to member companies on DIVEOPS PRO with an active paid company plan, after an access check each time.

Legal basis. We process your profile, contact details, CV, photos and documents to provide the features you ask for (performance of our contract with you). We share them with recipients on the basis of the consent you give each time you share, and show the parts you set to Companies to member companies on a paid plan on the basis of the consent you give by choosing that setting; you can withdraw it at any time by revoking the package or setting the item to Private. For medical certificates and other health data we rely on your explicit consent, as described above. We keep the access log on the basis of our legitimate interest, and yours, in showing you who used what you shared.

No sale and no other use. We never sell or rent these details or documents, never share them for advertising, and never use them for profiling. A package you send to a recipient you choose is shared at your direction and is not a sale.

Keeping and deleting. We keep these details until you delete them or your account. When you delete your account, we delete your profile details, CV, documents wallet, uploaded files, share packages, their recipients and their access logs. If another diver shared a package with you, their record of that share stays with them, revoked and no longer linked to your account, and your views in their access log become anonymous. A remark you wrote when signing another diver's dive is removed.

Your rights. You can see, correct, hide or delete each detail and document yourself, revoke any package or recipient, and download a copy of your account data, which includes your profile details, CV entries, documents wallet details, share packages with their recipients and access logs, packages shared with you, and your own views of packages; it never includes secret link or invitation codes. Your other rights and how to complain are in sections 9 and 12.

14. Company accounts, messaging, calls and notifications

Company accounts. If you create or join a company account, we keep the company details its staff enter (name, country, type, website, email domain, company profile sections, equipment, vessels, certificates, references, photos and files, Company lines, job posts and projects), the staff list with each person's role, invitations (we store only a scrambled form of the invitation code) and a record of what staff did for the company, such as edits, posts and decisions on applications. Company content is shown as entered by the company. When a company is deleted, its company data is deleted with it.

"Let companies find me". This setting is off by default. If you switch it on in your profile, companies on DIVEOPS PRO can find you in their availability search. A company with an active paid company plan sees your first name and the initial of your last name, your headline and your availability and, only for the fields you did not set to Private, your country of residence, nationality and languages, and can start a chat with you. Company accounts without a paid plan see only your short name and headline. Companies never see your phone number or email address through the search. We record each search (which company searched, the filters used and how many people were found). You can switch the setting off at any time; you then stop appearing in new searches.

Chats with companies. Messages between you and a company are read by the company's staff who handle its messages (owners, admins and recruiters). Phone numbers, email addresses and links typed into company chats are masked. Companies may use what they learn about you only for recruitment and may not pass it on (Terms of Service, section 11).

Messaging features. Together with your messages we keep your emoji reactions, the messages you star, messages you delete for yourself, and your chat settings (pinned, archived, muted and marked unread chats, who can see when you were last online, and whether you send read receipts). While you type, other participants see a typing indicator; that record is deleted within a minute. Group owners and admins can set group rules, such as admins-only posting and disappearing messages.

Link previews. When a message contains a web link, our server fetches the public title, description and image of that page and keeps them for up to 7 days, without any link to you or the message. The website sees a request from our server, not from your device.

Photos, videos, voice messages and files in chats. Files you send go straight from your device to our private file storage (Vercel Blob) and are checked by our server before they are shown (type and size; photos and documents up to 25 MB, videos up to 100 MB and voice messages up to 16 MB). Location and camera details are removed from JPEG and PNG photos. Files are served only to the participants of the chat, after an access check each time.

Call history. For voice and video calls we keep a call history: the conversation, who started the call, who was invited, whether it was a voice or video call, and when it started and ended. Calls themselves are never recorded and their content never reaches our servers. The history is deleted with the conversation; when you delete your account, your name is removed from the history of conversations that continue with other members.

Push notifications. If you allow notifications, we store a push address for each of your devices: in the mobile apps an Expo push token (Expo, our push provider, forwards notifications through Apple Push Notification service or Google Firebase Cloud Messaging), and in a browser the push subscription your browser gives us (delivered by your browser maker's push service, such as Google, Mozilla or Apple). Notifications say only that you have a new message or call and from whom; they never contain the message text. Notifications are not sent for chats you muted. You can switch notifications off in your device or browser settings, and push addresses are deleted when you delete your account.

Projects. If you post a project on the project board, its details, files and the companies' responses are shown to the companies you invite or, for a public project, to companies on DIVEOPS PRO; you can close it at any time.

Legal basis and your rights. We process this data to provide the features you use (performance of our contract with you), and keep search and staff records on the basis of our legitimate interest, and yours, in preventing misuse of divers' data. All of it is included when you download your account data and is deleted with your account as section 8 describes.

15. Partner referrals

Referral cookie. If you arrive at diveopspro.com through a partner's link (a web address with a referral code), the website sets a first-party cookie called grp_ref, and keeps a copy in your browser's local storage, that holds only that partner code. It lasts 60 days, is set only by us, is not an advertising or tracking cookie, and is used for one purpose: to credit the partner if you sign up or buy a membership. You can clear it in your browser at any time, and you can type or remove a referral code yourself at sign-up. The DIVEOPS PRO mobile app does the same on your device: if a partner's link opens the app, the app keeps only that partner code in its secure storage on your phone or tablet for 60 days (a later partner link replaces it) and shows it in the optional Partner code field when you create an account, where you can change it.

What the partner hub receives. The group partner program is run through a partner hub operated by Tuncer Technologies OPC, a company in the same group as Poseidon Distribution OPC and Rundzee, LLC, at partners.tuncertech.com. Only when a referral code is attached to your sign-up or payment, we send the hub: the partner code, an identifier for your account, a one-way hash of your email address (so that a partner cannot be credited for referring themselves, and so that the same account is never counted twice), and, for a paid membership sold by Poseidon Distribution OPC or Rundzee, LLC, the amount paid, the payment fee and tax, the currency, and any later refund or chargeback, so that the partner's commission can be calculated on what we actually kept. We never send your name, your email address itself, your logbook, profile, CV, documents or messages, and the partner is never told who you are: the partner sees only that a sign-up or payment was credited to their code.

Keeping and your rights. The hub keeps these records for as long as it needs them to pay and account for commissions, under the hub's own privacy notice at partners.tuncertech.com. The referral code is kept with your account and with the membership payment it applied to, is included when you download your account data, and is deleted with your account as section 8 describes; a hashed, pseudonymous record of past commissions can remain at the hub, without any link to you, as accounting law requires. Legal basis: our legitimate interest, and yours, in running a fair partner program and paying partners correctly.