HailPing Privacy Policy
Storm Digital LLC, an Ohio limited liability company ("Storm Digital," "we," "us," or "our") operates HailPing.
This Privacy Policy explains how we collect, use, disclose, and retain personal information through hailping.com, the HailPing mobile application, HailPing accounts, alerts, emails, push notifications, support, accessibility requests, and related HailPing services (collectively, "HailPing" or the "Service").
This Policy is a notice of our practices. It is not a contract and is not intended to obtain consent where applicable law requires consent to be obtained separately.
1. Scope and Territory
HailPing accounts, subscriptions, and services are intended for users located in the United States. We do not intentionally offer accounts or paid access to users outside the United States. HailPing may display storm, map, or market data about particular geographic areas, but that geographic data coverage does not change user eligibility.
This Policy does not govern third-party websites and services that independently collect information under their own policies.
2. Information We Collect
The information we collect depends on the features you use.
Account and profile information
We may collect:
- first and last name;
- email address;
- password credentials in protected form, such as a password hash;
- business or organization name;
- industry, role, and account preferences;
- plan, entitlement, and account status; and
- identifiers needed to maintain and secure the account.
We do not need or intend to store your plaintext password.
Social or federated sign-in
If you choose Google, Apple, or another identity provider, we may receive information the provider makes available, such as your name, email address, provider-specific account identifier, and authentication status. We do not receive the password you use with that provider. The provider controls its own collection and use of information.
Mobile application information and permissions
When you use the mobile application, we and our providers may receive the application version, device and operating-system type or version, installation or application identifiers, network information, crash and performance diagnostics, and similar technical information needed to operate, secure, troubleshoot, and improve the application.
The application requests access to a device capability only when a feature needs it, and the permission prompt describes the purpose at the time it is requested. You can change a permission in your device settings, although the related feature may stop working.
Alert, market, and product preferences
We may collect the locations, markets, radiuses, hail-size thresholds, industries, notification settings, report preferences, and similar criteria you select. These settings may reveal locations or markets of business interest. A location or market you enter or select is distinct from location information obtained through a device permission.
Purchases and subscription information
We may collect plan selection, transaction amount, currency, purchase and renewal dates, subscription status, invoices, payment status, payment-processor customer or transaction identifiers, limited billing details, and dispute or refund information.
Payment-card information is collected and processed by Apple or Google — whichever app marketplace you purchased through. We do not receive or store your full payment-card number.
Usage and report activity
We may collect information about how you use HailPing, including:
- pages, reports, maps, markets, and features viewed;
- searches and filters;
- alerts opened or acted upon;
- buttons or navigation elements used;
- feature usage, session duration, and timestamps;
- referring pages and campaign information; and
- subscription and entitlement checks.
Device, log, and security information
We and our providers may automatically receive:
- IP address;
- browser or application version, device type, operating system, and language;
- session and authentication identifiers;
- approximate location inferred from an IP address;
- request, server, database, content-delivery, and security logs;
- login attempts and account-security events;
- crash, performance, error, and diagnostic information; and
- fraud, scraping, rate-limit, and abuse signals.
Model Context Protocol (MCP) requests
HailPing publishes a public, read-only MCP server so an AI assistant can look up the storm reports and hail markets already published on this website. It requires no account and no key. We log each request with the caller's IP address to enforce a per-IP rate limit and to detect abuse. Those logs are not tied to a person or to a HailPing account, and the server writes nothing to your account or ours.
We do not receive your conversation with the assistant. If you connect HailPing to an assistant, that provider's own privacy policy governs what it collects from you. See the MCP server documentation for what the server exposes.
Communications and support
We collect information you provide in support requests, emails, forms, correction reports, surveys, and other communications, together with records needed to respond.
Accessibility reports
If you submit an accessibility report, we may collect your name, email, optional phone number, the webpage, app screen, or feature involved, your description, and limited technical diagnostics. Diagnostics may include the webpage or app screen, submission time, browser or application version, device and operating-system information, viewport or screen dimensions, language, and time zone.
You do not need to type your browser, application version, device type, or operating system. Accessibility submissions and diagnostics are not used for unrelated marketing, advertising, retargeting, audience building, or model training. The website form does not accept file uploads.
