Privacy Policy

Tactiqal LLC (“Tactiqal,” “we,” “us”) operates DiveHQ. This policy explains what data we collect through the DiveHQ platform, why we collect it, and how we handle it. It applies to dive shop operators who subscribe to DiveHQ (“shops,” “customers”) and to the divers whose information shops manage inside the platform.

1. Two roles: controller and processor

DiveHQ plays two separate roles depending on whose data is at issue, and it matters for how this policy applies.

• Shop account data. For information about the shop itself, meaning business details, staff logins, billing contacts, and subscription records, Tactiqal is the data controller. We decide how that data gets used, subject to this policy.
• Diver data. For information about a shop’s customers and divers, meaning names, contact details, certification history, medical questionnaire responses, waiver signatures, and trip bookings, Tactiqal acts as a data processor on the shop’s behalf. The shop controls that data and owns its own privacy notice to its divers. We process it only to provide the DiveHQ service to that shop, under the shop’s instructions.

2. What we collect

• Account and billing information. Shop name, staff names and emails, business address, and payment details. Our payment processor, Stripe, collects and stores the payment details; we don’t keep them on our own servers.
• Diver profile data. Name, contact details, emergency contacts, certification records, medical questionnaire answers, and signed waivers. The shop enters this data, or a diver enters it directly where a shop turns that option on.
• Booking and trip data. Trip assignments, deposit and payment records, and gear or equipment notes tied to a booking.
• Usage data. Log data, device and browser information, and product-usage events. We use this to operate, secure, and improve DiveHQ.

3. How we use data

We use the data described above to:

• Provide and operate the DiveHQ platform for a subscribing shop and its staff.
• Process payments and deposit holds on a shop’s behalf through Stripe.
• Send account, billing, and service-related communications to shop staff.
• Maintain security, prevent fraud, and troubleshoot issues.
• Improve DiveHQ’s features and reliability, using aggregated or de-identified data where possible.

We do not sell diver or shop data, and we do not use diver data to advertise to divers.

4. Where data lives

We host DiveHQ on Supabase infrastructure located in the United States. We isolate every shop’s data by tenant at the database level, so one shop’s divers, bookings, and records stay invisible to another shop. Payment processing runs through Stripe, which maintains its own security and compliance program. DiveHQ does not store full card numbers.

5. Data retention

We retain shop and diver data for as long as a shop’s subscription stays active, plus a reasonable period afterward to allow account recovery, meet legal recordkeeping obligations, and resolve billing disputes. A shop can request deletion of its data by contacting us at the address below, subject to records we must keep for legal, tax, or dispute-resolution purposes.

6. Cookies

The DiveHQ marketing site and application use a minimal set of cookies: strictly necessary cookies for authentication and session state, and a theme-preference cookie for light/dark mode. We do not use third-party advertising or cross-site tracking cookies.

7. Sharing and subprocessors

We share data with a limited set of service providers who help us run DiveHQ, each bound by contract to protect it: Supabase for database and hosting, Stripe for payment processing, and infrastructure and error-monitoring providers we use to keep the platform reliable. We do not sell personal information to third parties.

8. Your rights

A diver who wants to access, correct, or delete their information should contact the dive shop that holds their booking. The shop controls that data and sits in the best position to act on the request. If a shop needs our help fulfilling a request, or a diver can’t reach their shop, contact us at support@divehq.io and we’ll route it appropriately.

9. Changes to this policy

We may update this policy as DiveHQ evolves. When we make a material change, we update the date at the top of this page. If you keep using DiveHQ after a change, that means you accept the updated policy.

10. Contact

Send questions about this policy or how we handle data to hello@divehq.io. DiveHQ is a product of Tactiqal LLC, a Puerto Rico-based company. The laws of Puerto Rico and the United States govern this policy.

This page is a general-purpose template. An attorney has not reviewed it. It’s meant to give shops and divers a clear, honest picture of how DiveHQ handles data, not to serve as legal advice for any specific situation.