Privacy Policy

1.1 Broker Account Information

When a broker creates a Vesli account, we collect:

• Name and professional title
• Brokerage name and license information
• Email address
• Phone number (optional)
• Profile photo (optional)
• Payment information (processed and stored by Stripe; Vesli does not store raw payment data)
• Account attestation records (confirmation of licensure and content rights at signup)

1.2 Broker-Submitted Client Information

Brokers may optionally enter information about their clients and prospective sellers when creating client collections or Market Analysis reports. This may include:

• Client or seller name
• Client email address (optional, broker's discretion)
• Client phone number (optional, broker's discretion)

This information is entered solely by the broker for their own reference. Vesli does not independently collect, use, share, or contact individuals based on this information. It is stored securely and is visible only to the broker who entered it.

1.3 Buyer Engagement Data

When a Buyer accesses a client collection through a broker-shared link, we automatically collect:

• Listing reactions (Interested, Maybe, Not a Fit)
• Notes left on listings
• Time spent per listing, counted only while the listing is on screen and the page is in use
• How far a Buyer looks through a listing's photos, including which photos were viewed and whether a photo was opened full screen
• View counts per listing
• Showing requests submitted through the Platform
• Approximate session timing

Buyers are informed of this tracking via a disclosure screen displayed before they access any collection. No account creation is required for Buyers to access a client collection.

Time spent and photo viewing are recorded as simple counts and durations tied to the collection and listing, not to a name or contact detail. They are shown only to the broker who shared the collection, to help that broker understand which boats a Buyer is looking at. They are not sold, not shared with other brokers, and not used for advertising. Reactions, notes, time spent, and photo viewing can be deleted when the broker deletes the listing or collection.

Vesli may use a Buyer's reactions and the search a broker has described for that Buyer to suggest listings that may fit, for example the "Vesli found a fit" prompts shown to the broker. These suggestions are visible only to the broker who owns that collection. Any matching across a broker's own saved book of business is optional and controlled by the broker, and no Buyer information is shown to another broker.

1.4 Platform Usage Data

We collect standard technical data about how brokers use the Platform, including:

• Device type, browser type, and operating system
• IP address and approximate location
• Pages visited, features used, and time on Platform
• Error logs and crash reports

1.5 Market Analysis and Boat Folder Information

When a broker creates a Market Analysis report or saves boats to a My boats folder, we store the vessel details, photos, comparable listings, notes, brokerage branding, and any seller name the broker provides. Reports are private to the broker until the broker chooses to share a report link or export a PDF. Anyone with a shared link can view that report, so brokers should share links only with intended recipients.

1.6 Information From the Browser Extension

The Vesli browser extension reads a web page only when the broker clicks a Vesli button on that page. When clicked, the extension reads the visible text, page title, address, structured listing data, and photos of that single page and sends them to Vesli so the vessel details can be extracted and saved to the broker's account. On Facebook Marketplace, this includes the seller name and listing details shown on the page, which the broker uses to start a Market Analysis. On HubSpot, when the broker clicks to read a contact, the extension reads the text of that contact record that is loaded on screen (such as name, email, phone, notes, activity and form submissions). It is organized by an AI service and shown to the broker to review; only what the broker confirms is saved to a Vesli client collection, and the raw page text is not stored.

The extension does not:

• Collect browsing history or read pages in the background
• Read passwords, payment details, private messages, or form entries
• Contact sellers, send messages, or post anything on the broker's behalf
• Run on any page unless the broker has opened it

To keep the broker signed in, the extension stores a sign-in token in the browser's extension storage, along with the folder most recently chosen. Disconnecting the extension or removing it clears this data.

1.7 Public Broker Profile

A broker's digital business card is a public page. Information the broker places on it, such as name, photo, bio, contact details, and listings, is visible to anyone with the link.

2.1 To Provide the Platform

We use the information we collect to operate, maintain, and improve Vesli Collections, Sonar, Market Analysis, My boats, and the Vesli browser extension, including creating and displaying client collections, generating market analysis reports, sending broker notifications, and processing payments.

2.2 Platform Benchmarking and Analytics

Vesli uses aggregated, anonymized engagement data to measure platform performance and generate internal and external benchmarks. Examples include aggregate metrics such as average listing views per collection, overall reaction rates, and platform-wide activity trends. These metrics do not identify individual Buyers, brokers, or specific transactions.

