Privacy Policy

1. Introduction

SpotAlert ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our surf forecasting and alert service ("the Service").

By using SpotAlert, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Personal Information

We collect information that you voluntarily provide to us when you:

• Register for an account (email address, name)
• Set up your user profile (first name, username)
• Provide your phone number for SMS alert delivery (optional)
• Create or share surf spots (location data, spot descriptions)
• Configure alert preferences and conditions
• Contact us for support

Phone Number: If you choose to enable SMS alerts, we collect and store your phone number solely for the purpose of sending you surf condition notifications via text message. Providing your phone number is entirely optional and you can use all other features of the Service without it.

2.2 Location Information

We collect and process location data, including:

• Geographic coordinates of surf spots you create or favorite
• Location data for providing localized forecasts
• Timezone information for accurate alert timing

2.3 Usage Information

We automatically collect certain information when you use the Service:

• Pages and features you access
• Spots you view, favorite, or create
• Alerts you configure and their performance
• Device information (browser type, operating system)
• IP address and general location
• Cookies and similar tracking technologies

2.4 Forecast and Condition Data

We store data related to your surf forecasting preferences:

• Alert conditions and criteria (swell height, period, direction, wind, tide)
• Notification preferences and delivery methods (email, SMS)
• Favorite spots and their order
• Private spots and sharing permissions
• Alert delivery history and notification logs

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Deliver surf forecasts, condition alerts, and spot information
• Send Notifications: Alert you when surf conditions match your configured criteria via email and/or SMS text message
• SMS Delivery: Use your phone number exclusively to send surf condition alerts when you have enabled SMS notifications
• Personalize Experience: Show you relevant spots and forecasts based on your favorites and location
• Maintain Accounts: Manage your user account and authentication
• Improve the Service: Analyze usage patterns to enhance features and performance
• Communicate: Send service updates, security alerts, and support messages
• Ensure Security: Detect and prevent fraud, abuse, and security incidents
• Comply with Legal Obligations: Respond to legal requests and prevent illegal activities

Important: We will never sell, rent, or share your phone number with third parties for marketing purposes. Your phone number is used exclusively for delivering the surf alerts you have requested.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

• Public Spots: Public surf spots and their information are visible to all users
• Shared Private Spots: When you share a private spot with another user, they can access that spot's information and forecasts
• User Profiles: Your username and public profile information may be visible to other users

4.2 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Cloud hosting and infrastructure (Vercel, Supabase)
• Email delivery services for notifications
• SMS delivery services for text message alerts (your phone number is shared only with our SMS provider for the purpose of delivering your alerts)
• Weather and ocean data providers
• Analytics and monitoring services

All service providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests from government authorities
• Court orders or subpoenas
• Protection of our rights, property, or safety
• Emergency situations involving safety or security

4.4 Business Transfers

If SpotAlert is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Phone Number: Stored while SMS alerts are enabled; immediately removed when you delete it from your profile or close your account
• SMS Delivery Logs: Retained for up to 90 days for troubleshooting and compliance purposes
• Spot Information: Private spots are deleted when your account is deleted; public spots may be retained
• Forecast Data: Historical forecast data may be retained for analytical purposes
• Usage Logs: Typically retained for 90 days unless required for security or legal purposes

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You have the right to access and receive a copy of your personal information.

7.2 Correction

You can update or correct your personal information through your account settings.

7.3 Deletion

You can request deletion of your account and associated personal information. Note that some information may be retained as required by law or for legitimate business purposes.

7.4 Opt-Out of Communications

You can control your communication preferences at any time:

• Email Alerts: Disable in your account settings or click unsubscribe in any email
• SMS Alerts: Disable in your account settings or reply STOP to any text message
• Remove Phone Number: Delete your phone number from your profile to permanently opt-out of SMS alerts

Note: You may continue to receive important account-related messages (such as security alerts) even if you opt-out of surf condition alerts.

7.5 Exercise Your Rights

To exercise any of these rights, please contact us at privacy@spotalert.app

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and features

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.

9. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Third-party data sources we use include:

• Weather and ocean forecast providers (NOAA, CMEMS, Meteomatics)
• Tide and buoy data services
• Map and location services

10. Children's Privacy

SpotAlert is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country. By using the Service, you consent to the transfer of your information to the United States and other countries.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how it is used
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: