Privacy Policy

This Privacy Policy describes how StormAxis ("Company," "we," "us," or "our") collects, uses, stores, and discloses information when you access or use the StormAxis platform, storm intelligence reports, and related services (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. This policy applies to business customers and authorized users only; StormAxis does not knowingly market to or collect personal information from consumers or individuals acting in a personal, family, or household capacity.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an account, purchase a report, or otherwise interact with our Services, we may collect the following categories of information:

• Business Contact Information: First and last name, business email address, company or organization name, job title, phone number, and mailing address.
• Account Credentials: Username and hashed password.
• Payment & Billing Information: Credit card numbers, billing address, and related transaction details. Payment card data is processed by our PCI-DSS-compliant third-party payment processor and is not stored on StormAxis servers.
• Communications: Messages, support tickets, survey responses, and other content you send to us.

1.2 Property and Geographic Data

Our storm intelligence and property-targeting Services involve the collection and processing of property-level and geographic data, which may include:

• Property addresses, parcel identification numbers, and geospatial coordinates (latitude/longitude).
• Publicly available or licensed parcel data, including ownership records, structure characteristics, and assessed values.
• Storm event data associated with specific geographic locations, including hail size, wind speed, damage probability scores, and related meteorological data.
• Machine-learning-derived risk scores and predictive analytics tied to specific properties or areas.

This data is collected from publicly available government records, licensed third-party data providers, proprietary weather data feeds, and aerial imagery providers. Where property data is tied to a named individual, we treat such data in accordance with this Privacy Policy.

1.3 Usage and Analytics Data

We automatically collect certain information when you access or use our Services, including:

• Log data: IP address, browser type and version, operating system, referring/exit pages, and timestamps.
• Device information: Hardware model, operating system version, and unique device identifiers.
• Usage data: Pages visited, features accessed, reports viewed or downloaded, search queries entered, and time spent on pages.
• Clickstream data: Navigation paths through our platform.
• Performance data: Load times, errors, and crash reports.

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect this information. See Section 7 for more detail on our cookie practices.

1.4 Information from Third Parties

We may receive information about you or your organization from third-party sources such as data enrichment providers, business intelligence databases, and publicly available sources, which we combine with information we hold about you to improve the accuracy and relevance of our Services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and maintain your account, process transactions, deliver storm intelligence reports, provide property targeting data, and fulfill orders.
• Product Development: To develop, improve, and enhance our platform, features, analytics models, and machine-learning algorithms.
• Communications: To respond to inquiries, send transactional emails (receipts, account notices), and provide customer support.
• Marketing: To send promotional communications about StormAxis products and services where permitted by applicable law and your preferences. You may opt out at any time.
• Analytics & Research: To analyze usage trends, measure the effectiveness of features, conduct internal research, and generate aggregate statistical insights.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, abuse, and other security incidents.
• Legal Compliance: To comply with applicable laws, regulations, subpoenas, court orders, and legal processes.
• Business Operations: For billing, accounting, audit, and other internal administrative purposes.

3. How We Share Your Information

StormAxis does not sell your personal information.

We may share your information in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party vendors to perform functions on our behalf, including payment processing, cloud hosting, email delivery, analytics, and customer support tools. These vendors are contractually obligated to use your information only to perform services for us and to maintain appropriate confidentiality and security measures.

3.2 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, your information may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

3.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of StormAxis, our customers, or the public.

3.4 With Your Consent

We may share your information with third parties when you have given your explicit consent.

4. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with our legal obligations. Our general retention schedules are:

• Account Information: Retained for the duration of your active account plus three (3) years following account closure, unless a longer period is required by law.
• Transaction Records: Retained for seven (7) years to comply with applicable tax and financial recordkeeping requirements.
• Storm Intelligence Reports & Property Data: Retained for five (5) years from the date of generation or delivery.
• Usage and Analytics Logs: Retained for twenty-four (24) months in identifiable form, after which data is aggregated and anonymized.
• Communications and Support Records: Retained for three (3) years from the date of the communication.
• Marketing Preferences: Retained until you update or withdraw your preferences, plus an additional one (1) year for compliance purposes.

Upon expiration of the applicable retention period, we will securely delete or anonymize your information. You may request earlier deletion of your information subject to Section 6.

5. Data Security

We implement and maintain commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of sensitive data at rest using AES-256 or equivalent standards.
• Role-based access controls limiting employee access to personal information on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scans.
• Incident response plans and breach notification procedures.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. In the event of a data breach that requires notification under applicable law, we will notify affected users in accordance with our legal obligations.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal and contractual exceptions.
• Portability: Request a machine-readable copy of information you have provided to us.
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at the address below.
• Restriction of Processing: Request that we limit how we use your information in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to verifiable requests within thirty (30) days. We may ask you to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the operation of the Services, including authentication and session management.
• Functional Cookies: Enable personalized features such as saved preferences and user settings.
• Analytics Cookies: Allow us to measure and analyze how our Services are used (e.g., Google Analytics).
• Marketing Cookies: Used to track visits across websites and display relevant advertising.

You can control or disable cookies through your browser settings; however, disabling certain cookies may impair the functionality of the Services.

8. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

9. Children's Privacy

Our Services are intended solely for business use by professionals and are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will take steps to delete it promptly.

10. Texas Privacy Rights

Texas residents may have additional rights under the Texas Data Privacy and Security Act (TDPSA) and other applicable Texas law. To the extent StormAxis is subject to these statutes, we will honor requests to access, correct, delete, or port your personal data as described in Section 6. To submit a request, contact us at [email protected]. You also have the right to appeal our decision regarding your request; instructions for doing so will be provided with our response.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by posting the updated Policy on our website with a new effective date and, where appropriate, by sending you an email notification. Your continued use of the Services after the effective date of the revised Policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: [email protected]
• Website: www.stormaxis.io
• Mailing Address: StormAxis Legal, Texas, United States