Privacy

Effective: 2026-07-18

What we collect

• Account and company information, including name, email, company name, role, and an optional phone number or company logo.
• Company configuration such as Oklahoma territories, alert subscriptions, crew assignments, prospect selections, notes, and exports.
• Property and customer records that an authorized user searches, curates, uploads, or imports, including addresses and related public parcel information.
• Security and audit records for sign-ins, invitations, role changes, exports, and other privileged actions.
• Operational and product telemetry such as IP address, user agent, request time, referring page, campaign parameters, page usage, application errors, and crash diagnostics.
• Billing status and payment-provider identifiers. Payment-card details are handled by the payment provider and are not stored by StormSight.

Crew location

Location sharing is optional. If a mobile user turns on Share my location and grants foreground and background permission, StormSight periodically receives GPS coordinates while the app is open or in the background. The latest position is shown to members of the same company and the service may record territory entry and exit events. Turning sharing off stops new accepted position updates and deletes the most recent 24 hours of raw positions. The user can separately delete all raw position history.

Raw crew positions are automatically removed after 30 days. Territory entry and exit records may be retained for up to one year for company activity history and auditing. Location can also be requested for a one-time map recenter, field note, or hail report; those actions are initiated by the user.

How we use data

• Provide storm detection, property scoring, prospect, territory, crew, and alert features.
• Authenticate users, enforce company boundaries and roles, and investigate misuse or service failures.
• Deliver requested email, push, or SMS communications and measure whether the product is operating correctly.
• Improve reliability and understand aggregate feature usage. StormSight does not sell personal or company data for advertising.

Third-party processors

Depending on the feature used, service providers may process limited data on our behalf. These include Vercel (hosting and AI gateway), Supabase (database and authentication), SendGrid (email), Twilio (SMS and voice), Firebase (push notifications), Stripe (billing), PostHog (query-free product telemetry), Sentry (error diagnostics), and the AI model providers selected through the Vercel AI Gateway. Public weather and map services also receive the technical requests needed to retrieve their data.

Company access and public links

Users in the same company may see company-scoped prospects, territories, crew activity, notes, and imported records according to their role. If an authorized user generates a public event or property share link, anyone with that link can view the included read-only report until the link expires or is revoked. Review the content before sharing it outside your company.

Retention and deletion

Account and company data is generally retained while the account is active. Weather evidence and certain audit or security records may be retained longer to preserve the provenance of historical analyses, meet legal obligations, prevent fraud, and maintain backups. Raw server logs are generally retained for up to 90 days. Feature-specific controls, such as crew-position deletion and share-link revocation, remain available where described in the product.

Your choices

You can disable crew-location sharing, revoke device permissions, change notification preferences, revoke public share links, and ask your company administrator to update company access. Email privacy@harness10.com to request access, correction, or deletion of personal data. Some records may be retained when required for security, legal, or evidentiary purposes.