Privacy Policy

Who this covers

This policy applies to everyone who uses M5NGO — cruise crew customers using the package portal, and M5NGO staff using the operations dashboard to receive, scan, and hand off packages. It applies the same way whether you use our website or our native mobile app; both talk to the same account and the same data, and this policy covers both equally.

What we collect

From customers, when you create an account or check out:

• Name, email, phone number, and Crew ID
• Cruise line / ship assignment
• Package details tied to your account (tracking reference, weight, contents category, status)
• Payment information, if you pay by card — handled entirely by Stripe (see below); we never see or store your full card number

From M5NGO staff, when they log in to work:

• Name, email or username, and role/permissions
• Photos taken through the app to read a package's shipping label (camera access is only ever used for this — never for anything else, and never by customer accounts)
• A log of actions taken in the system (e.g. which package was moved or delivered by whom), used for accountability and troubleshooting

How we use it

To match incoming packages to the right customer account, notify you when a package is ready for pickup, process payment at checkout or pickup, provision an eSIM you've purchased, and let staff do their jobs (receiving, scanning, delivering). We don't use your data for advertising, and we don't sell it to anyone.

Who we share it with

• Stripe — processes card payments. We send them the amount and your payment details go directly to them, not through our servers.
• BillionConnect — provisions your eSIM if you buy one, and needs to know the order exists to activate it. No package or account data beyond what's needed for that one order is shared.
• OpenAI — reads the shipping label photo staff capture when receiving your package, so we can pull the tracking number, your name, and similar details off it automatically instead of typing them by hand. Only the photo itself is sent, for that one purpose.

We don't share data with advertisers or analytics networks — see our Cookies page for more on that.

How long we keep it

We keep account and package data for as long as your account is active, plus a reasonable period after for recordkeeping (e.g. resolving a dispute about a past delivery). You can ask us to delete your account and data at any time — see Contact below.

Security

Passwords are hashed, never stored in plain text. All traffic between your device and our servers is encrypted (HTTPS). Access to staff tools is limited by role — not every staff account can see or do everything.

Children

M5NGO is a service for cruise ship crew and is not directed at, or knowingly used by, children under 13.

Your rights

You can ask to see what data we have on you, correct it, or have it deleted, at any time — just reach out below.

Delete your account (M5NGO — Cruise Crew Services)

To request deletion of your M5NGO account and the data tied to it:

1. Send a request from the email address on your account through the contact form on our homepage, with the subject "Delete my account".
2. We confirm your identity against the account on file and process the request within 30 days.
3. We email you once it's done.

What happens to your data:

• Deleted: your name, email, phone, Crew ID, and login credentials.
• Retained for a limited period: records of packages already received or delivered to you, and payment records — kept for up to 7 years where required for accounting, tax, or resolving a delivery dispute, then deleted. This is the minimum a shipping and payments business needs to keep to operate legally, not an indefinite hold on your data.

Contact

Questions about this policy, or a request about your data? Reach out through the contact form on our homepage.