Effective Date: April 10, 2026

Last Updated: April 10, 2026

INTRODUCTION

She Said Sail LLC, a Florida limited liability company (“Company,” “we,” “us,” or “our”), operates the website located at www.shesaidsail.com and any associated mobile applications, subdomains, and digital properties (collectively, the “Platform”). The Platform serves as an intermediary connecting boat owners and operators (“Operators”), vendors providing goods or services related to boating experiences (“Vendors”), and individuals or groups seeking to book boating experiences (“Users” or “Tour Seekers”). Operators, Vendors, and Tour Seekers may be referred to individually as a “Platform Participant” and collectively as “Platform Participants.” Platform Participants and all other visitors to the Platform may be referred to individually as a “Visitor” and collectively as “Visitors.”

This Privacy Policy (“Policy”) describes how we collect, use, disclose, store, and otherwise process your personal information when you access or use the Platform, communicate with us, or otherwise interact with our services. This Policy also describes your rights and choices with respect to your personal information and how you may contact us regarding our privacy practices.

BY ACCESSING OR USING THE PLATFORM, CREATING AN ACCOUNT, OR OTHERWISE PROVIDING INFORMATION TO US, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS POLICY. IF YOU DO NOT AGREE WITH THE TERMS OF THIS POLICY, YOU MUST NOT ACCESS OR USE THE PLATFORM. YOUR CONTINUED USE OF THE PLATFORM FOLLOWING THE POSTING OF ANY CHANGES TO THIS POLICY CONSTITUTES YOUR ACCEPTANCE OF SUCH CHANGES.

This Policy is incorporated into and forms part of our Terms of Use [INSERT HYPERLINK TO TERMS OF USE]. Capitalized terms not defined herein shall have the meanings ascribed to them in the Terms of Use.

INFORMATION WE COLLECT

We collect information in several ways, including information you provide directly to us, information collected automatically when you use the Platform, and information obtained from third-party sources. The categories of information we collect include, but are not limited to, the following:

Information You Provide Directly. When you register for an account, create a profile, list services, request a tour, communicate through the Platform, submit inquiries, or otherwise interact with us, you may provide us with the following categories of information:

(a) Identity and Contact Information: Full name, email address, telephone number, mailing address, and other contact details.

(b) Account Credentials: Username, password, and security questions or answers.

(c) Profile Information: Biographical information, profile photographs, and any other information you choose to include in your Platform profile.

(d) Operator and Vendor Information: Business name, business address, business license numbers, vessel registration and documentation numbers, United States Coast Guard (USCG) credentials, insurance information, certifications, descriptions of services offered, pricing information, availability, and other information relevant to the services provided.

(e) Tour Seeker Information: Group size, preferred dates, preferred locations, special requests, accessibility requirements, and other preferences related to desired boat tours.

(f) Payment and Financial Information: Credit card numbers, debit card numbers, bank account information, billing address, and other financial information necessary to process transactions. We do not directly collect or store your payment card information. All payment transactions are processed through our third-party payment processor, Stripe, whose use of your personal information is governed by its own privacy policy, available at www.stripe.com.

(g) Communications: Messages, reviews, ratings, feedback, and other content you submit through the Platform or send to us directly, including through email, telephone, or other communication channels.

(h) Verification Information: Government-issued identification, proof of licensure, proof of insurance, and other documentation submitted for identity verification or compliance purposes.

(i) User-Generated Content: Photographs, videos, testimonials, reviews, and other content you upload or post to the Platform.

Information Collected Automatically. When you access or use the Platform, we and our third-party service providers may automatically collect certain information, including but not limited to:

(a) Device and Browser Information: IP address, device type, unique device identifiers, operating system type and version, browser type and version, language preferences, and mobile network information.

(b) Usage Data: Pages viewed, links clicked, date and time of access, duration of visits, referring and exit URLs, search queries entered on the Platform, and other actions taken on the Platform.