Email and notification information
We may receive delivery, bounce, complaint, open, click, device-token, and preference information from email or notification providers to deliver messages, maintain preferences, troubleshoot, and protect sender reputation. We collect a device push token when you enable push notifications. You can disable notifications through the application or device settings, but doing so may prevent delivery of requested alerts.
If you accept the optional marketing-email choice described in Section 9, we record that choice: its current state, the version of the disclosure you were shown, where you set it, and the dates you granted or withdrew it. That record is how we can show that we had permission to email you and that we stopped when you asked. Our email provider separately maintains a suppression list of addresses that have unsubscribed, bounced, or complained, so that an address which has asked not to be emailed is not emailed again.
HailPing does not currently send text messages, and we do not collect a telephone number for text-message marketing. If we introduce text messages, we will publish SMS terms and obtain separate consent for that channel before collecting a number for it. A phone number you give us for support or an accessibility report is used only to respond to you.
Cookies and similar technologies
We may use cookies, local storage, pixels, tags, and similar technologies for authentication, security, preferences, analytics, performance, and other functions described in this Policy.
3. Information We Ask You Not to Provide
HailPing is not designed to collect Social Security numbers, government identification numbers, full financial-account or payment-card details, medical or health information, biometric information, immigration or citizenship information, or information about children.
Do not submit highly sensitive information through HailPing or ordinary support email. If we need particular information, we will identify an appropriate collection method.
4. Sources of Information
We collect information:
- directly from you;
- automatically from your browser, device, and use of HailPing;
- from Google, Apple, or another identity provider you choose;
- from payment, email, notification, hosting, security, analytics, and support providers;
- from your organization or account administrator, if team access is offered; and
- from referral or business partners where permitted and disclosed.
Weather, business-listing, market, and storm data about places or businesses is not necessarily personal information about a HailPing account holder. When such data identifies a person, we handle it as required by applicable law.
5. How We Use Information
We may use personal information to:
- create, authenticate, and manage accounts;
- provide free and paid reports, maps, assessments, and account features;
- apply alert and market preferences;
- process purchases, subscriptions, renewals, cancellations, refunds, taxes, and disputes;
- send account, billing, security, alert, service, and legal communications;
- deliver marketing communications where permitted and manage opt-outs;
- personalize HailPing based on account settings and industry;
- operate, maintain, test, troubleshoot, and improve the Service;
- understand feature usage and performance;
- detect and prevent fraud, scraping, abuse, unauthorized access, and security incidents;
- enforce our Terms and protect rights, safety, systems, providers, and users;
- investigate and respond to support, correction, privacy, and accessibility requests;
- maintain business, tax, transaction, security, and compliance records;
- establish, exercise, or defend legal claims;
- comply with law and lawful process; and
- carry out another purpose disclosed when information is collected or with your direction or consent.
HailPing's industry assessments concern storms, markets, and business opportunities. We do not use HailPing account information to make legal, employment, lending, housing, insurance-eligibility, health-care, or similarly significant decisions about you.
6. How We Disclose Information
We may disclose personal information to vendors and service providers that perform work for us, such as cloud hosting, databases, storage, content delivery, logging, and security; identity and authentication; payment processing, subscriptions, invoicing, tax, fraud prevention, and billing support; transactional and marketing email, push notifications, and communications; analytics, error monitoring, product performance, and support; customer service; mapping and other application infrastructure; and professional advisers and contractors supporting our operations.
