Privacy Policy

CropStack Weather is a pilot freeze-alert and forecast-intelligence service for commercial farms in the United States, operated by CropStack ("we," "us," "our"). You can reach us at tomas@cropstack.ai.

To operate the service, we collect:

• Account information: name, email address, and a hashed authentication credential (we use magic-link sign-in, so we never store your password).
• Contact information: mobile phone number, if you enable SMS alerts.
• Farm data: farm and crop-block descriptions you enter — location (lat/lng or address), acreage, crop type, variety, bud stage, protection type, and related notes.
• Generated data: forecast runs, risk assessments, alert history, and any freeze events you log.
• Standard server logs: IP address, browser user-agent, and timestamps, kept for security and debugging.

• To send you forecast emails and freeze-alert SMS messages.
• To compute risk assessments for the crop blocks you register.
• To improve the service — for example, by comparing observed freeze outcomes against prior forecasts.
• To communicate with you about service changes or outages.

We do not sell your personal information. We do not share your data with advertisers.

You receive SMS messages only after you (1) create an account, (2) enter and confirm your mobile number, and (3) explicitly enable SMS notifications in your account preferences. Message frequency depends on weather conditions; during freeze events you may receive multiple messages per night, but on most nights you will receive none. Message and data rates may apply per your carrier.

Reply STOP to any message to unsubscribe from all SMS messages. Reply HELP for help. Carriers are not liable for delayed or undelivered messages.

We do not sell or rent your mobile number. No mobile information or SMS opt-in consent is shared with third parties or affiliates for marketing or promotional purposes. Your number is shared only with our SMS delivery provider (Twilio), solely to send the alerts you requested.

You can also disable SMS notifications at any time from your account preferences page on the dashboard.

We rely on the following processors to deliver the service. Each sees only the data necessary for its function:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and scheduled job execution.
• Twilio — SMS message delivery (receives your phone number and message body only).
• Resend — email delivery (receives your email address and message body only).
• Anthropic — generates the narrative text of forecasts and alerts. We send only de-identified weather data and crop context (no personal identifiers).
• NOAA / National Weather Service and Open-Meteo — provide raw forecast data. We query them; they do not receive your personal data.

We retain your account data, farm data, and alert history for as long as your account is active, plus a reasonable period thereafter for legal and dispute-resolution purposes. You can request deletion of your account and associated data at any time by emailing tomas@cropstack.ai.

We use industry-standard practices including encryption in transit (HTTPS), encryption at rest for the database, row-level access policies, and least-privilege access for service credentials. No system is perfectly secure; you use the service at your own risk.

CropStack Weather is intended for use by commercial farm operators and is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy as the service evolves. Material changes will be communicated by email to active account holders. The "Last updated" date at the top reflects the most recent revision.

Questions about this policy? Email tomas@cropstack.ai.