ag wx logo Ag Wx The Weather Desk

Privacy Policy

How we protect and handle your information

Last Updated: March 26, 2026

Cirrus Weather Labs LLC ("we," "our," or "us") operates the website www.ag-wx.com (the "Site"). This Privacy Policy explains what personal information we collect, how we use and protect it, what third parties receive it, and your rights regarding that information — including rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

By creating an account or using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of personal information:

  • Account Information: Email address and password (stored as a one-way hash) when you register.
  • Phone Number: If you subscribe to Ag Wx Alerts, we collect your mobile phone number to deliver SMS weather alert messages. Your phone number is stored securely in our database and is used solely for alert delivery.
  • SMS Consent Records: When you provide your phone number for Ag Wx Alerts, we record the date, time, and version of consent language you agreed to. These records are retained for regulatory compliance.
  • Payment Information: When you subscribe to a paid plan, payment card details are collected and processed directly by Stripe, Inc. We do not store your full card number, expiration date, or CVV on our servers. We receive and store your Stripe customer ID, subscription status, and billing period dates.
  • Location Data: City or location names you save to your account for personalized weather information. This is user-provided, not automatically detected.
  • Usage and Device Data: IP address, browser type, pages visited, and access timestamps collected automatically through server logs and our hosting provider.
  • Cookies and Session Data: We use a session cookie to keep you logged in. This cookie is essential for Site functionality and cannot be opted out of while using the Site. We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

We use your personal information for the following purposes:

  • Creating and managing your user account.
  • Processing subscription payments and managing billing.
  • Providing personalized weather data based on your saved locations.
  • Delivering SMS weather alerts to your phone number, only if you subscribe to Ag Wx Alerts and expressly consent to receive messages.
  • Sending transactional emails (registration confirmation, password resets).
  • Sending promotional emails about weather updates, services, or offers (you may opt out at any time).
  • Protecting the Site from fraud, abuse, and unauthorized access.
  • Improving the Site and diagnosing technical issues.

3. Third-Party Service Providers

We share personal information with the following third-party service providers, solely to operate the Site and deliver our services. We do not sell your personal information.

  • Stripe, Inc. — Processes subscription payments. Receives your email address and payment card information. Stripe's privacy policy: stripe.com/privacy.
  • Twilio, Inc. — Delivers SMS weather alert messages on our behalf via the Twilio Programmable Messaging API. Receives your phone number for message delivery only. Also provides SendGrid for transactional and promotional email delivery (receives your email address). Twilio's privacy policy: twilio.com/legal/privacy.
  • Postmark (ActiveCampaign, LLC) — Delivers transactional emails on our behalf. Receives your email address. Postmark's privacy policy: postmarkapp.com/privacy-policy.
  • Cloudflare, Inc. — Provides bot protection (Turnstile CAPTCHA) and security services. May collect your IP address and browser metadata. Cloudflare's privacy policy: cloudflare.com/privacypolicy.

These providers are contractually obligated to use your information only for the services they provide to us and in accordance with their own privacy policies.

4. Sale or Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding twelve (12) months.

5. Cookies and Tracking Technologies

The Site uses a single essential session cookie to maintain your login state. This cookie is set with the following protections: transmitted only over HTTPS (Secure), inaccessible to JavaScript (HttpOnly), and restricted to same-site requests (SameSite=Lax).

We do not use advertising cookies, analytics cookies, or third-party tracking pixels. Cloudflare Turnstile may set its own cookies for bot detection purposes during registration.

6. Data Retention

  • Account data is retained for as long as your account is active.
  • Payment records (Stripe customer ID, subscription status) are retained for as long as your account is active and for a reasonable period afterward for accounting and legal compliance.
  • Registration and password reset tokens expire within 24 hours and 1 hour respectively, and are marked as used once consumed.
  • Phone numbers are retained for as long as your Ag Wx Alerts subscription is active. When you cancel your subscription or delete your account, your phone number is removed from our database.
  • SMS consent records are retained for a minimum of five (5) years for regulatory compliance, even after account deletion.
  • Server logs containing IP addresses are retained according to our hosting provider's standard retention schedule.

When you delete your account, your user record, saved locations, phone number, and alert preferences are permanently removed from our database. Stripe subscription records, event logs, and SMS consent records may be retained for legal and financial compliance purposes.

7. Promotional Emails

You may receive periodic promotional emails about our services. You can opt out at any time by following the "unsubscribe" link in any email or by contacting us at [email protected]. Opting out of promotional emails does not affect transactional emails (e.g., password resets, billing confirmations).

8. SMS Weather Alerts (Ag Wx Alerts)

If you subscribe to Ag Wx Alerts, the following additional terms apply to your phone number and SMS communications:

  • Data collected: Your mobile phone number, provided during the subscription process.
  • Purpose: To deliver automated SMS weather alert messages triggered by National Weather Service warnings and watches for your saved locations.
  • Third-party processing: SMS messages are sent via Twilio, Inc., which processes your phone number solely for message delivery. Twilio does not use your phone number for any other purpose.
  • Message frequency: Varies based on weather conditions at your saved locations. Typical frequency is 0–10 messages per week, but severe weather may result in higher volumes.
  • Costs: Standard message and data rates from your wireless carrier may apply.
  • Opt-out: You can stop receiving SMS alerts at any time by replying STOP to any message, disabling alerts from your Alerts Dashboard, or contacting us at [email protected].
  • Help: Reply HELP to any message for assistance, or contact [email protected].
  • No sharing: We do not sell, share, or rent your phone number to any third party. Your phone number is used exclusively for delivering weather alerts.

For full SMS program terms, see our SMS Terms of Service.

9. Data Security

We implement the following measures to protect your personal information:

  • Passwords are stored using one-way cryptographic hashing and are never stored in plaintext.
  • All data transmission is encrypted via HTTPS/TLS.
  • Session cookies are restricted to secure, HTTP-only, same-site settings.
  • Payment card data is handled entirely by Stripe and never touches our servers.
  • CSRF tokens protect all form submissions.
  • Bot protection via Cloudflare Turnstile on public-facing forms.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Rights

All users have the right to:

  1. Access and review the personal information we hold about you.
  2. Request corrections to any inaccurate information.
  3. Request the deletion of your account and personal information.
  4. Opt out of promotional communications at any time.

You may delete your account at any time from your Profile page. To exercise any other rights, contact us at [email protected].

11. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
  • Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain legal exceptions (e.g., completing a transaction, legal compliance, security).
  • Right to Correct: You may request that we correct inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, service quality, or access levels for exercising your rights.

To submit a verifiable consumer request, email us at [email protected]. We will respond to verified requests within 45 days. You may also designate an authorized agent to make a request on your behalf.

In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (email address, phone number), internet activity (IP address, pages visited), and commercial information (subscription status). We have not sold any personal information.

12. Children's Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Paid subscription services require users to be at least 18 years of age or have payment authorized by a parent or legal guardian. If we become aware that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. If we make material changes, we will notify registered users by email. Your continued use of the Site after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

Cirrus Weather Labs LLC
Email: [email protected]
Website: www.ag-wx.com