(c) Location Information: Approximate geographic location as inferred from your IP address. [IF THE PLATFORM COLLECTS PRECISE GEOLOCATION DATA, ADD: “With your consent, we may also collect precise geolocation data from your mobile device or browser. You may disable location services through your device settings; however, doing so may limit certain features of the Platform.”]

(d) Cookies and Similar Technologies: Information collected through cookies, pixel tags, web beacons, local storage, and similar tracking technologies, as further described in the “Cookies and Tracking Technologies” section below.

Information from Third-Party Sources. We may receive information about you from third-party sources, including but not limited to:

(a) Third-party identity verification services and background check providers. We may use third-party services to conduct background checks on Operators and/or Vendors as part of our verification process. Such checks may include criminal history, driving records, and other public records, subject to applicable law.

(b) Social media platforms, if you choose to link your social media account to your Platform account or interact with us through social media.

(d) Publicly available sources, including government databases and public records.

HOW WE USE YOUR INFORMATION

We may use the information we collect for any lawful purpose, including but not limited to the following:

(a) Platform Operations and Service Delivery: To operate, maintain, and improve the Platform; to facilitate connections between Operators, Vendors, and Tour Seekers; to process and manage bookings, transactions, and payments; to create and manage your account; and to provide customer support.

(b) Communications: To send you transactional communications, including booking confirmations, payment receipts, and service-related notices; to respond to your inquiries and requests; and to send you marketing and promotional communications, subject to your preferences and applicable law.

(c) Personalization: To personalize your experience on the Platform, including by presenting content, recommendations, and advertisements tailored to your interests and preferences.

(d) Verification and Trust: To verify the identity, credentials, and qualifications of Operators and Vendors; to conduct background checks where permitted by law; to detect, investigate, and prevent fraud, unauthorized access, and other illegal or harmful activities; and to enforce our Terms of Use and other policies.

(e) Analytics and Improvement: To analyze usage trends and patterns; to measure the effectiveness of our Platform and marketing efforts; to conduct research and development; and to improve the Platform’s functionality, content, and user experience.

(f) Legal and Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests; to establish, exercise, or defend legal claims; to protect the rights, property, and safety of the Company, our Platform Participants, and the public; and to enforce our agreements.

(g) Business Transfers: In connection with, or during negotiations of, any merger, acquisition, sale of assets, financing, reorganization, bankruptcy, dissolution, or similar transaction involving all or a portion of the Company’s business or assets.

(h) Aggregated and De-Identified Data: To create aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you, which we may use for any lawful purpose without restriction.

HOW WE SHARE AND DISCLOSE YOUR INFORMATION

We may share or disclose your information in the following circumstances:

(a) Between Platform Participants: When you use the Platform to connect with other Platform Participants, certain information from your profile and communications may be shared with the relevant Operator, Vendor, or Tour Seeker to facilitate the requested services. For example, if a Tour Seeker requests a booking, certain information may be shared with the relevant Operator, and vice versa.

(b) Service Providers: We may share your information with third-party service providers who perform services on our behalf, including but not limited to payment processing, data hosting, data analytics, email delivery, marketing, customer support, identity verification, and background check services. These service providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Policy.

(c) Business Partners: We may share your information with business partners, co-sponsors, and other third parties with whom we collaborate to offer promotions, events, or joint services, such as the charter and vendor providers.

(d) Advertising and Analytics Partners: We may share your information with third-party advertising networks, analytics providers, and similar partners to deliver targeted advertising and to analyze and improve the Platform. These partners may include, but are not limited to, Google Analytics and Meta Pixel.

(e) Legal Obligations and Protection of Rights: We may disclose your information if we believe in good faith that such disclosure is necessary to: (i) comply with applicable law, regulation, legal process, or governmental request; (ii) enforce our Terms of Use, this Policy, or other agreements; (iii) detect, investigate, prevent, or address fraud, security, or technical issues; (iv) protect the rights, property, or safety of the Company, our Platform Participants, or the public; or (v) respond to an emergency involving danger of death or serious physical injury to any person.

