Privacy policy
Updated
This notice covers Caboto’s website conversations, waiting list and connected accounts. Caboto Ltd (company number 17530039), Flat 14, 9 Eastcheap, London, EC3M 1BN, United Kingdom, is responsible for this information. Contact help@caboto.ai.
Website chat and the waiting list
When you chat with Caboto, we process your messages, our replies, conversation timestamps and a temporary browser session identifier. Your browser stores that identifier so we can restore an available conversation after a reload. Appearance preferences are also stored on your device.
If you apply to the waiting list, we collect the name, role, optional yacht details or notes and contact information you enter, together with the verification and application status. An email code verifies control of your address. Joining the waiting list does not create yacht access or start billing.
We use this information to answer your questions, continue your conversation, verify and manage your application, and contact you about the access you requested. We also process technical information, including request and security-check information, to prevent abuse and investigate faults. You can browse without applying; contact verification is needed to confirm an application.
Conversation diagnostics
We save diagnostic records of generated replies to investigate errors, measure performance and evaluate response quality. These records may contain conversation text, names and other information you include. We filter common contact details, verification codes and credentials from diagnostics, but this is not a guarantee that all personal information is removed. Please do not put private yacht records, passwords or verification codes in the chat.
Connected messaging and accounts
If you use Caboto’s WhatsApp integration, we receive your number and messaging identifiers, messages and replies, and timestamps and delivery information. If you link an account, we also use its identity, current access permissions and notification choices. These records support the conversation, access checks and notifications you request. Meta/WhatsApp also processes messages under its own privacy policy.
Why we process this information
We rely on our legitimate interests in responding to enquiries, managing requested early access, improving reply quality and keeping the service secure. We rely on consent for optional notifications. You can withdraw that consent or object to processing based on legitimate interests by contacting us.
Service providers
Our website hosting, security-check, email delivery, database, authentication and AI service providers process the information needed to provide these functions. Relevant conversation content is sent to AI services to generate replies. Providers may process information outside the UK; contact us for information about the applicable processing locations and transfer safeguards. We do not use your waiting-list application to grant access to private yacht records.
How long we keep information
Temporary server-side website conversations expire after 24 hours. Diagnostic traces have a seven-day retention policy and are removed by scheduled cleanup. The temporary browser session identifier can remain in the current tab until you close it or clear its session storage. Appearance preferences remain until you change them or clear site storage.
Waiting-list application records are subject to scheduled cleanup: unconfirmed applications become eligible after their challenge has been expired for 24 hours, and confirmed applications after one year. Verification-attempt and security records have separate, shorter retention periods. Authentication records and service backups are separate from these application records. Other account and messaging information is retained while needed to provide the service, resolve a request or meet a legal obligation.
Your choices and deletion
To leave the waiting list or request access, correction or deletion, email help@caboto.ai with the subject “Caboto data request”. Include the address you used to apply, or your WhatsApp number including country code if your request concerns messaging. This is available even if you no longer have access to Caboto. We may ask for information needed to verify that the request is yours.
Send STOP to stop proactive WhatsApp notifications. Stopping notifications, clearing your browser or unlinking an account does not itself erase server-side application, authentication or diagnostic records. We will explain the outcome of a deletion request and any information we are legally required to retain. You may also ask us to restrict processing, request a portable copy where applicable, or complain to the Information Commissioner’s Office.