Privacy Policy

Last Updated: March 1, 2026

Cirrus Weather Labs LLC ("we," "our," or "us") operates the website www.ag-wx.com (the "Site"). This Privacy Policy explains what personal information we collect, how we use and protect it, what third parties receive it, and your rights regarding that information — including rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

By creating an account or using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of personal information:

• Account Information: Email address and password (stored as a one-way hash) when you register.
• Payment Information: When you subscribe to a paid plan, payment card details are collected and processed directly by Stripe, Inc. We do not store your full card number, expiration date, or CVV on our servers. We receive and store your Stripe customer ID, subscription status, and billing period dates.
• Location Data: City or location names you save to your account for personalized weather information. This is user-provided, not automatically detected.
• Usage and Device Data: IP address, browser type, pages visited, and access timestamps collected automatically through server logs and our hosting provider.
• Cookies and Session Data: We use a session cookie to keep you logged in. This cookie is essential for Site functionality and cannot be opted out of while using the Site. We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

We use your personal information for the following purposes:

• Creating and managing your user account.
• Processing subscription payments and managing billing.
• Providing personalized weather data based on your saved locations.
• Sending transactional emails (registration confirmation, password resets).
• Sending promotional emails about weather updates, services, or offers (you may opt out at any time).
• Protecting the Site from fraud, abuse, and unauthorized access.
• Improving the Site and diagnosing technical issues.

3. Third-Party Service Providers

We share personal information with the following third-party service providers, solely to operate the Site and deliver our services. We do not sell your personal information.

• Stripe, Inc. — Processes subscription payments. Receives your email address and payment card information. Stripe's privacy policy: stripe.com/privacy.
• Twilio SendGrid — Delivers transactional and promotional emails on our behalf. Receives your email address. SendGrid's privacy policy: twilio.com/legal/privacy.
• Cloudflare, Inc. — Provides bot protection (Turnstile CAPTCHA) and security services. May collect your IP address and browser metadata. Cloudflare's privacy policy: cloudflare.com/privacypolicy.

These providers are contractually obligated to use your information only for the services they provide to us and in accordance with their own privacy policies.

4. Sale or Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding twelve (12) months.

5. Cookies and Tracking Technologies

The Site uses a single essential session cookie to maintain your login state. This cookie is set with the following protections: transmitted only over HTTPS (Secure), inaccessible to JavaScript (HttpOnly), and restricted to same-site requests (SameSite=Lax).

We do not use advertising cookies, analytics cookies, or third-party tracking pixels. Cloudflare Turnstile may set its own cookies for bot detection purposes during registration.

6. Data Retention

• Account data is retained for as long as your account is active.
• Payment records (Stripe customer ID, subscription status) are retained for as long as your account is active and for a reasonable period afterward for accounting and legal compliance.
• Registration and password reset tokens expire within 24 hours and 1 hour respectively, and are marked as used once consumed.
• Server logs containing IP addresses are retained according to our hosting provider's standard retention schedule.

When you delete your account, your user record, saved locations, and preferences are permanently removed from our database. Stripe subscription records and event logs may be retained for legal and financial compliance purposes.

7. Promotional Emails

You may receive periodic promotional emails about our services. You can opt out at any time by following the "unsubscribe" link in any email or by contacting us at [email protected]. Opting out of promotional emails does not affect transactional emails (e.g., password resets, billing confirmations).

8. Data Security

We implement the following measures to protect your personal information:

• Passwords are stored using one-way cryptographic hashing and are never stored in plaintext.
• All data transmission is encrypted via HTTPS/TLS.
• Session cookies are restricted to secure, HTTP-only, same-site settings.
• Payment card data is handled entirely by Stripe and never touches our servers.
• CSRF tokens protect all form submissions.
• Bot protection via Cloudflare Turnstile on public-facing forms.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Rights

All users have the right to:

1. Access and review the personal information we hold about you.
2. Request corrections to any inaccurate information.
3. Request the deletion of your account and personal information.
4. Opt out of promotional communications at any time.

You may delete your account at any time from your Profile page. To exercise any other rights, contact us at [email protected].

10. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain legal exceptions (e.g., completing a transaction, legal compliance, security).
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, service quality, or access levels for exercising your rights.

To submit a verifiable consumer request, email us at [email protected]. We will respond to verified requests within 45 days. You may also designate an authorized agent to make a request on your behalf.

In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (email address), internet activity (IP address, pages visited), and commercial information (subscription status). We have not sold any personal information.

11. Children's Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Paid subscription services require users to be at least 18 years of age or have payment authorized by a parent or legal guardian. If we become aware that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. If we make material changes, we will notify registered users by email. Your continued use of the Site after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

Cirrus Weather Labs LLC
Email: [email protected]
Website: www.ag-wx.com