1. Introduction
StormPull ("we," "us," or "our") operates the stormpull.com website and the StormPull API (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
We collect the following types of information:
- Account Information: Email address provided during signup.
- API Usage Data: API call logs including endpoints called, query parameters (addresses, coordinates), timestamps, response times, and status codes.
- Billing Information: Payment processing is handled by Stripe. We do not store credit card numbers. We retain your Stripe customer ID and subscription status.
- Technical Data: IP addresses, request headers, and user agent strings for rate limiting and security purposes.
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process transactions and manage your account
- To enforce rate limits and prevent abuse
- To send transactional emails (account creation, billing events)
- To monitor and analyze usage patterns to improve our infrastructure
4. Data Sharing
We do not sell your personal information. We may share data with:
- Stripe: For payment processing
- Supabase: For database hosting
- Vercel: For application hosting
- Resend: For transactional email delivery
We may also disclose information if required by law or to protect our rights.
5. Data Retention
We retain account information and API call logs for the duration of your account. API call logs are retained for 90 days for analytics purposes. Upon account deletion, we will remove your personal data within 30 days. Anonymized, aggregated usage data may be retained indefinitely.
6. Data Security
We implement industry-standard security measures including encrypted API keys (bcrypt hashed), TLS encryption for all data in transit, and access controls on our database infrastructure. However, no method of transmission over the Internet is 100% secure.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your API usage data
To exercise these rights, contact us at support@stormpull.com.
8. Cookies
We use localStorage to store your API key for dashboard access. We do not use tracking cookies or third-party analytics.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page.
10. Contact
Questions about this Privacy Policy? Contact us at support@stormpull.com.