Privacy Policy

WeatherMind SAS ("WeatherMind", "we", "our") is committed to protecting the privacy of individuals whose personal data we process. This policy explains what data we collect, why, and how we handle it. WeatherMind provides AI-powered property claim assessment services to insurers. We process personal data as a data processor on behalf of our insurer clients, and as a data controller for our own business operations.

When you visit our website, we may collect: - Technical data: browser type, pages visited, referring URL, geographic region, and device type. Your IP address is used transiently to derive an anonymised hash for aggregate visitor counting and is never stored. - Contact data: name, email, company, and phone number if you fill in a contact or demo request form. When our platform processes a claim on behalf of an insurer, we may process: - Policyholder identification data (name, claim reference). - Visual data: photos and videos of property damage. - Claim-related data: declared cause, damage description, settlement amounts. This claim data is processed under the instructions and legal basis of the insurer (the data controller).

We process personal data for the following purposes: - Providing our claim assessment service to insurer clients. - Responding to demo requests and enquiries. - Improving and securing our platform. - Complying with legal obligations. We do not use policyholder claim data to train models for other clients. Each insurer's data is kept strictly separate.

Depending on the context, the legal basis for processing is: - Performance of a contract (B2B service agreements). - Legitimate interest (website analytics, platform security). - Consent (contact form submissions). - Compliance with a legal obligation. For claim data, the insurer determines the legal basis under its own privacy policy.

We do not sell personal data. We may share data with: - Cloud infrastructure providers (EU-hosted) for platform operation. - Vercel Inc. (USA) for website hosting and cookieless web analytics, under Standard Contractual Clauses. - Insurer clients, as part of the claim assessment results. - Professional advisors and regulators, where required by law. All sub-processors are bound by contractual obligations equivalent to this policy.

Website contact data is retained for up to 24 months after last interaction. Claim data is retained in accordance with the insurer client's retention schedule and applicable regulatory requirements. When retention periods expire, data is securely deleted or anonymised.

We implement technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access controls, regular security testing, and incident response procedures. WeatherMind is ISO 27001 and SOC 2 Type II certified.

Our infrastructure is hosted in the European Union. If any data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

Under GDPR, you may exercise the following rights regarding your personal data: - Access, rectification, erasure, restriction of processing. - Data portability. - Objection to processing. - Withdrawal of consent. For data processed on behalf of an insurer, please contact the insurer directly. For data we control, contact us at [email protected].

Our website does not use advertising cookies, tracking cookies, or any persistent client-side identifiers. We use Vercel Web Analytics to understand how visitors use our website. Vercel Web Analytics is a privacy-first, cookieless analytics service provided by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA), acting as a sub-processor on our behalf. Vercel Web Analytics collects only the following anonymised, aggregate data points: page URL, referrer URL, browser type and version, operating system, device type, geographic region (country/city level), and event timestamps. No cookies are placed on your device. Visitor identification relies on a temporary server-side hash derived from your IP address and user agent; this hash is automatically discarded after 24 hours and cannot be used to identify you personally or track you across websites. Your IP address is never stored by Vercel. No personal profiles are created, and no data is shared with third-party advertisers. The legal basis for this processing is our legitimate interest in understanding website usage and improving our services (GDPR Article 6(1)(f)). You may object to this processing at any time by contacting us at [email protected]. For further information, see Vercel's Web Analytics Privacy Policy at https://vercel.com/docs/analytics/privacy-policy.

We may update this policy from time to time. The latest version is always available on this page with the date of last update.

WeatherMind SAS 9 rue des Colonnes, 75002 Paris, France [email protected]