Privacy Policy

1. Overview

This Privacy Policy explains how Stormy CMS (“we,” “us”) collects, uses, and shares information when you use our websites, dashboard, content APIs, SDKs, and related services (collectively, the “Service”). It applies to account holders and team members. Content that you publish through your own applications is governed by your own privacy practices toward your end users.

2. Information We Collect

Account information

When you sign in with an identity provider such as GitHub or Google, we receive basic profile information from that provider, including your name or username, email address, and the identifier that provider assigns to you. We do not receive or store your password for those providers.

Billing information

Payments are processed by Stripe. We store references to your Stripe customer and subscription (such as identifiers and subscription status) but not your full payment card details, which are handled directly by Stripe under its own privacy policy.

Content you store

We store the content, media, and configuration you add to your sites so that we can provide the Service to you.

Usage and technical information

We collect information generated by your use of the Service, such as API requests, log data, and session information, which we use to operate, secure, and troubleshoot the Service.

3. How We Use Information

• to provide, maintain, and improve the Service;
• to authenticate you and keep your account secure;
• to process subscriptions and payments;
• to send transactional messages, such as team invitations and billing notices;
• to enforce our Terms of Service and protect against abuse, including rate limiting; and
• to comply with legal obligations.

4. Cookies

We use a small number of essential cookies, such as a session cookie that keeps you signed in to the dashboard. These cookies are required for the Service to function. We do not use advertising cookies.

5. How We Share Information

We do not sell your personal information. We share information only with:

• Service providers that help us operate the Service, such as our payment processor (Stripe), cloud hosting and storage providers, and email delivery providers, in each case only as needed to provide the Service;
• Your team — members of a site can see basic profile information (such as name and email) of other members of that site;
• Legal authorities, when required by law or to protect the rights, safety, or property of Stormy CMS, our users, or the public; and
• A successor entity, in connection with a merger, acquisition, or sale of assets, in which case we will notify you.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account or cancel a site, we will delete or anonymize the associated information within a reasonable period, except where we need to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Security

We use technical and organizational measures designed to protect your information, including encrypted connections, hashed credentials, and scoped API keys. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by law.

8. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update most account information from your dashboard settings. For other requests, contact us at the address below and we will respond as required by applicable law.

9. Children

The Service is not directed to children and may not be used by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can delete it.

10. International Transfers

We may process and store information in countries other than your own. Where we do, we take steps designed to ensure your information receives an adequate level of protection consistent with this policy and applicable law.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice, such as by email or a notice in the dashboard, before the changes take effect. The “Last updated” date above reflects the most recent revision.

12. Contact

Questions about this policy or your personal information can be sent to support@stormycms.com.