(f) Business Transfers: In connection with any merger, acquisition, sale of all or substantially all of our assets, financing, reorganization, bankruptcy, receivership, dissolution, or similar transaction, your information may be transferred, sold, or otherwise conveyed to a successor entity. In such event, we will use reasonable efforts to direct the successor entity to use your information in a manner consistent with this Policy.

(g) With Your Consent: We may share your information with third parties when you have provided your express consent to such sharing.

(h) Aggregated and De-Identified Data: We may share aggregated, anonymized, or de-identified data with third parties for any lawful purpose. Such data cannot reasonably be used to identify you.

COOKIES AND TRACKING TECHNOLOGIES

We and our third-party partners use cookies, pixel tags, web beacons, local storage objects, and similar tracking technologies (collectively, “Tracking Technologies”) to collect information about your interactions with the Platform, to personalize your experience, to deliver targeted advertising, and to analyze Platform usage.

Types of Tracking Technologies We Use:

(a) Essential Cookies: These cookies are strictly necessary for the operation of the Platform and cannot be disabled. They enable core functionality such as account authentication, security, and session management.

(b) Performance and Analytics Cookies: These cookies collect information about how Visitors use the Platform, including which pages are visited most frequently and whether Visitors receive error messages. We use this information to improve the Platform’s performance and functionality. We use Google Analytics and Meta Pixel to collect and analyze usage data. For more information about how Google Analytics and Meta Pixel collect and process data, please visit www.google.com/analytics/terms and www.facebook.com/legal/business_terms, respectively.

(c) Functionality Cookies: These cookies allow the Platform to remember choices you make (such as your language preference or region) and provide enhanced, personalized features.

(d) Advertising and Targeting Cookies: These cookies are used to deliver advertisements that are relevant to your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

Managing Cookies: You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, if you disable or refuse cookies, some features of the Platform may not function properly.

DO NOT TRACK SIGNALS

The Platform does not currently respond to ‘Do Not Track’ (‘DNT’) signals transmitted by web browsers. There is no uniform standard for how DNT signals should be interpreted, and we do not commit to responding to such signals at this time.”

THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by the Company, including but not limited to websites of Operators, Vendors, payment processors, social media platforms, and advertising partners (collectively, “Third-Party Services”). This Policy does not apply to any Third-Party Services. We are not responsible for the privacy practices, content, or security of any Third-Party Services. We encourage you to review the privacy policies of any Third-Party Services before providing any personal information to them or interacting with them. Your interactions with Third-Party Services are governed solely by the terms and privacy policies of such Third-Party Services, and the Company disclaims all liability arising from or related to your use of any Third-Party Services.

DATA RETENTION

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, to enforce our agreements, and to protect our legitimate business interests. The specific retention period for your personal information depends on the nature of the information, the purposes for which it is processed, and applicable legal requirements. When your personal information is no longer required for the purposes described in this Policy, we will delete, anonymize, or de-identify it in accordance with our data retention policies and applicable law. Notwithstanding the foregoing, we may retain certain information as required by law or for legitimate business purposes, including but not limited to fraud prevention, dispute resolution, and enforcement of our agreements.

DATA SECURITY

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, disclosure, and destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure. ACCORDINGLY, WHILE WE STRIVE TO PROTECT YOUR PERSONAL INFORMATION, WE CANNOT AND DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION. YOU ACKNOWLEDGE AND AGREE THAT YOU TRANSMIT YOUR PERSONAL INFORMATION TO US AT YOUR OWN RISK. THE COMPANY SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, USE OF, OR DISCLOSURE OF YOUR PERSONAL INFORMATION RESULTING FROM CIRCUMSTANCES BEYOND OUR REASONABLE CONTROL, INCLUDING BUT NOT LIMITED TO HACKING, CYBERATTACKS, OR OTHER CRIMINAL ACTS OF THIRD PARTIES.

CHILDREN’S PRIVACY

The Platform is not directed to, and we do not knowingly collect personal information from, children under the age of 18. If we become aware that we have collected personal information from a child under the applicable age without verification of parental consent, we will take commercially reasonable steps to delete such information promptly. If you believe that we have collected personal information from a child under the applicable age, please contact us immediately at the contact information provided below.

