Privacy Policy — JWLA.ai

Last updated: 6 March 2026

1. Introduction

JWLA.ai ("we", "us", "our") is an interactive war risk map for maritime insurance purposes, operated at https://jwla.ai. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller for the purposes of GDPR is:

JWLA.ai
Contact: adam@jwla.ai

3. Data We Collect

3.1 Data you provide directly

Data	When collected	Purpose	Legal basis
Email address	When creating a fleet for vessel monitoring	Sending vessel zone entry/exit alert notifications	Consent (Art. 6(1)(a) GDPR)
Fleet name	When creating a fleet	Identifying your fleet in notifications	Consent
Vessel IMO numbers	When adding vessels to a fleet	Tracking vessel positions for zone alerts	Consent

3.2 Data collected automatically (with your consent)

Data	Purpose	Legal basis
IP address	Activity logging and service monitoring	Consent (Art. 6(1)(a) GDPR)
Browser local storage	Saving your fleet data, theme preference, and session state locally on your device	Consent
API usage logs	Monitoring service usage and credit consumption	Legitimate interest (Art. 6(1)(f) GDPR)

3.3 Data we do NOT collect

We do not collect names, physical addresses, phone numbers, payment information, browsing history, or any special category data. We do not use cookies for advertising or tracking purposes. We do not share your data with advertisers.

4. How We Use Your Data

Vessel monitoring: Your email and vessel IMO numbers are used to send you automated alerts when your tracked vessels enter or exit JWC Listed Areas.
Service improvement: IP addresses and API usage logs help us monitor service performance and credit consumption.
Local storage: Fleet data and preferences are stored in your browser's local storage for convenience, so your fleet persists between visits.

5. Third-Party Data Processors

We use the following third-party services to provide our functionality:

Service	Purpose	Data shared	Privacy policy
Datalastic	Vessel position tracking (AIS data)	Vessel IMO numbers, coordinates	datalastic.com/privacy-policy
Bluehost	Web hosting	Server logs (IP, timestamps)	bluehost.com/privacy
Leaflet / Esri / CartoDB	Map tile rendering	Map tile requests (IP address)	Standard web map tile requests
ip-api.com	IP geolocation (admin only)	IP addresses	ip-api.com/docs/legal

6. Data Storage and Retention

Fleet data (server): Stored in JSON files on our hosted server for as long as your fleet is active. Deleted upon your request.
Fleet data (browser): Stored in your browser's local storage. You can clear this at any time via your browser settings.
API usage logs: Retained for up to 30 days, then automatically pruned.
IP geolocation cache: Cached for service performance. Does not contain personal information beyond approximate city-level location.
Email alert history: We do not store copies of sent emails. Email delivery is handled by the server's mail system.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15): You can request a copy of all personal data we hold about you.
Right to rectification (Art. 16): You can update your fleet data by editing your fleet on the website.
Right to erasure (Art. 17): You can request deletion of all your data by emailing adam@jwla.ai with the subject "Delete My Data" and the email address you registered with.
Right to restrict processing (Art. 18): You can decline cookies/storage consent on the website, which prevents data processing.
Right to data portability (Art. 20): You can request your fleet data in a machine-readable format.
Right to object (Art. 21): You can unsubscribe from alert emails at any time.
Right to withdraw consent: You can withdraw your consent at any time by clearing your browser's cookies for jwla.ai, which will re-trigger the consent prompt.

To exercise any of these rights, please contact adam@jwla.ai. We will respond within 30 days.

8. Data Security

We implement appropriate technical measures to protect your data:

HTTPS encryption for all data in transit
Server-side data files are protected from direct web access via .htaccess rules
Password-protected admin dashboard
No storage of sensitive financial or personal identification data

9. International Data Transfers

Our server is hosted in the United States (Bluehost, Virginia data center). Vessel tracking data is processed by Datalastic (Munich, Germany). By using our service, you acknowledge that your data may be transferred to and processed in these jurisdictions.

10. Children's Privacy

Our service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or to exercise your data rights, contact us at:

Email: adam@jwla.ai
Website: https://jwla.ai