2.3 AI Processing

To read listing pages, PDFs, and search requests, Vesli sends the relevant text and images to an AI service provider that returns structured vessel details. We send only what is needed for the request, and we use provider settings and terms that do not permit it to be used to train their models.

2.4 Communications

We may use broker email addresses to send account-related communications, service updates, and, where you have opted in, product announcements. Brokers may manage communication preferences from their account settings.

We do not sell personally identifiable client information, including client names, email addresses, phone numbers, or vessel preference data, to any third party, under any circumstances.

We do not:

• Share individual Buyer data with any party other than the broker who created that client's collection
• Use Buyer data to contact Buyers directly
• Use client information for advertising or marketing purposes
• Share broker client lists with other brokers
• Sell or transfer information collected through the browser extension to third parties, or use it for advertising, profiling, or credit decisions
• Allow people at Vesli to read extension data, except when needed for security, to comply with law, or with the broker's consent

Information received through the browser extension is used only to provide and improve the extension's single purpose: saving boat listings to the broker's Vesli account and starting market analyses from them.

Vesli does not sell your data. We may share information in the following limited circumstances:

• Service Providers: With third-party vendors who help us operate the Platform (e.g., Firebase for database hosting and sign-in, Vercel for web hosting, Stripe for payments, Resend for email notifications, an AI provider for reading listings and documents, and a web retrieval provider for reading public listing pages). Report maps send listing location text to OpenStreetMap's Nominatim geocoding service and load map tiles from Esri, without any broker or client identity. These vendors are contractually required to protect your information and may not use it for their own purposes.
• Legal Requirements: If required by law, regulation, or valid legal process, we may disclose information to comply with applicable legal obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of Vesli's assets, user data may be transferred to the successor entity, subject to the same privacy commitments.

Broker account data, client collections, Market Analysis reports, and My boats folders are retained for as long as your account is active. Brokers may delete boats and folders at any time, and may delete individual client collections and reports (some deletion features are in development). Upon account closure, personally identifiable client information entered by the broker will be deleted from active systems.

Anonymized engagement data may be retained after account closure for internal benchmarking purposes. This data is not linked to identifiable individuals or specific brokers.

Vesli does not currently offer a defined data export window for account closure. Brokers who wish to retain records of their client collections should export relevant data before closing their account.

Buyers who access a client collection are informed of engagement tracking via a disclosure screen before accessing collection content. Because Buyers do not create Vesli accounts, their engagement data is associated with their broker's collection, not a personal Vesli profile.

Buyers who wish to request deletion of their engagement data may contact their broker directly, or contact Vesli at privacy@vesli.app. We will work with the relevant broker to fulfill reasonable deletion requests where technically feasible.

Vesli is operated from the United States. If you access the Platform from outside the United States, including from the European Economic Area (EEA), please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For users in the EEA, Vesli acts as a data processor with respect to Buyer engagement data collected on behalf of brokers (who are the data controllers for their client interactions). Brokers operating in the EEA are responsible for ensuring they have an appropriate legal basis for sharing client data with the Platform.

We are committed to applying reasonable and appropriate protections for all users regardless of location, and will update our international data transfer practices as the Platform grows.

Vesli uses industry-standard security practices to protect your data, including:

• Firebase security rules that ensure brokers can only access their own data
• Encrypted data transmission via HTTPS
• Payment data processed entirely by Stripe (PCI-DSS compliant); Vesli does not store card numbers or bank details
• Access controls limiting Platform infrastructure access to authorized personnel

No system is perfectly secure. If you discover a security vulnerability, please report it responsibly to security@vesli.app.

Boat listings that brokers save or import remain the property of the original brokers, sellers, and websites. Vesli shows a source credit with imported listings. Brokers are responsible for using listing content in line with the terms of the sites they have access to and for having the right to share it with their clients.

Vesli uses browser local storage and session data to maintain your login state, remember onboarding preferences (such as first-reaction tooltips on client collections, and your choice of list or grid layout and which home panels are collapsed), and improve your experience. We do not use third-party advertising cookies. The browser extension uses the browser's extension storage for the sign-in token and folder choice described above.

We may update this Privacy Policy from time to time. We will notify registered brokers of material changes via email or in-Platform notice. The effective date at the top of this document reflects the most recent update. Continued use of the Platform after notice of changes constitutes acceptance of the updated Policy.

For privacy-related questions or requests, contact Vesli LLC at:

• Email: privacy@vesli.app
• Website: vesli.app
• Mailing Address: Vesli LLC, 1000 Brickell Ave, Ste 715 PMB 2237, Miami, FL 33131