← Climatearray

Draft — pending legal review

Privacy Policy

Last updated: 10 June 2026

Who we are

Climatearray ("we", "us") provides a climate risk intelligence platform at climatearray.com. This policy describes what personal and business data we collect, why, and how it is handled. Questions: hello@climatearray.com.

Data we collect

  • Account data — name, email address, password hash, and organization membership, managed through our authentication provider (Supabase Auth).
  • Portfolio data you upload — asset names, coordinates, asset classes, replacement values, and related attributes you import for risk analysis. This data belongs to you.
  • Derived analytics — risk scores, expected annual loss estimates, and reports computed from your portfolio data.
  • Usage data — API request logs (endpoint, timing, status) for authenticated API keys, and aggregate token usage for the AI assistant.
  • Error diagnostics — when error tracking is enabled, technical error reports (stack traces, browser metadata) are sent to Sentry. We do not intentionally include portfolio contents in error reports.

Where data is stored

Application data is stored in a Supabase (AWS) database located in the ap-south-1 (Mumbai, India) region. The web application is served by Vercel's global edge network. Public climate hazard layers (model outputs, boundary files) contain no customer data.

Third-party processors

  • Supabase / AWS — database, authentication, file storage.
  • Vercel — application hosting and delivery.
  • Anthropic — powers the optional ArrAI assistant; questions you ask it (which may reference your portfolio summary) are processed by the Claude API.
  • Sentry — error monitoring (when enabled).
  • OpenStreetMap / Nominatim / Overpass — location search and company asset discovery queries (search terms only, no account data).

How long we keep data

Account and portfolio data are retained while your organization has an active account, and deleted on verified request after account closure. API usage logs are kept for operational monitoring and quota enforcement.

Your rights

You may request access to, correction of, or deletion of your personal data, and export of your portfolio data, by contacting hello@climatearray.com. We handle requests in accordance with the Australian Privacy Principles (Privacy Act 1988 (Cth)) and, where applicable, the GDPR.

Changes

We will post any changes to this policy on this page with an updated revision date.