Privacy Policy

Last updated: 4 November 2026

1. Who we are

This policy explains what personal information BigBlueIndustries, trading as MusterPage ("we", "us"), of Tamarac, Florida, collects, why, and what you can do about it. We run MusterPage, a service that gives you a personal web address and a page that holds your CV, certificates and contact details. We decide how your data is used, so we are the "controller" under laws such as the GDPR. Contact us at help@musterpage.com.

2. What we collect

• You give us: your name, phone number, email address, the address (domain) you choose, your CV, certificates, photos, and any other details you put on your page.
• Private documents: a passport, visa or other identity document, only if you choose to upload one.
• Payment details: payments are processed by Stripe. You enter your card details on a Stripe payment page, not on ours, and we do not see or store your full card number. From Stripe we receive your name, email, billing country, the type and last four digits of your card, the amount and status of each payment, and a customer reference, so that we can run your subscription and answer your questions.
• Messages from visitors to your page: if someone uses the contact form on your page, we collect the name, email address, optional phone number and message they write, and pass it to you.
• Created automatically: technical data such as your IP address, device and browser type and approximate country, which our hosting provider records in security logs when you visit a page. We do not currently count page visits.
• Messages: our emails, SMS and WhatsApp notices to you, and what you send to us.

We do not collect more than we need to run your page.

3. How we use it and why

We do not sell your data. We do not use your documents to train artificial intelligence systems. We do not use your data to profile you for advertising.

4. What is public and what is private

• Public: your page, including your CV, photos and the contact details you choose to show. Anyone with your link or QR code can see it, and search engines may list it unless you ask us to block that.
• Private: your certificates, passport, visa and identity documents never appear on your public page. Only you can open or send them, after signing in with your password and an emailed code. Your public page lists the names of your certificates, never the files, and never your passport or visa.
• Your password: we store only a scrambled version of it, so we cannot read it. If you save an optional password reminder, we store it as you typed it and show it to anyone who asks for it on the sign-in screen with your email, so keep it vague.
• Documents you send: when you send a document to a recruiter or captain from your own phone or email, we are not involved, and the recipient keeps their copy.
• The .blue family: if your address ends in .blue you are listed in a public directory with your name, position, photo and address. You can switch this off at any time in your secure area.
• Your choice: you decide what is public and what is private, and you can change it at any time by contacting us.

Once someone has a copy of a document, we cannot take it back from them.

5. Who we share data with

We share data only with providers who help us run the service, and only what they need:

• Cloudflare: hosting, file storage, your web address, email handling and security.
• Resend: sends you our emails, such as sign-in links, certificate expiry reminders and couples requests. It receives your email address and the text of each message.
• Stripe: payments, monthly billing, refunds and fraud checks. Stripe handles your card details under its own privacy policy (stripe.com/privacy). For some purposes, such as preventing fraud and meeting its own legal duties, Stripe decides how it uses your data itself. [Confirm with your accountant or lawyer whether Stripe is the seller of record on your account.]
• SMS and WhatsApp: notices, if you opted in. We send these ourselves for now. If we add a provider to send them, we will name it here before we use it.
• Google (Gmail): our replies and service emails to you.
• Professional advisers such as lawyers and accountants, under a duty of confidentiality.
• Authorities, when the law requires it, or to protect people from fraud or harm.

If we sell or restructure the business, your data may pass to the new owner, who must keep to this policy. We do not sell your data, and we do not share it with advertisers.

6. Where data is stored and transferred

Your data is stored with our providers, mainly in the United States and in Cloudflare's global network. We serve customers in all countries worldwide, so your data may be transferred to and processed in countries other than the one where you live. Where the law requires it, we use safeguards such as standard contractual clauses.

7. How long we keep it

• While your service is active: your page and documents.
• After a failed payment or cancellation: for 90 days after your page goes offline, so you can bring it back. Then we delete it, unless the law requires us to keep something.
• On your request: we delete your data within 30 days of a deletion request or of your account closing.
• Payment and tax records: for as long as the law requires, typically 7 years.
• Security logs: for 12 months.
• Visitors' contact-form messages: 12 months, then deleted.

8. Your rights

You can ask us to show you your data, correct it, delete it, give you a copy, or stop using it for a purpose. You can withdraw consent at any time. Depending on where you live, the data protection laws of your country, such as the GDPR in Europe, the UK GDPR, South Africa's POPIA or California's privacy law, may give you these rights by law. Email help@musterpage.com. We answer within 30 days. You can also complain to your local data protection authority.

9. Cookies and analytics

When you sign in to your dashboard we set one essential cookie that keeps you signed in for 14 days; it is removed when you sign out. Our pages do not set cookies for tracking or advertising, and we do not currently use analytics. Our pages load fonts from Google Fonts, so Google receives your IP address when a page loads. Stripe's payment page may set its own cookies, under Stripe's policy. If we add visit counting later, we will update this policy first.

10. Security

We protect your data with encrypted connections, access limits and secure hosting. Only the people who need to can open your files, and only to make a change you asked for, fix a fault or look into a report of misuse. No system is perfectly secure, so keep your own copy of every document. If a breach puts your data at risk, we tell you and the authorities as the law requires.

11. Age limit

MusterPage is for people aged 18 or over. We do not knowingly collect data from anyone under 18. If we find that we have, we delete it.

12. SMS and WhatsApp notices

We send SMS or WhatsApp messages about failed payments and your service only if you tick the separate opt-in box. Reply STOP or contact us to opt out. Message and data rates from your phone provider may apply. We never share your phone number with advertisers.

13. Changes and contact

We may update this policy. For changes that matter, we tell you by email or on the site at least 30 days before they apply.

Questions or requests: BigBlueIndustries (MusterPage), Tamarac, Florida, help@musterpage.com, WhatsApp +1 754 224 7899.