Privacy Policy

This Privacy Policy explains how Pro Weather handles personal data when you use our website and hosted weather-site service (the “Service”). We are committed to processing personal data in line with the EU General Data Protection Regulation (GDPR).

1. What data we collect

• Account data — your email address and authentication details when you sign up and sign in.
• Billing data — when you subscribe, our payment processor (Stripe) handles your card details directly; we receive and store limited information such as your customer ID, subscription status and billing country. We do not store full card numbers.
• Station & site data — the WeatherLink API credentials you provide (stored encrypted), your weather observations, and the configuration of your published site.
• Technical & usage data — IP address, device and browser information, and logs we use to operate, secure and improve the Service, plus analytics data described in section 4.
• Communications — messages you send us (for example support emails).

2. How and why we use your data

We process personal data on these legal bases:

• To provide the Service (contract) — creating your account, ingesting and displaying your station data, and managing your subscription.
• Legitimate interests — securing the Service, preventing abuse and fraud, rate-limiting, and improving our product.
• Consent — optional analytics cookies (section 4) and any marketing emails. You can withdraw consent at any time.
• Legal obligations — for example keeping invoicing and tax records.

3. Service emails

We send transactional and lifecycle emails needed to run the Service (for example a welcome message, trial reminders, and payment notices). These are part of providing the Service rather than marketing. If we ever send genuine marketing emails, they will be based on consent and you can unsubscribe at any time.

4. Cookies and analytics

We use a small number of strictly necessary cookies and similar technologies that are required to sign you in and keep the Service secure; these do not require consent.

Optional analytics

We use Google Analytics to understand how the site is used. Google Analytics sets cookies, so we load it only after you accept via the cookie banner. If you decline, these cookies are not set. You can change your mind by clearing the stored choice in your browser, which makes the banner appear again.

We also use Vercel Analytics and Speed Insights to measure traffic and performance. These are privacy-friendly and do not use cookies or track you across sites, so they run without requiring consent.

If you publish a site on a paid plan, you may add your own Google Analytics tag. When you do, you act as the controller for that tracking on your site and are responsible for the consent shown to your visitors; we provide the consent banner that gates it.

5. Who we share data with

We do not sell your personal data. We share it with service providers (processors) who help us run the Service, under appropriate data protection terms:

• Supabase — authentication and database hosting (EU region).
• Vercel — application hosting, content delivery and cookieless analytics.
• Stripe — payment processing and subscription billing.
• Upstash — caching, rate-limiting and scheduled jobs.
• Resend — sending Service emails.
• Google — analytics, only with your consent.
• Sentry — error monitoring, where enabled, to diagnose problems.
• Davis WeatherLink — the source of your station data, which we access using the credentials you provide.

We may also disclose data where required by law, or to protect our rights and the safety of users.

6. International transfers

We aim to keep data within the EU/EEA. Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. How long we keep data

We keep your account and site data for as long as your account is active. When you delete your account, we delete your sites, configuration, observations and stored credentials, and cancel any active subscription. Some records (such as invoices) are kept for as long as the law requires. Backups and logs are retained for a limited period and then removed.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format and ask us to transfer it; and
• withdraw consent where processing is based on consent.

You can delete your account and data yourself from the dashboard, or contact us at hello@pro-weather.com to exercise any right. If you believe we have not handled your data properly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be, or your local supervisory authority.

9. Security

We use technical and organisational measures to protect your data, including encryption of sensitive credentials at rest and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately to any incident.

10. Children

The Service is not directed at children and is intended for adults. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “last updated” date above and, for material changes, give reasonable notice.

12. Contact

For any privacy question or request, email hello@pro-weather.com.