Terms of Service

These terms govern your use of the Vessel Class Finder API ("the Service"), operated by WeAreFabbrik. By creating an account or using the API, you agree to these terms.

1. What the Service Does

Vessel Class Finder provides a REST API that serves vessel classification data sourced from publicly available IACS (International Association of Classification Societies) publications. We aggregate, structure, and refresh this data weekly.

2. Data Accuracy

The data served by this API is derived from publicly available sources. We make reasonable efforts to keep it accurate and up to date, but we do not guarantee the accuracy, completeness, or timeliness of any data returned by the API.

This API is not a substitute for official records from classification societies (DNV, Lloyd's Register, Bureau Veritas, etc.). For decisions involving safety, compliance, or financial risk, always verify against the authoritative source.

3. Your Account

• You must provide a valid email address and password to register.
• You are responsible for keeping your API keys secure. Do not share them publicly or embed them in client-side code.
• You are responsible for all activity under your account and API keys.
• One account per person or organization. Do not create multiple accounts to bypass usage limits.

4. Usage Limits

API usage is metered and limited based on your plan. One lookup is one IMO number queried; a single request may contain up to 100 IMO numbers.

• Free: 100 lookups per month
• Starter (€49/mo): 5,000 lookups per month
• Pro (€199/mo): 50,000 lookups per month
• Enterprise: Unlimited (custom agreement)

When you exceed your monthly limit, the API returns a 429 status code. Usage resets on the first of each calendar month.

Starter and Pro are billed monthly in advance by card through Stripe and renew automatically until cancelled. You can change or cancel your plan at any time from the billing portal; a cancellation takes effect at the end of the current billing period.

5. Acceptable Use

You may use the API to build applications, enrich your data, and serve your customers. You may not:

• Resell raw data dumps from the API as a standalone data product.
• Scrape, crawl, or systematically download the entire dataset.
• Attempt to circumvent rate limits or usage restrictions.
• Use the API for any unlawful purpose.
• Interfere with or disrupt the Service.

6. No Warranty

The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

We do not guarantee that the API will be uninterrupted, error-free, or available at all times.

7. Limitation of Liability

To the maximum extent permitted by applicable law, WeAreFabbrik shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, arising from your use of the Service.

Our total liability for any claim related to the Service shall not exceed the amount you paid us in the 12 months preceding the claim, or 100 EUR, whichever is greater.

8. Termination

We may suspend or terminate your account and API access at any time if:

• You violate these terms.
• Your usage is abusive or places unreasonable load on the Service.
• We are required to do so by law.

You may delete your account at any time by contacting info@wearefabbrik.com.

9. Changes to These Terms

We may update these terms from time to time. If we make significant changes, we will notify you via the email associated with your account. Continued use of the API after changes take effect constitutes acceptance of the new terms.

10. Governing Law

These terms are governed by the laws of Greece and the European Union. Any disputes shall be resolved in the courts of Athens, Greece.

11. Contact

Questions about these terms? Email info@wearefabbrik.com.

Privacy Policy

What We Collect

Account data

When you register, we collect your email address and store a bcrypt-hashed version of your password. We never store your password in plain text.

API usage data

We track the number of lookups (IMO numbers queried) you make per calendar month, associated with your user ID. This is used to enforce plan limits and display your usage.

AI assistant connector (MCP server)

When you use Vessel Class Finder from Claude or another AI assistant through our MCP server, we receive only the tool calls the assistant makes: the IMO numbers looked up and, if you connected with one, your API key (used to identify your account and count lookups against your plan). We never receive your conversation with the assistant. Without an API key, lookups are counted only toward a shared daily allowance and are not linked to you. We record an analytics event for each tool call (the tool used and, for batch lookups, how many IMO numbers, not which ones). Hosting server logs (IP address, timestamps) are kept as described under Server logs.

Service providers

We use a small number of providers to run the Service. They process data only on our behalf:

• Railway hosts the API.
• Neon hosts the PostgreSQL database that stores your account and usage data, in the EU (Frankfurt, Germany).
• Resend sends account emails (such as email verification and usage-limit notices) to the address you register with.
• PostHog (EU-hosted, Frankfurt) provides product analytics: which pages are viewed and which features are used (for example demo lookups, sign-ups, API lookups and plan changes). Events are linked to your account ID, never your email address, and we don't send IP-based location data.
• Product Hunt: the homepage shows a Product Hunt badge whose image loads from Product Hunt's servers, so your browser sends them a standard request (including your IP address) when you view the homepage.
• Stripe processes payments for paid plans. Your card details go directly to Stripe and never reach our servers; we store only your Stripe customer and subscription IDs.
• Telegram delivers internal notifications to our team when a new account is created. These include the email address you registered with.

Server logs

Our hosting provider (Railway) collects standard server logs including IP addresses, request timestamps, and HTTP metadata. These are used for debugging and abuse prevention.

What We Do Not Collect

• We do not use cookies. Our analytics (PostHog) runs without cookies or browser storage, has no automatic click tracking or session recording, and is never used for advertising.
• We do not collect or store card details; payments are handled entirely by Stripe.
• While you are logged in on our website, your API key and account ID are kept in your browser's session storage so the account page works. They are cleared when you log out or close the tab.

How We Use Your Data

• To provide and maintain the API service.
• To enforce usage limits and prevent abuse.
• To contact you about service changes or issues with your account.
• To let you know when you reach 80% and 100% of your monthly lookup limit.
• To understand, in aggregate, how the site and API are used so we can improve them.

We Do Not Sell Your Data

We will never sell, rent, or share your personal information with third parties for marketing purposes.

Data Retention

Your account data is retained for as long as your account is active. If you request account deletion, we will remove your data within 30 days. API usage logs are retained for 12 months for billing and abuse prevention.

Your Rights (GDPR)

If you are in the EU, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Export your data in a portable format.
• Object to processing of your data.

To exercise these rights, email info@wearefabbrik.com.

Contact

For privacy-related questions, email info@wearefabbrik.com.