1. Who We Are
StormDesk is operated by Franklin Labs LLC. This policy describes how we collect, use, and protect information when you use the StormDesk platform.
2. Information We Collect
Account Information
Name, email address, and organization affiliation provided during account creation by your agency administrator.
Contact Information
Phone numbers added by agency administrators for SMS alert delivery. Phone numbers are stored in E.164 format and used solely for delivering weather alerts and verification messages.
Usage Data
Login timestamps, pages visited, and feature usage to improve the Service. We use self-hosted analytics and do not share usage data with third parties.
3. How We Use Your Information
- Deliver weather alerts, briefings, and emergency notifications via email and SMS
- Send one-time verification codes to confirm phone numbers
- Authenticate users and manage access to the platform
- Improve the Service based on aggregate usage patterns
- Communicate service updates and changes
4. SMS Data
When you are added as an SMS contact:
- Your phone number is stored securely and used only for StormDesk alert delivery
- We record verification status, opt-in/opt-out timestamps, and message delivery status
- SMS messages are sent via Amazon Web Services (AWS) infrastructure
- We do not sell, rent, or share phone numbers with third parties
- Mobile opt-in data and SMS consent records are not shared with third parties or affiliates for marketing or promotional purposes
- Phone numbers of contacts who reply STOP are retained in opted-out status to prevent re-enrollment
5. Data Sharing
We do not sell your personal information. We share data only with:
- Infrastructure providers (AWS) for email and SMS delivery — subject to their privacy policies
- Your agency administrators who manage contacts and access within their organization
- Law enforcement only when required by valid legal process
6. Data Security
We protect your data using encryption in transit (TLS) and at rest. Access to production systems is restricted and authenticated. Database backups are encrypted and retained for disaster recovery.
7. Data Retention
- Account data is retained while your organization maintains an active subscription
- SMS delivery logs are retained for 90 days
- Audit logs are retained for 1 year
- Upon account deletion, personal data is removed within 30 days
8. Your Rights
You may request to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your personal data (subject to legal retention requirements)
- Opt out of SMS messages by replying STOP to any message
- Unsubscribe from email notifications via the link in any email
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via the Service or email. The effective date at the top of this page indicates the last revision.