Privacy Policy

This Privacy Policy explains how HotForecast (“we”, “us”, operated by Alexandre Duforest (sole trader), SIREN 798 584 207, 35 rue Émile Zola, 59150 Wattrelos, France) collects, uses and protects your information when you use our website and subscribe to our daily weather video service.

1. Data we collect

• Subscription data: your weather region, delivery channel (WhatsApp or Telegram) and, for WhatsApp, your phone number.
• Presenter preference: which gender of presenter you want (and your optional 18+ choice) — used solely to deliver the right daily video.
• Payment data: handled entirely by our payment provider (Stripe). We never see or store your full card details.
• Technical data: standard logs (IP address, browser type, pages visited) for security and analytics purposes.

2. What we deliberately do NOT collect

We do not ask for your name, photos, date of birth or address. Your videos are generated from your region and presenter preference only — by design, not by accident.

3. How we use your data

• To generate and deliver your daily weather video by 7:00 AM.
• To manage your subscription, billing and cancellations.
• To provide support when you contact us.
• To measure and improve the service (aggregated, non-identifying analytics).

4. Data sharing & third parties

We only share data with the providers required to run the service: payment (Stripe, US), delivery (Telegram, WhatsApp Business API, and email delivery via Resend, US), hosting and AI video rendering (Hetzner, Germany) and database (Supabase, Ireland — both in the EU), content delivery (Cloudflare, US), analytics (PostHog, EU) and AI voice generation (ElevenLabs, US). Each processes data only on our instructions, and US-based providers rely on appropriate GDPR safeguards (standard contractual clauses and/or the Data Privacy Framework). We never sell your data.

Weather data is provided by WeatherAPI.com.

5. Retention

We keep your subscription data while your account is active. Generated videos are retained for up to 7 days for caching and re-delivery purposes, then automatically deleted. When you cancel, personal data is deleted or anonymized within 12 months, except what we must keep by law (e.g. invoices).

6. Your rights

Depending on your jurisdiction (including the EU/GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected].

7. Security

We use encryption in transit (TLS) and at rest, least-privilege access for our systems, and reputable infrastructure providers. No method of transmission is 100% secure, but we work to protect your data accordingly.

8. Cookies & analytics

On your first visit, a consent banner lets you accept, refuse or customize non-essential cookies and trackers — no tracker runs before you choose, and refusing changes nothing to how the service works.

• Strictly necessary: one cookie stores your consent choice itself. It never requires consent.
• Analytics (your consent): PostHog (EU-hosted) helps us understand how the onboarding is used. Declined by default until you accept, and never used to identify you — we store only pseudonymous identifiers.

You can change or withdraw your choice at any time via “Cookie settings” in the footer of every page. Each decision is recorded (timestamp and a hashed technical identifier — never your raw IP address) so we can prove your consent, as required by GDPR.

9. Changes to this policy

If we make material changes, we will notify you by email or through the service before they take effect.

10. Contact

For any privacy question or request: [email protected] or via our contact page.