Privacy Policy

This Privacy Policy explains how Pro Weather handles personal data when you use our website and hosted weather-site service (the “Service”). We are committed to processing personal data in line with the EU General Data Protection Regulation (GDPR).

1. What data we collect

• Account data:your email address and authentication details when you sign up and sign in.
• Billing data:when you subscribe, our payment processor (Stripe) handles your card details directly; we receive and store limited information such as your customer ID, subscription status and billing country. We do not store full card numbers.
• Station & site data:the WeatherLink API credentials you provide (stored encrypted), your weather observations, and the configuration of your published site.
• Technical & usage data:IP address, device and browser information, and logs we use to operate, secure and improve the Service, plus analytics data described in section 4.
• Communications:messages you send us (for example support emails, or the feedback form on our own pages).

2. How and why we use your data

We process personal data on these legal bases:

• To provide the Service (contract):creating your account, ingesting and displaying your station data, and managing your subscription.
• Legitimate interests:securing the Service, preventing abuse and fraud, rate-limiting, and improving our product.
• Consent:optional analytics cookies (section 4) and any marketing emails. You can withdraw consent at any time.
• Legal obligations:for example keeping invoicing and tax records.

3. Service emails

We send transactional and lifecycle emails needed to run the Service (for example a welcome message, trial reminders, and payment notices). These are part of providing the Service rather than marketing. If we ever send genuine marketing emails, they will be based on consent and you can unsubscribe at any time.

4. Cookies and analytics

We use a small number of strictly necessary cookies and similar technologies that are required to sign you in and keep the Service secure; these do not require consent.

Product analytics and error monitoring

We use PostHog to see how the Service is used and to capture errors so we can fix them. It is hosted in the EU, and events reach it through our own domain rather than a third-party script host. PostHog stores an identifier in your browser (local storage and a first-party cookie) so that repeat visits can be recognised as the same session.

Session replay

On our own pages (the marketing site, sign-in and the dashboard) we can record a replay of your visit using Sentry, so that when something breaks we can see what actually happened instead of guessing from an error message. This is loaded only after you accept via the cookie banner, and it stops immediately if you withdraw that choice.

A replay is a reconstruction of the page, not a video and not a recording of your screen or microphone. All text and every value you type is masked before it leaves your browser, so passwords, API credentials and billing details are never transmitted; images and other media are blocked, and we do not capture the contents of network requests. What remains is layout, clicks and navigation. Replays are stored in the EU and retained by Sentry for up to 90 days.

Session replay runs on Pro Weather’s own pages only. It is never active on a published weather site, so visitors to a site hosted with us are not recorded.

Feedback form

Our own pages carry a Feedback button. If you open it and send the form, the message you write, together with your name and email address if you choose to give them, goes to Sentry so that we can read it and reply. Nothing is collected until you press send, and no image of your screen is ever captured. If session replay is running because you accepted it, your report is linked to that recording so we can see what led up to it.

Like session replay, the Feedback button appears on Pro Weather’s own pages only, never on a published weather site.

Visitor counting on hosted sites

Every published weather site counts its own visitors, so its owner can see how many people it reaches. This counting sets no cookies and stores no IP addresses. To tell one visitor from another within a single day, the request is hashed together with a random salt that is discarded every night, which makes the result impossible to trace back to a person and impossible to link across days. All that is retained is two numbers per site per day: how many visitors and how many page views. Because no personal data is stored and no device is identified, this requires no consent, and it runs whether or not the site owner shows the count publicly.

If you publish a site on a paid plan, you may add your own Google Analytics tag. When you do, you act as the controller for that tracking on your site and are responsible for the consent shown to your visitors; we provide the consent banner that gates it.

5. Who we share data with

We do not sell your personal data. We share it with service providers (processors) who help us run the Service, under appropriate data protection terms:

• netcup:server hosting (EU) for the application, database, authentication and content delivery.
• Stripe:payment processing and subscription billing.
• PostHog:product analytics and error monitoring (EU region).
• Resend:sending Service emails.
• Google:analytics on a hosted site whose owner has added their own tag, and only with your consent.
• Sentry:error monitoring, the feedback form, and, with your consent, session replay on our own pages (EU region).
• OpenRouter:routing the description you type, your site title and its current style settings to an AI model, and only when you use AI styling on the Appearance page (United States).
• Davis WeatherLink:the source of your station data, which we access using the credentials you provide.

We may also disclose data where required by law, or to protect our rights and the safety of users.

6. International transfers

We aim to keep data within the EU/EEA. Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. How long we keep data

We keep your account and site data for as long as your account is active. When you delete your account, we delete your sites, configuration, observations and stored credentials, and cancel any active subscription. Some records (such as invoices) are kept for as long as the law requires. Backups and logs are retained for a limited period and then removed.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format and ask us to transfer it; and
• withdraw consent where processing is based on consent.

You can delete your account and data yourself from the dashboard, or contact us at hello@pro-weather.com to exercise any right. If you believe we have not handled your data properly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be, or your local supervisory authority.

9. Security

We use technical and organisational measures to protect your data, including encryption of sensitive credentials at rest and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately to any incident.

10. Children

The Service is not directed at children and is intended for adults. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “last updated” date above and, for material changes, give reasonable notice.

12. Contact

For any privacy question or request, email hello@pro-weather.com.