Privacy Policy

1. Data We Collect

When you use Climora Labs, we collect the following types of information:

• Account data: email address, name, and password (stored as a secure hash)
• Usage data: pages visited, features used, signal interactions, and session duration
• Broker connection data: broker type and access tokens (encrypted at rest)
• Order review data: details of orders you submit for review through the platform
• Billing data: subscription status and trial information (payment details are handled entirely by Stripe)

2. How We Use Your Data

We use the information we collect to:

• Provide and improve the Climora Labs service
• Send you relevant signal notifications and account updates
• Process billing and subscription management via Stripe
• Comply with legal obligations
• Detect and prevent fraudulent or unauthorized activity

We do not sell your personal information to third parties.

3. Third-Party Services

We work with the following third-party services to deliver our platform:

• Stripe: Handles all payment processing. We never store credit card or banking information. Stripe's privacy policy applies to payment data.
• Firecrawl: Used to enrich market signals with publicly available web content. Only public URLs are scraped; no personal user data is shared.
• NOAA / OpenWeather: Public weather data APIs. No personal data is shared with these services.

4. Data Retention

We retain your account data for as long as your account is active. If you cancel your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or compliance purposes. Signal history and order review data may be retained in anonymized form for product improvement purposes.

5. Security

We use industry-standard encryption (TLS) for all data in transit and encrypt sensitive data at rest, including broker access tokens. We conduct regular security reviews and follow OWASP security best practices. However, no method of transmission over the internet is 100% secure.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the address below. We will respond to verified requests within 30 days.