Privacy Policy

CropStack Weather is a weather-alert and forecast service for commercial farms in the United States, operated by CROP STACK LLC ("CropStack," "we," "us," "our"), 1701 Heim Road, Mount Dora, FL 32757. You can reach us at support@cropstack.ai.

In this policy, the account holder is the person who signs in and sets up a farm. A contact is any person the account holder adds to receive alerts, such as crew or an adviser. Contacts do not need an account.

• Account information: the account holder's email address and sign-in credentials. A password is stored only as a salted hash, never in a form we or anyone else can read. We also email one-time sign-in codes.
• Contacts the account holder adds: each person's name, phone number, email address, role, and preferred language, and their alert choices: which alerts they get, by text, WhatsApp, or email, quiet hours, minimum risk levels, and delivery times.
• Farm & block setup: location (a map pin), acreage, crop, variety, bud stage, soil and irrigation details, protection methods, crew work hours, and the thresholds you set: freeze temperatures, heat index, spray wind and rain limits, and a spray temperature cap.
• Plans and logs you enter: spray plans (type and timing), irrigation and rain logs, freeze-event records, and observed overnight lows.
• Texts and WhatsApp messages sent to our number: the sender's phone number and the message, stored when it arrives, including from numbers not linked to any farm. This is how crews log irrigation and overnight lows by text.
• Notes and support requests: a few fields accept free-text notes, and support requests are stored and forwarded to our support inbox. Please don't enter anything you wouldn't want stored, such as specific chemical products or supplier details. The service doesn't need them to work.
• Address searches: text typed into the map's address search, which we pass to a geocoding service to find the place.
• Generated data: forecast runs, risk assessments, irrigation and spray recommendations, AI-written alert text and draft notes, and a record of each alert sent (freeze, heat, too-hot-to-spray, spray-window, and irrigation), including who it went to and the message itself. For the morning brief, the evening forecast email, and the weekly water report we keep the send date, subject line, and delivery counts.
• Security and logs: we record sign-in attempts only as keyed digests of the IP address, or of the email address together with the IP address, never the raw values, and delete them after a day. Our hosting provider keeps standard request logs (IP address, browser user-agent, timestamps), which can include a phone number or email address in an error message, for security and debugging.

What we don't collect: we don't ask for the specific chemical products, active ingredients, application rates, or purchase and inventory records for your operation, and there are no file uploads.

• To send the alerts turned on for each contact: freeze alerts, heat alerts, too-hot-to-spray alerts, spray-window alerts, irrigation recommendations, the morning brief, the evening forecast email, and the weekly water report, by text (SMS or MMS), WhatsApp, or email.
• To reply to texts sent to our number and record the irrigation runs and overnight lows they report.
• To compute risk assessments and recommendations for the crop blocks you register.
• To improve the service, for example by comparing observed freeze outcomes against earlier forecasts.
• To communicate with account holders about the service, changes, or outages, and to keep the service secure.

We do not sell personal information, and we do not share it with advertisers.

The account holder adds each contact and turns texting on for them. It is off by default. By turning it on, the account holder confirms that the contact agreed to receive these messages and was told how to stop. WhatsApp uses the same phone number and the same consent as text messages.

How often messages come depends on the weather and on which alerts are on. On a freeze night a contact can get several messages overnight. On a hot day, a heat alert means a morning heads-up and then about one reminder an hour during crew hours. Irrigation recommendations come once a day, or once a day for each block if the contact is set to a message per block, and the morning brief comes once a day if turned on. Freeze, heat, and too-hot-to-spray alerts and irrigation recommendations can arrive during quiet hours. Message and data rates may apply per your carrier. Carriers are not liable for delayed or undelivered messages.

To stop text messages, reply STOP to any text. To stop WhatsApp messages as well, or messages on every farm your number is listed on, send the single word UNSUBSCRIBE (in Spanish, CANCELAR) by text or WhatsApp. Don't send STOP or PARAR on WhatsApp, where they only log the irrigation water as off. To receive messages again, send RESUME (in Spanish, REANUDAR). If you had sent STOP or UNSUBSCRIBE by text, also reply START by text so our text provider can send to your number again. Reply HELP for the list of text commands. Opting out of texts does not stop email. The account holder can also turn texting off for a contact at any time from the contact's page.

We do not sell or rent phone numbers. No mobile information or text-message opt-in consent is shared with third parties or affiliates for marketing or promotional purposes. Apart from the providers below that host our database and logs, a contact's number is shared only with the providers that deliver the messages: Twilio for text messages, and Twilio with Meta for WhatsApp.

We use an AI model from Anthropic (Claude) to write the text of freeze, spray-window, and irrigation alerts, to draft the lead note in the evening freeze email, and to suggest a crop coefficient when you ask for one on the block form. Here is exactly what that means for your data:

• What the AI receives: the farm name and time zone, block names, crop, variety, bud stage, the thresholds and limits you set, the spray type and timing for spray alerts, and forecast data and our rules' results.
• What the AI never receives: any person's name, phone number, or email address, your free-text notes, or texts sent to our number.
• Not written by AI: heat alerts, too-hot-to-spray alerts, the morning brief, the weekly water report, and replies to texts use fixed wording.
• Training: Anthropic's commercial terms say it may not train its models on the content we send through its service, and we never use your farm's data to train any AI model.

We rely on these providers to run the service. Each receives only what it needs for its job:

• Supabase: database and sign-in.
• Vercel: application hosting, scheduled jobs, and request logs.
• Twilio: sends and receives text messages, picture messages, and WhatsApp messages. It receives recipient phone numbers, message content, and the texts people send to our number.
• Meta (WhatsApp): delivers WhatsApp messages, through Twilio. It receives the recipient's phone number and the message content.
• Resend: sends email. It receives the recipient's email address and the message. Water report emails can name the contacts who reported overnight lows.
• Anthropic: writes alert text, as described in "How we use AI" above.
• NOAA / National Weather Service and Open-Meteo: forecast and weather data. They receive farm and block coordinates, not personal information.
• OpenStreetMap (Nominatim) and the U.S. Census Bureau geocoder: find an address you type into the map search. They receive the search text. Map images load from OpenStreetMap directly into your browser, so OpenStreetMap sees your IP address.
• Healthchecks.io: monitors our scheduled jobs. When a job fails, it receives the technical error text.
• YouTube: the how-to videos on our guides page are embedded from YouTube, so your browser connects to YouTube when you view them.

We keep account data, farm data, and message history for as long as the account is active, plus a reasonable period afterward for legal and dispute-resolution purposes. Some data is deleted automatically: AI-drafted evening notes after 7 days (drafts from a freeze night are kept until May 31 of that season), and sign-in attempt records after a day. You can request deletion of an account and its data at any time by emailing support@cropstack.ai.

We use industry-standard practices, including encryption in transit (HTTPS), encryption at rest for the database, row-level access policies, and least-privilege access for service credentials. A share link lets anyone who has it view that farm's forecast page for 7 days, so share it only with people you trust. No system is perfectly secure, and you use the service at your own risk.

CropStack Weather is intended for commercial farm operations and is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy as the service evolves. Material changes will be communicated by email to active account holders. The "Last updated" date at the top reflects the most recent revision.

Questions about this policy? Email support@cropstack.ai.