YOUR RIGHTS AND CHOICES

Depending on your jurisdiction of residence, you may have certain rights with respect to your personal information, as described below. To exercise any of the rights described in this section, please submit a verifiable request to us using the contact information provided at the end of this Policy. We will respond to your request in accordance with applicable law. We may require you to verify your identity before processing your request.

Account Information: You may update, correct, or delete certain account information at any time by logging into your account and accessing your account settings. If you wish to delete your account entirely, please contact us at the contact information provided below. Please note that we may retain certain information as required by law or for legitimate business purposes after account deletion.

Marketing Communications: You may opt out of receiving promotional or marketing communications from us by following the unsubscribe instructions included in such communications or by contacting us at the contact information provided below. Please note that even if you opt out of marketing communications, we may continue to send you transactional and service-related communications.

Rights of California Residents. If you are a resident of the State of California, you may have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”):

(a) Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which such information was collected, the business or commercial purposes for collecting, selling, or sharing such information, and the categories of third parties to whom we have disclosed such information.

(b) Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions provided by law.

(c) Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.

(d) Right to Opt Out of Sale or Sharing: You have the right to opt out of the “sale” or “sharing” of your personal information, as those terms are defined under the CCPA. To opt out of the sale or sharing of your personal information, please email hello@shesaidsail.com.

(e) Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information (as defined under the CCPA), you have the right to limit our use and disclosure of such information to certain purposes. To limit our use of your sensitive personal information, please email us at hello@shesaidsail.com.

(f) Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

(g) Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require the authorized agent to provide proof of authorization and may require you to verify your identity directly with us.

INTERNATIONAL USERS

The Platform is operated from the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States and other jurisdictions in which our service providers operate. The data protection laws of the United States and such other jurisdictions may differ from those of your country of residence. By accessing or using the Platform or providing your information to us, you consent to the transfer, storage, and processing of your information in the United States and such other jurisdictions.

USER-GENERATED CONTENT

The Platform may allow you to post reviews, ratings, photographs, comments, and other content (“User-Generated Content”). Any User-Generated Content you post on the Platform may be visible to other Visitors and Platform Participants and may be indexed by search engines. You should exercise caution before disclosing any personal information in User-Generated Content, as such information will be publicly available and may be collected and used by third parties without our knowledge or control. THE COMPANY IS NOT RESPONSIBLE FOR ANY PERSONAL INFORMATION YOU CHOOSE TO INCLUDE IN USER-GENERATED CONTENT, AND YOU POST SUCH CONTENT AT YOUR OWN RISK.

DISCLAIMER OF LIABILITY

THE COMPANY PROVIDES THE PLATFORM ON AN “AS IS” AND “AS AVAILABLE” BASIS. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, WITH RESPECT TO THE PLATFORM AND THE PROTECTION OF YOUR PERSONAL INFORMATION.

THE COMPANY IS A PLATFORM THAT FACILITATES CONNECTIONS BETWEEN OPERATORS, VENDORS, AND TOUR SEEKERS. THE COMPANY IS NOT A PARTY TO ANY AGREEMENT BETWEEN PLATFORM PARTICIPANTS AND DOES NOT PROVIDE, CONTROL, OR ENDORSE ANY BOAT TOURS, VESSEL OPERATIONS, OR VENDOR SERVICES. THE COMPANY DOES NOT ASSUME ANY LIABILITY FOR THE ACTS, OMISSIONS, OR CONDUCT OF ANY OPERATOR, VENDOR, TOUR SEEKER, OR OTHER THIRD PARTY. ANY INFORMATION SHARED BETWEEN PLATFORM PARTICIPANTS THROUGH THE PLATFORM IS SHARED AT THE PLATFORM PARTICIPANTS’ OWN RISK.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE COMPANY, ITS MEMBERS, MANAGERS, OFFICERS, EMPLOYEES, AGENTS, CONTRACTORS, AFFILIATES, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF PROFITS, GOODWILL, DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELATED TO: (I) YOUR USE OF OR INABILITY TO USE THE PLATFORM; (II) ANY UNAUTHORIZED ACCESS TO, USE OF, OR ALTERATION OF YOUR PERSONAL INFORMATION; (III) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE PLATFORM; (IV) ANY BREACH OF THIS POLICY; OR (V) ANY OTHER MATTER RELATING TO THE PLATFORM OR THIS POLICY, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER LEGAL THEORY, EVEN IF THE COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY’S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THIS POLICY OR YOUR USE OF THE PLATFORM SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS PAID BY YOU TO THE COMPANY IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100.00).

