Effective date: 6 August 2026 · Version 1.1
ShorexFlow ("ShorexFlow", "we", "us") is an operations platform for cruise-port tour operators, operated by Shore Excursions International Inc., a Florida corporation, 1050 Brickell Avenue, Miami, FL 33131, USA. Contact: andres@shorexflow.com.
ShorexFlow is designed to operate on operational information — passenger counts, vehicles, timings, routes and assignments — not on the personal data of your guests. For routine operations, the system holds no passenger identities. A few specific features record limited guest details only where it is operationally necessary: a no-return ("passenger abandonment") or incident report records a passenger's name and cabin number so the individual can be identified for the ship. The optional guest-feedback survey stores only a guest's chosen nickname; it also asks for a cabin number purely as an anti-fraud check, which is not saved. The platform never collects dates of birth, financial information, or identity documents.
To run your operation, the system stores and processes the data below. This is automated: ShorexFlow operates the system as your data processor, but no one at ShorexFlow accesses your operational data outside the circumstances described in §5.
Your data is used only by the system to provide, secure and support the service for you. We do not sell it, and no one at ShorexFlow uses your operational data for any other or competing purpose (see the no-derivative-use commitment in the Terms of Service).
Data is stored in Supabase (managed PostgreSQL) hosted in the United States (AWS us-east-1), encrypted at rest (AES-256) and in transit (TLS). Supabase is itself SOC 2 and ISO 27001 certified at the platform level. Each organisation's data is isolated at the database level (row-level security), so one customer can never see another's.
While we are onboarding you — loading your data alongside your team and delivering training — you authorise us to enter and configure your workspace for those purposes. You decide when that period ends, and at its close we ask you to confirm in writing that the access took place and that onboarding is closed ("Handover"), together with the audit log covering it.
From Handover onward, ShorexFlow's administrators do not have access to your operational data. We enter your workspace only when your organisation's manager explicitly requests it, in writing, per incident. There is a single master key, held by the founder alone; every use of it is recorded in an audit log we are technically unable to delete, and which you may request at any time.
We use a small number of vetted providers strictly to run the service:
Customers subject to EU/UK/Swiss data-protection law receive the same list, with processing activities, locations and transfer mechanisms, in Annex 3 of the Data Processing Addendum. We give 30 days' written notice before adding or replacing a sub-processor.
We do not keep a separate copy or archive of your data outside the service. Your data resides in the service's database, isolated to your organisation and under your control, for as long as your account is active; routine encrypted backups are held within the database platform on a short rolling retention. You may export it at any time and request its deletion on termination, and you may ask what is held and request corrections. You may also request irrevocable deletion of all your data at any point during the term; we will action it within 5 business days and confirm in writing when it is complete. Contact: andres@shorexflow.com.
The service is hosted in the United States. For customers subject to EU/UK/Swiss data-protection law, a Data Processing Addendum incorporating Standard Contractual Clauses is available.
We will post any material changes to this policy and update the effective date. Questions: andres@shorexflow.com.