Privacy Policy

Joshua is an AI assistant and can give incorrect or incomplete advice, including repair instructions. Use its answers as a starting point. Check your equipment’s manufacturer instructions before attempting a repair. For work affecting safety—or whenever you’re unsure—consult a qualified marine professional. Confirm parts compatibility, stock and prices with the supplier.

Joshua Supply uses Supabase to verify your email and retain your sign-in session, and Resend to deliver sign-in emails. Cloudflare Turnstile checks for automated abuse. Questions are sent to our AI provider to answer them. To continue after sign-in, a temporary copy of your conversation is stored for up to one hour, with expired records removed daily. Search results are retained for retry protection for one day, then removed daily. Usage records retain your user ID, request hashes and request timestamps for abuse prevention. Essential session cookies keep you signed in for up to 30 days. These features do not create a saved conversation history.

Account-only sign-in stores an expiring sign-in intent, without conversation text. Signing in alone does not save a conversation.

Troubleshooting and repair answers require a verified email session, as do supplier searches. Ordinary product guidance and the public map remain available without signing in. When you request a sign-in link, your question and conversation context are stored in the existing recipient-bound handoff for up to one hour so your question can resume once in chat, including on another device. Answers are not sent by email. Verification does not require newsletter, analytics or demand-insights consent; saved-history preferences remain separate.

Marketing is optional. After your first verified sign-in, choose Subscribe or No thanks in the welcome. Both choices allow access. We save your decision, time and notice version, and remember that you completed the welcome across devices. Accounts already verified at rollout skip it without changing their existing consent. Change or withdraw your subscription in Account at any time. This choice is separate from analytics, demand insights and saved history. Sign-in emails contain no promotional content. No campaigns or automatic marketing-list subscription are enabled. Notice version: 2026-10-11.

Signed-in conversations are saved automatically while history is enabled, independently of marketing and optional demand analytics. Submitted messages, replies and dated supplier cards are protected from other customers. Unsent text drafts are not saved; temporary photo uploads are described below. You can turn off future saving, delete one conversation or delete all from Your conversations. Threads expire 90 days after the last submitted user message; reopening or retrying an answer does not extend this period. Expired content is inaccessible immediately and removed by daily cleanup. Account deletion removes saved history. Minimal opaque deletion markers prevent stale devices restoring deleted threads. Backup copies follow the operator’s restricted backup retention; deleting chat does not delete separately consented demand records. Authorized administrators may read all retained saved conversations for service improvement and debugging. Access is restricted and audited. Deleting or expiring a conversation also removes access to its linked diagnostics. Access audit records contain no transcript text and are kept for up to 90 days; identifying conversation references are cleared on deletion or expiry cleanup. Anonymous and history-off exchanges remain temporary. Saved history does not opt you into optional demand analytics or marketing. Authorized administrators can also look up your account email, registration and confirmation details, last sign-in, and associated retained conversations. Account directory access is audited without storing emails or search text in the audit; account references are cleared when the account is deleted.

Photos require sign-in. They are stored privately and sent to our AI provider when you send your message. Saved photos follow conversation retention (90 days after your last message) and deletion. Unsaved photos expire after 24 hours. Authorized administrators can review saved photos. Avoid including personal information.

Joshua Supply is hosted by Hetzner in Germany. Our analytics and cookie-consent tools, Rybbit and CookieConsent, are open-source software that we self-host. Analytics data goes only to our Rybbit service under our control, not to third-party analytics vendors. CookieConsent is served with this website, runs locally in your browser and sends no data to its developer or a hosted consent service.

Only with your optional-analytics consent, we use self-hosted Rybbit analytics to measure visits, conversations, supplier searches and clicks. We send limited event counts, outcomes, language, supplier region and response times, plus campaign tags and the referring website’s origin. We do not send chat text, email addresses, supplier contact details or account identifiers to Rybbit, and do not record sessions. Your browser connects to analytics.actichains.com, which receives your IP address and browser information to process visits. We respect browser Do Not Track and Global Privacy Control signals. Authentication and administration pages are excluded. With demand-insights permission, we also count purchase prompts shown, saved voluntary answers, dismissals and save failures. These answers are customer reports, not verified purchases. Declining or withdrawing demand insights also stops future Rybbit events; deletion applies to the linked demand records described below.

Optional browser location is requested only when you choose Use my location. Precise coordinates remain in browser memory for distance calculations; they are not sent to the AI, analytics or saved history. Only your selected island/town is sent for searches. Clearing or changing area removes coordinates. Open map shares only the shop location with a maps app on mobile or Google Maps on desktop; it does not start directions or share your position. That service applies its own privacy policy. On the supplier map, Use my location selects an island without changing your chat destination. The precise fix is discarded after resolving the island; only the island filter is sent to the supplier directory. No background tracking.

Shop suggestions require sign-in and remain unverified until administrator review. Private submitter attribution and free-text explanations are removed after 90 days by daily cleanup, or earlier on request. Original public business details and review decisions remain in the supplier evidence queue; only reviewed business facts may be published. A suggestion never triggers AI research, supplier contact or a purchase report. Drafts expire after one hour and are removed on your next visit if the browser was closed. They are also removed on submission.

Your description, island, urgency, optional boat name/photo and verified email are shared with the Joshua Supply administrator to handle this request. They are kept for up to 90 days from submission, separately from chat history, newsletter subscriptions and optional analytics. A draft, including any photo, stays in this browser tab for up to one hour and is removed on the next visit after expiry or when the tab closes. For earlier deletion, contact admin@joshua.supply with your reference.

We store your answers, language, questionnaire version, entry point and submission time for up to 90 days. We do not automatically attach your account, contact details, conversation, photos or location. Only the administrator can review responses. Feedback does not subscribe you or enable tracking. Free text may identify you: please omit personal details.

Only this request is sent to the AI to prepare your draft. Joshua does not save the enquiry or send it to the supplier. Do not include personal information. Reports are private to administrators, kept for up to 90 days, and are not sent to suppliers.