The following material providers and provider categories receive personal information:
| Provider | Purpose | Information | Surface |
|---|---|---|---|
| Cloudflare | Hosting, CDN, edge security, and published-content storage (R2) | IP address, request and security logs, technical device information | Website |
| Google Analytics 4 | Aggregate and feature-level usage analytics (measurement ID G-KX3LTJ76ZB) | Cookie/analytics identifiers, pages and reports viewed, referring pages, approximate location from IP | Website |
| Mapbox | Interactive storm and market maps | IP address and map tile/session requests when a map loads | Website |
| Identity providers (Google, Apple) | Federated sign-in | Name, email address, provider account identifier, authentication status | App |
| Payment processing (Apple App Store and Google Play — billing is 100% in-app purchase) | Subscriptions, invoices, renewals, refunds, and fraud prevention | Plan, transaction and customer identifiers, payment status, limited billing details | App |
| Mobile subscription management (RevenueCat) | Recording and validating app-store subscription purchases and entitlements | Purchase and app-user identifiers, subscription status | App |
| Push notification services (Apple Push Notification service, Firebase Cloud Messaging) | Delivering user-requested hail alerts and account notices | Device push token, delivery status | App |
| Hosting, database, and email infrastructure | Accounts, entitlements, alerts, and transactional email | Account records, alert preferences, email delivery and bounce data | App |
Website providers are named individually. Mobile-application entries are described by category because the specific in-app software development kits are confirmed as part of each app release review; we will name additional providers here as that review is completed and if the categories change.
We may also disclose information:
- when required by law, subpoena, court order, or other valid legal process;
- when reasonably necessary to protect rights, safety, property, users, systems, or the public;
- to investigate fraud, abuse, security incidents, or violations of our Terms;
- in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale, or transfer of all or part of HailPing or Storm Digital; and
- with your direction or consent.
Service providers may process information for us under contractual restrictions. Some providers may independently process limited information under their own terms, as identified above or at the relevant feature.
7. Sale, Sharing, and Targeted Advertising
We do not sell personal information for money. Based on our verified current practices, we do not sell or share personal information for cross-context behavioral advertising or process personal information for targeted advertising as those terms are defined under privacy laws that apply to us.
We do not knowingly sell or share personal information of children under 16.
8. Analytics, Cookies, and Privacy Controls
The public HailPing website uses Google Analytics 4 (measurement ID G-KX3LTJ76ZB) to help us understand aggregate and feature-level usage, and Mapbox to draw storm and market maps. The website does not use a tag manager, advertising or remarketing pixel, session-replay tool, enhanced-conversion forwarding, or server-side advertising events.
In the mobile application, we use technical, diagnostic, and product-analytics information as described above to operate, secure, and improve the app.
Authentication and security technologies may be necessary for accounts and cannot always be disabled without preventing the Service from functioning. Website storage can be controlled through browser settings, and mobile permissions and some identifiers can be controlled through device settings. Changing them may affect login, preferences, alerts, purchases, or reports.
HailPing does not display a cookie-consent banner merely because ordinary analytics is present, and there is no sale, sharing, or targeted advertising for you to opt out of. We disclose our actual practices here and will add a consent or opt-out mechanism, including recognition of a universal opt-out preference signal such as Global Privacy Control where it applies, if that is required by applicable law, contract, territory, or a material change in our processing.
9. Communications and Choices
We send three different kinds of message, and they are governed differently.
- Transactional messages — account confirmation, password and security notices, receipts, and billing notices. We send these because you have an account or a subscription. They are not marketing, and you cannot unsubscribe from them while your account is open.
- Storm alerts — the hail alerts you asked for when you chose your alert states and thresholds. You control these under Delivery settings on the Alerts screen in the app.
- Marketing email — optional, and described below.
Marketing email
When you create a HailPing account, we offer you the choice to receive marketing email from us. The choice is presented during setup as a checkbox that is selected by default, and you can clear it before you finish. It is optional: whether or not you accept, you get the same account, the same free trial, the same storm alerts, and the same app features. We record your choice only when you complete setup, so leaving before then enrolls you in nothing.
If you accept, we may send you hail-market insights, product and storm-report updates, invitations to take part in research, and occasional offers for HailPing products. These are marketing messages, and some of them are promotional.
To decide who receives a marketing message we use your marketing choice, your email address and name, and your subscription status — for example, to write to someone whose free trial ended without continuing. We do not use your in-app activity, the storms you view, or the reports you open to decide what marketing to send you.
Marketing email is sent only to recipients in the United States. Creating an account, requesting alerts, purchasing a subscription, or submitting a support or accessibility request does not by itself enroll you in marketing — only the choice described above does.