INDEMNIFICATION

To the fullest extent permitted by applicable law, you agree to indemnify, defend, and hold harmless the Company, its members, managers, officers, employees, agents, contractors, affiliates, and licensors from and against any and all claims, demands, actions, liabilities, losses, damages, costs, and expenses (including reasonable attorneys’ fees and court costs) arising out of or related to: (a) your use of or access to the Platform; (b) your violation of this Policy or any applicable law, regulation, or third-party right; (c) any information you provide to us or through the Platform; (d) any User-Generated Content you post or transmit through the Platform; or (e) any dispute between you and any other Platform Participant or third party.

GOVERNING LAW AND DISPUTE RESOLUTION

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO FILE A LAWSUIT IN COURT AND TO HAVE A JURY TRIAL.

Any dispute, claim, or controversy arising out of or relating to these Terms, the Platform, or any transaction or relationship between you and the Company (collectively, “Disputes”) shall be resolved exclusively through final and binding arbitration administered by the American Arbitration Association (“AAA”) in accordance with its then-current Commercial Arbitration Rules, as modified by these Terms. The arbitration shall be conducted by a single arbitrator in Miami-Dade County, Florida. The arbitrator shall have the authority to award any relief that would be available in a court of competent jurisdiction, provided that the arbitrator shall not have the authority to award damages in excess of the limitations set forth in Section 9 of these Terms.

The arbitrator’s decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Each party shall bear its own costs and expenses of arbitration, including attorneys’ fees, unless the arbitrator determines that a claim was frivolous, in which case the arbitrator may award reasonable attorneys’ fees and costs to the prevailing party.

Notwithstanding the foregoing, the Company reserves the right to seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or to prevent irreparable harm, without the requirement of posting a bond or proving actual damages.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify, amend, or update this Policy at any time in our sole discretion. If we make material changes to this Policy, we will notify you by [INSERT NOTIFICATION METHOD, e.g., posting the updated Policy on the Platform with a revised “Last Updated” date, sending an email notification to the email address associated with your account, or displaying a prominent notice on the Platform]. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of and agreement to be bound by the revised Policy. We encourage you to review this Policy periodically to stay informed about our privacy practices. It is your sole responsibility to review this Policy for any changes.

CONTACT US

If you have any questions, concerns, or requests regarding this Policy or our privacy practices, please contact us at hello@shesaidmail.com.

SEVERABILITY

If any provision of this Policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other provision of this Policy, and this Policy shall be construed as if such invalid, illegal, or unenforceable provision had never been contained herein. The remaining provisions of this Policy shall continue in full force and effect.

ENTIRE AGREEMENT

This Policy, together with the Terms of Use and any other agreements or policies referenced herein, constitutes the entire agreement between you and the Company with respect to the subject matter hereof and supersedes all prior or contemporaneous communications, representations, or agreements, whether oral or written, with respect to such subject matter.

ACKNOWLEDGMENT

BY USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS POLICY, UNDERSTAND IT, AND AGREE TO BE BOUND BY ITS TERMS AND CONDITIONS. YOU FURTHER ACKNOWLEDGE THAT THIS POLICY, TOGETHER WITH THE TERMS OF USE, REPRESENTS THE COMPLETE AND EXCLUSIVE STATEMENT OF THE AGREEMENT BETWEEN YOU AND THE COMPANY REGARDING THE SUBJECT MATTER HEREOF.