Privacy Policy

1. Information We Collect

Account data: When you sign up, we collect your email address and name via our authentication provider (Clerk).

Device data: HeatAlert devices send temperature, humidity, and heat index readings to our servers every 60 seconds. Each reading is associated with the unit and account it belongs to.

Location data: If you set a location for a unit, we store the street address and GPS coordinates you provide. This is used for the dashboard map and weather forecasting.

Payment data: Payment processing is handled entirely by Stripe. We do not store credit card numbers. We store a Stripe customer ID and subscription status to manage your plan.

2. How We Use Your Information

We use your data to: operate the HeatAlert dashboard, send alert emails and SMS when configured, generate weather forecasts for your unit locations, produce OSHA compliance reports, and process subscription payments.

3. Data Retention

Sensor readings are retained according to your plan: 30 days (Free), 1 year (Pro), or indefinitely (Enterprise). You can export your data as CSV at any time from the History page. Deleting a unit permanently removes all its readings.

4. Third-Party Services

We use: Clerk (authentication), Stripe (payments), SendGrid (email), Open-Meteo (weather forecasts), and OpenStreetMap / Nominatim (maps and geocoding). Each service has its own privacy policy. We do not sell your data to any third party.

5. Text Messages (SMS) and Mobile Information

If a mobile number is enrolled for heat-safety alerts, we collect and store that number, the consent that authorised it (who agreed, how, and when), and a record of the alert messages sent to it. Mobile numbers are used solely to deliver workplace heat-safety alert messages and related service messages (such as the one-time enrollment disclosure). They are never used for marketing or promotional messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, excluding the aggregators and providers of the text-message service used to deliver the messages.

You can opt out at any time by replying STOP to any message; reply HELP for help. An opt-out is honoured immediately and can only be reversed by you (by replying START) — not by your employer. See our SMS program description for message content, frequency and terms.

6. Security

All data is transmitted over HTTPS. Database connections use encrypted channels. Authentication is handled by Clerk with industry-standard session management. Device API keys are generated using cryptographically secure random bytes.

7. Contact

For privacy questions, contact us at privacy@heatalert.com.