Privacy Policy | Utah Ski Parking Alerts

This Privacy Policy describes how Wasatch Crest Holdings LLC ("Company," "we," "us," or "our") collects, uses, and protects your personal information when you use Utah Ski Parking Alerts ("Service").

1. Information We Collect

We collect the following types of information:

Account Information: Email address, name, and authentication data provided through our identity provider (Clerk).

Phone Number: If you opt in to SMS alerts, we collect and encrypt your phone number.

Watch Preferences: The dates, resorts, and notification preferences you configure.

Payment Information: Billing is managed through Clerk Billing and processed by Stripe. We do not store credit card numbers on our systems.

Usage Data: Service usage patterns, alert delivery status, and interaction with notifications.

Device and Log Data: IP addresses, browser type, operating system, and access times for security and troubleshooting purposes.

2. How We Use Your Information

We use your information to:

Provide and operate the Service
Send parking availability alerts via email and SMS
Process payments and manage subscriptions
Communicate service updates, changes, and important notices
Improve and optimize the Service
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations
Enforce our Terms of Service

3. Data Protection

We implement security measures to protect your personal information:

Phone numbers are encrypted at rest using AES-256 encryption
All data transmission uses TLS/HTTPS encryption
Authentication is handled by Clerk with industry-standard security
Payment processing is handled by PCI-compliant Stripe
Access to personal data is restricted to essential personnel only
Regular security assessments and monitoring

While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

4. Data Sharing

We do not sell your personal information. We share data only with:

Service Providers: Third-party services necessary to operate the Service, including:

Clerk (authentication)
Stripe (payments)
Twilio (SMS)
Resend (email)
Cloud infrastructure providers

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements: We may disclose your information when required by law, court order, subpoena, or other legal process, or when we believe disclosure is necessary to:

Comply with applicable laws or regulations
Protect our legal rights or property
Protect the safety of users or the public
Investigate potential violations of our Terms

Business Transfers: If Wasatch Crest Holdings LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. SMS Communications

When you opt in to SMS alerts, we maintain records of your consent for compliance purposes. You can opt out at any time by:

Texting STOP to our notification number
Updating your preferences in your account settings
Contacting us at hello@powderlogic.ai

We maintain an audit log of SMS consent actions (opt-in, opt-out, number changes) as required for TCPA compliance.

6. Data Retention

We retain your data as follows:

Account Data: Retained while your account is active and for 30 days after deletion to allow for account recovery.

Alert History: Retained for 90 days for your reference.

SMS Consent Logs: Retained for 5 years for regulatory compliance.

Billing Records: Retained as required by tax and accounting laws (typically 7 years).

Security Logs: Retained for up to 1 year for security and fraud prevention.

After the retention period, data is securely deleted or anonymized.

7. Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Opt out of marketing communications
Restrict or object to certain processing
Withdraw consent where processing is based on consent

To exercise these rights, contact us at hello@powderlogic.ai. We will respond to your request within 30 days, or as required by applicable law.

Note that some data may be retained as required by law or for legitimate business purposes even after you exercise deletion rights.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising cookies or sell data to advertisers.

Essential Cookies: Required for the Service to function (authentication, security, preferences).

Analytics Cookies: May be used to understand how users interact with the Service and to improve functionality. You may opt out of analytics cookies through your browser settings.

We do not respond to "Do Not Track" signals because there is no industry consensus on their meaning.

9. Third-Party Links

The Service may contain links to third-party websites, including ski resort booking pages. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.

11. International Users

The Service is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

12. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of sales (we do not sell personal information).

To exercise your California privacy rights, contact us at hello@powderlogic.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For privacy-related questions, concerns, or to exercise your rights, contact us at:

Email: hello@powderlogic.ai

Mail:
Wasatch Crest Holdings LLC
Attn: Privacy
Salt Lake City, UT