SMS Builder — sms-builder.com

Privacy Policy

Commercial Vessel Safety Management System — Australia & New Zealand

SMS Builder (“we”, “us”, “our”) operates the website sms-builder.com and the associated API. We provide a web-based platform that helps commercial vessel operators in Australia and New Zealand create, manage, and export Safety Management System (SMS) documentation in accordance with AMSA Marine Order 504 and Maritime NZ Maritime Rule Part 19.

This policy explains what personal information we collect, how we use it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information We Collect

Account information — Your email address and a hashed password when you register. We never store passwords in plain text.
Vessel and SMS data — Details you enter about your vessel(s), crew, safety equipment, operating area, and other fields required to generate your SMS. This data is stored in our database and associated with your account.
Photos — Images you upload of equipment, certificates, and vessel areas to auto-populate your SMS via AI photo analysis. Photos are stored in our secure cloud object storage.
Billing information — When you subscribe, payment is processed by Stripe. We store your Stripe customer ID and subscription status; we do not store credit card numbers or full payment details.
Usage logs — Standard server logs (IP address, request path, timestamp) retained for up to 30 days for security and debugging. No behavioural analytics or third-party tracking scripts are used.

How We Use Your Information

To create and maintain your account and vessels.
To generate and export your PDF Safety Management System documents.
To process AI photo analysis requests via our OpenAI integration.
To send transactional emails (password reset, subscription receipts, regulatory change notifications) via Resend. We do not send unsolicited marketing email.
To manage your subscription via Stripe.
To operate and improve the platform.

AI Photo Processing

When you use the AI Build features, photos and captions you submit are sent to OpenAI’s API for analysis. OpenAI processes this data under their Privacy Policy. We do not use your photos to train AI models. Only users on paid subscription tiers (Skipper, Fleet, Consultant) can access AI photo features.

Third-Party Services

Stripe — Payment processing and subscription management. Stripe Privacy Policy.
OpenAI — AI-powered photo analysis and SMS content extraction. OpenAI Privacy Policy.
Resend — Transactional email delivery. Resend Privacy Policy.

Data Storage and Security

Your data is stored on servers in the United States operated by Replit and Neon (PostgreSQL). All data is transmitted over HTTPS/TLS. Database connections use TLS. Passwords are hashed using bcrypt. We apply the principle of least privilege to internal service access.

QR access codes generated for your vessel (client and helm cards) are scoped tokens — they provide read-only access to that vessel’s public safety data and do not expose your account or billing details.

Data Retention

Your account data, vessel records, and uploaded photos are retained for as long as your account is active. You may request deletion at any time by contacting us (see below). Stripe billing records are subject to Stripe’s own retention obligations. Server logs are deleted after 30 days.

Your Rights

Under the Australian Privacy Act and applicable law, you have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your account and associated personal data.
Withdraw consent for optional processing (e.g. AI photo analysis) by not using those features.

To exercise any of these rights, contact us at the email address below.

Children’s Privacy

SMS Builder is intended for use by commercial vessel operators and marine industry professionals. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy as the platform evolves. The “Last updated” date below will reflect any changes. Continued use of SMS Builder after a policy update constitutes acceptance of the revised policy. Significant changes will be notified via email where required by law.

Contact

For privacy questions, data requests, or to request account deletion, contact us at:
jimbojames86@live.com.au

Last updated: June 2026 · SMS Builder — sms-builder.com