Withdrawing your choice
You can withdraw at any time, in either of two ways, and both take effect immediately: turn off Useful updates and offers under Account in the HailPing app, or use the unsubscribe link in any marketing message. Withdrawing stops future marketing email. It does not affect storm alerts or transactional messages, and it does not change your account, subscription, or access.
We may continue sending non-marketing communications reasonably necessary for your account, subscription, security, requested alerts, transactions, legal notices, or support.
10. Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, maintain account and transaction records, prevent abuse, comply with law, resolve disputes, and enforce agreements.
How long we keep information depends on the category and the reason we hold it:
- Account, profile, sign-in identifiers, and preferences: for as long as your account is open, and then only as needed to complete deletion and meet the exceptions below.
- Subscription, invoice, and tax records: for the period required by tax, accounting, and financial-record obligations, which outlasts the account.
- Security, authentication, and abuse logs: for a limited period needed to investigate incidents and protect the Service.
- Support and accessibility correspondence: for as long as needed to resolve the matter and document remediation.
- Usage analytics: according to the retention setting of the analytics provider, in aggregate or pseudonymous form.
- Marketing-email consent record: for as long as your account is open, and deleted with it. It exists to evidence that we had permission to email you and that we stopped when you withdrew it.
- Email suppression records: kept by our email provider for as long as needed to keep honouring an unsubscribe. This one outlasts your account on purpose: an address that has asked not to receive marketing must stay unmailable, and forgetting it is what would cause the message it asked us not to send.
- Backups: until the backup rotates out of its normal lifecycle, after which deleted information is not restored to the live Service.
When information is no longer required, we take reasonable steps to delete, deidentify, or securely dispose of it, subject to legal, security, backup, and dispute-related needs.
11. Account Deletion
You can request deletion of your HailPing account and associated personal information at any time. See Delete Your HailPing Account for what is deleted, what may be retained, and how to submit the request. We may verify the request before acting on it.
If you accepted marketing email, deleting your account deletes the consent record with it, and a deleted account receives no further marketing. If you had unsubscribed, your email provider's suppression record for that address is retained rather than deleted, so that the address stays unmailable — see Section 10.
Deleting an account does not by itself cancel a subscription billed through an app store or another third party. Cancel recurring billing through the applicable billing channel first.
12. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information within our control. No website, application, network, storage system, or Internet transmission can be guaranteed to be completely secure.
You are responsible for using a unique password, protecting your credentials, and notifying us of suspected unauthorized access.
13. Your Privacy Rights
Depending on where you live, the information involved, and whether a law applies to us, you may have rights to:
- request access to or information about personal information;
- request correction of inaccurate information;
- request deletion of certain information;
- obtain a portable copy of certain information;
- opt out of certain sale, sharing, targeted advertising, or profiling;
- limit certain uses or disclosures of sensitive personal information;
- withdraw consent where processing is based on consent;
- appeal the denial of a request where applicable; and
- exercise rights without unlawful discrimination.
Rights are subject to definitions, exceptions, and verification requirements. To submit a request, see Submit a Privacy Request or email help@hailping.com with the subject "HailPing Privacy Request". Do not send sensitive verification documents through ordinary email unless we instruct you to use a secure method.
An authorized agent may submit a request where permitted. We may request proof of authority and verify the request directly with you.
14. Cross-Border Processing
We and our providers process information in the United States and other locations in which approved providers operate. Information may be subject to the laws and lawful access rules of those locations.
15. Children's Privacy
HailPing is intended for adults and business users. It is not directed to children under 13, and we do not knowingly collect personal information online from children under 13. If you believe a child provided personal information, contact us at help@hailping.com so we can review and address the matter.
16. Third-Party Services
Third-party websites and services accessible through HailPing maintain their own privacy practices. This Policy does not govern information a third party collects independently from you. Review the third party's privacy notice before providing information.
17. Changes to This Policy
We may update this Policy to reflect changes in HailPing, providers, practices, or law. The current version will be posted with a revised Last Updated date. If a change is material, we will provide additional notice or obtain consent when required.
Contact
Storm Digital LLC
308 Conant St
Unit #737
Maumee, OH 43537
Email: help@hailping.com