1. Who we are
This policy explains what personal data GMC Link collects, why we use it, and what rights you have. The data controller is GeoMarine Crew Link (placeholder), identification code 000000000, registered at Batumi, Georgia (placeholder). For any privacy question, write to info@gmc-link.com.
2. What data we collect
We collect only what the platform needs to work:
- Account data: name, email address, password (stored only as a hash), account type.
- Profile data: rank, qualifications, sea-service entries, certificates, and contact details you choose to add.
- Documents: photos or scans of your passport, seaman's book, and certificates that you upload.
- Payment records: your subscription and purchase history. Card payments are processed by TBC Bank; card data is tokenized by the bank and never touches GMC Link's servers.
- Technical data: minimal logs needed to keep the service secure and reliable.
3. Why we process your data
We use your data to:
- run the platform — profiles, vacancies, and applications;
- let crewing companies review the applications you send them;
- process and account for payments;
- provide Premium AI features, only when you request them;
- keep the service secure and prevent abuse;
- meet legal obligations.
4. AI document processing (Premium)
Premium includes optional AI features. They run only when you explicitly request them — recognizing a document photo or generating a CV summary. Nothing happens to your data automatically.
- When you request document recognition, the photo (passport, seaman's book, or certificate) is sent to the Google Gemini API (paid tier) for one-time processing. Under the paid tier's terms, submitted content is not used to train Google's models.
- Your document images never leave our own file storage except for that single API request: the image is read from storage, prepared in memory (rotation, scaling, format conversion), and discarded right after the call. No copy is written to logs, databases, or any other third party.
- What we keep is the extraction record: the recognized field values with confidence scores, the model name, token counts, and timestamps — so we can show you what was applied where, and account for costs.
- Nothing from an extraction is written to your profile or documents until you explicitly confirm it. You always see and approve the result first.
- CV summaries send only profile facts already stored in GMC Link — your rank, sea-service entries, and certificate names. Your documents are never sent for a summary.
- AI usage is capped per user per month. Administrators can see aggregate token counts and cost estimates — never the contents of your documents.
5. Where your data is stored
Your data and documents are kept in GMC Link's own object storage, hosted on servers in the EU. Documents are served only through short-lived signed links — there is no permanent public URL to any of your files.
6. Who we share data with
We do not sell your data. We share it only with:
- crewing companies — only when you apply to their vacancy: they see your profile and the documents relevant to that application;
- service providers — hosting and infrastructure providers under contract, TBC Bank for payments, and Google (Gemini API) only in the single-request AI flow described above;
- public authorities — only where the law requires it.
7. Retention and your rights
We keep your data while your account is active. When you delete your account, your profile and documents are deleted; some records (for example payment records and AI extraction records) may be kept longer where law or accounting rules require it.
- You can view and correct your data in your profile at any time.
- You can request a copy of your data, or its deletion, by writing to info@gmc-link.com.
- If you believe your data is processed unlawfully, you can complain to the Personal Data Protection Service of Georgia.