Privacy Policy

1. Introduction

Storm Predict (hereinafter "we", "our" or "us") is committed to protecting the privacy and personal data of its users.

This privacy policy explains how we collect, use, store and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

2. Data Collected

2.1. Data you provide directly

• Email: when signing up for the waitlist or creating an account
• Name: optional, to personalise your experience
• Payment data: processed by our payment provider (we never store your bank details)

2.2. Data collected automatically

• Browsing data: IP address, browser type, pages visited
• Technical cookies: necessary for the proper functioning of the site
• Approximate geolocation: country/region to customise forecasts (never your exact location without consent)

2.3. Data we do NOT collect

• ❌ Sensitive data (ethnic origin, political opinions, health)
• ❌ Precise geolocation without explicit consent
• ❌ Data from your contacts or social networks

3. Use of Data

We use your personal data solely for:

• ✅ Providing our storm tracking and weather forecasting services
• ✅ Sending storm alert notifications (with your consent)
• ✅ Improving our algorithms and services
• ✅ Communicating about the launch and service updates
• ✅ Processing your payments securely
• ✅ Complying with our legal obligations

We NEVER sell your personal data to third parties.

4. Legal Basis (GDPR)

• Contract performance: providing the subscribed service
• Consent: for marketing emails and non-essential cookies
• Legitimate interest: improving our services and security
• Legal obligation: tax and regulatory requirements

5. Data Sharing

We only share your data with:

• Payment provider: for secure transaction processing
• Hosting provider: Infomaniak (Switzerland) — data hosted in Europe
• Analytics: Plausible Analytics (privacy-friendly, no cookies, GDPR-compliant)

No data is transferred outside the European Economic Area.

6. Data Retention

• Account data: retained for the duration of your account + 3 years
• Billing data: 10 years (legal obligation)
• Browsing data: 13 months maximum
• Waitlist data: until launch, then deleted or converted to account

7. Your Rights

Under the GDPR, you have the following rights:

• ✅ Right of access: obtain a copy of your data
• ✅ Right to rectification: correct inaccurate data
• ✅ Right to erasure: request deletion of your data
• ✅ Right to restriction: restrict the processing of your data
• ✅ Right to portability: receive your data in a structured format
• ✅ Right to object: object to the processing of your data
• ✅ Right to withdraw consent: at any time

To exercise your rights, contact us at: contact@storm-predict.com

We respond within 30 days maximum.

8. Data Security

We implement technical and organisational measures to protect your data:

• 🔒 SSL/TLS encryption for all communications
• 🔒 Encryption of sensitive data in the database
• 🔒 Limited data access (principle of least privilege)
• 🔒 Regular and secure backups
• 🔒 24/7 monitoring for suspicious access
• 🔒 Regular security system updates

9. Cookies

We only use cookies strictly necessary for the site to function:

• Session cookie: to maintain your login
• Preference cookie: language, dark/light theme

No advertising or third-party tracking cookies are used.

10. Changes

We reserve the right to modify this privacy policy. Any changes will be communicated by email and/or in-app notification at least 30 days before taking effect.

11. Contact

Data controller: Storm Predict

Contact: contact@storm-predict.com

You also have the right to file a complaint with the CNIL (French National Data Protection Authority).