Privacy Policy

1. Introduction

SpotAlert ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our surf forecasting and alert service ("the Service").

By using SpotAlert, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Personal Information

We collect information that you voluntarily provide to us when you:

• Register for an account (email address, name)
• Set up your user profile (first name, username)
• Provide your phone number for SMS alert delivery (optional)
• Create or share surf spots (location data, spot descriptions)
• Configure alert preferences and conditions
• Contact us for support

Phone Number: If you choose to enable SMS alerts, we collect and store your phone number solely for the purpose of sending you surf condition notifications via text message. Providing your phone number is entirely optional and you can use all other features of the Service without it.

2.2 Location Information

We collect and process location data, including:

• Geographic coordinates of surf spots you create or favorite
• Location data for providing localized forecasts
• Timezone information for accurate alert timing

2.3 Usage Information

We automatically collect certain information when you use the Service:

• Pages and features you access
• Spots you view, favorite, or create
• Alerts you configure and their performance
• Device information (browser type, operating system)
• IP address and general location
• Cookies and similar tracking technologies

2.4 Forecast and Condition Data

We store data related to your surf forecasting preferences:

• Alert conditions and criteria (swell height, period, direction, wind, tide)
• Notification preferences and delivery methods (email, SMS)
• Favorite spots and their order
• Private spots and sharing permissions
• Alert delivery history and notification logs

2.5 Your Data Ownership & License

Your ownership. You retain ownership of any data you create, upload, or submit to SpotAlert, including but not limited to:

• Private surf spots
• Alert conditions and configurations
• Notes, preferences, and other user-generated content
• Associated metadata ("User Data")

Limited license to operate the Service. By using the Service, you grant SpotAlert a limited, non-exclusive, revocable license to use your User Data solely for the purpose of operating and delivering the Service, providing forecasts and alerts, and improving features and performance.

This license does not grant SpotAlert the right to sell, rent, or otherwise monetize your User Data as a standalone product or dataset. Your User Data may only be used in connection with operating a surf forecasting, condition monitoring, or alert service that is substantially similar in nature to SpotAlert.

No sale of User Data. SpotAlert does not sell your personal data or user-generated content to third parties.

Successor protection. In the event of a merger, acquisition, or sale of assets, your User Data remains subject to the commitments outlined in this Privacy Policy. A successor entity may continue to use your User Data solely for the purpose of operating a service that is substantially similar in nature to SpotAlert (e.g., surf forecasting, condition alerts, spot tracking). Use of your User Data for purposes unrelated to such a service is not permitted without your affirmative consent.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Deliver surf forecasts, condition alerts, and spot information
• Send Notifications: Alert you when surf conditions match your configured criteria via email and/or SMS text message
• SMS Delivery: Use your phone number exclusively to send surf condition alerts when you have enabled SMS notifications
• Personalize Experience: Show you relevant spots and forecasts based on your favorites and location
• Maintain Accounts: Manage your user account and authentication
• Improve the Service: Analyze usage patterns to enhance features and performance
• Communicate: Send service updates, security alerts, and support messages
• Ensure Security: Detect and prevent fraud, abuse, and security incidents
• Comply with Legal Obligations: Respond to legal requests and prevent illegal activities

Important: We will never sell, rent, or share your phone number with third parties for marketing purposes. Your phone number is used exclusively for delivering the surf alerts you have requested.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

• Public Spots: Public surf spots and their information are visible to all users
• Shared Private Spots: When you share a private spot with another user, they can access that spot's information and forecasts
• User Profiles: Your username and public profile information may be visible to other users

4.2 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Cloud hosting and infrastructure (Vercel, Supabase)
• Email delivery services for notifications
• SMS delivery services for text message alerts (your phone number is shared only with our SMS provider for the purpose of delivering your alerts)
• Weather and ocean data providers
• Analytics and monitoring services

All service providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests from government authorities
• Court orders or subpoenas
• Protection of our rights, property, or safety
• Emergency situations involving safety or security

4.4 Business Transfers

If SpotAlert is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. However, any acquiring entity will remain bound by the commitments outlined in this Privacy Policy, including limitations on the use of User Data.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Security updates managed through our infrastructure providers
• Limited employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy.

Account data

Retained while your account is active. Upon account deletion, personal data is handled in accordance with the terms below.

Phone number

Stored only while SMS alerts are enabled. Removed immediately when you delete it from your profile or close your account.

SMS delivery logs

Retained for up to 90 days for troubleshooting and compliance purposes.

User-generated spot & alert data

When you delete your account, the following data is permanently deleted and not retained:

• Private surf spots you created
• Private alert conditions associated with your account
• Public alert conditions you created
• User-specific configurations tied to your alerts or spots, and associated personal data tied to your account

We do not retain or repurpose this data after account deletion.

Forecast data

Historical forecast data associated with your private spots is permanently deleted when your account is deleted.

Usage logs

Retained indefinitely for operational purposes. Usage logs may be deleted after a reasonable period of time at our discretion.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You have the right to access and receive a copy of your personal information.

7.2 Correction

You can update or correct your personal information through your account settings.

7.3 Deletion

You may delete your account at any time. You can request deletion of your account and associated personal information. Certain limited information may be retained where required by law or for security purposes; however, user-generated spot data and alert configurations described in Section 6 are permanently deleted upon account deletion and are not retained.

7.4 Opt-Out of Communications

You can control your communication preferences at any time:

• Email Alerts: Disable in your account settings or click unsubscribe in any email
• SMS Alerts: Disable in your account settings or reply STOP to any text message
• Remove Phone Number: Delete your phone number from your profile to permanently opt-out of SMS alerts

Note: You may continue to receive important account-related messages (such as security alerts) even if you opt-out of surf condition alerts.

7.5 Exercise Your Rights

To exercise any of these rights, please contact us at privacy@spotalert.app

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and features

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.

9. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

10. Children's Privacy

SpotAlert is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country. By using the Service, you consent to the transfer of your information to the United States and other countries.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how it is used
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Material changes to data use. Any material change to provisions governing how we collect, use, share, or retain your User Data will require your affirmative consent before the change takes effect. We will not rely solely on continued use of the Service as consent for such changes.

For non-material updates, we encourage you to review this Privacy Policy periodically. Where updates do not require affirmative consent, your continued use of the Service after the effective date may constitute acceptance of those updates as described in our Terms of Service.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: