Security & data protection
Last updated 2026-09-09
A club's member list is sensitive. This page explains, in plain terms, how Sailnotice keeps it safe — and what stays your responsibility as the club.
Hosted in the EU
Your data lives in a managed PostgreSQL database in the European Union (London region). It never leaves the EU/EEA in normal operation.
Encrypted everywhere
Every connection uses TLS. Data is encrypted at rest with AES-256. Our hosting provider maintains SOC 2 Type II and ISO 27001 certification.
One club can't see another
Isolation between clubs is enforced in the database itself with row-level security — not just in the app. A query for one club's contacts physically cannot return another club's.
Passwordless, with optional 2FA
Sign-in is a one-time code emailed to you (behind a bot check), so there is no password database to steal or reuse. Any account can add a second step with an authenticator app.
Who can see your member list
Only the people a club owner invites into that workspace. Sailnotice staff do not browse club data; support access happens only at a club's request and is limited and logged. We never use member data for advertising or to train AI models, and we never sell or share it.
The only companies in the loop
Supabase (database and hosting) and Resend (email delivery). That's the whole list. Both are established infrastructure providers with their own security programs, and we have a data-processing agreement with each. Delivery metadata (delivered / bounced / opened) comes back so your club can see its stats — nothing more.
Backups & recovery
The database runs on managed infrastructure with automated encrypted backups held in the EU. If a club deletes something by mistake, email support@uncodemedia.com quickly and we can usually help.
Your data is yours
Export your contacts to CSV at any time from the Contacts page. Delete your account from Settings whenever you want — contacts, lists, sendouts, delivery records and files are removed immediately, and roll off our backups within 30 days. Unsubscribe records are kept only as long as needed to keep honouring the opt-out.
If something goes wrong
If member data is ever exposed, we will tell the affected clubs without undue delay, explain what happened and what to do, and notify authorities where the law requires it. Found a vulnerability? Email support@uncodemedia.com — we read every report.
Your part
Keep the workspace invite list short and current — remove people when they leave the board. Protect the email account you sign in with; anyone who can read that inbox can reach your workspace. Only import contacts your club has a lawful basis to email.