Privacy policy · effective 19 July 2026
AirAgora privacy policy
AirAgora collects the minimum information needed to deliver requested results, authenticate accounts, save planning state, operate alerts and billing, improve the funnel with aggregate analytics, and meet user controls. It does not sell personal data.
Source → method → decision
Information collected and why
A result request can include email, locale, funnel identifier, general activity/sensitivity choices, selected place, rounded coordinates, timezone, source path, and optional marketing consent. Accounts add authentication/session records, saved locations, generic profiles, alert rules, recommendation history, and preferences.
Billing stores Stripe customer/subscription/Checkout references, guarded product/price/livemode facts, status, paid-through dates, and positive invoice transaction records. AirAgora does not store card numbers; Stripe processes payment details.
Security and data minimization
Raw magic-link, result, session, unsubscribe, and email-action tokens are never stored; only SHA-256 hashes are persisted. Sessions use secure cookies and unverified fallback sessions cannot read or save existing-account data.
Coordinates are rounded for saved planning. Public teaser, share, analytics, stats, and delivery logs omit exact coordinates, selected windows, hourly payloads, raw email, private profile labels, and raw tokens. IP addresses are not stored raw for throttling.
Email, consent, and vendors
Requested result, authentication, account, alert, and billing messages are operational email. Marketing/newsletter and schools updates require separate affirmative consent and can be unsubscribed without deleting an account. On result forms the marketing checkbox is unchecked.
Cloudflare hosts Pages, Functions, D1, and email delivery; OpenWeather provides modeled air data; Stripe processes subscriptions; listmonk is a best-effort mailing-list projection; Umami receives privacy-safe event properties. Vendor policies and processing locations may apply.
Retention, access, export, and deletion
AirAgora retains account and product records while an account is active and as needed for service operation, security, billing, legal obligations, and compliance records. Free history is displayed for seven days; Premium can display accumulated history. Backup and vendor retention may not disappear instantly after deletion.
Authenticated settings provide a redacted data export and account deletion flow. Deletion revokes sessions and removes or anonymizes owned product data according to database relationships while preserving records that must remain for guarded financial or security accounting. Contact [email protected] for a privacy request.
Analytics, lawful choices, and policy changes
AirAgora records bounded funnel events such as page view, search, capture, activation, Checkout, and subscription outcomes using pseudonymous funnel identifiers and allow-listed properties. Aggregate stats are bearer-protected and do not return raw user rows.
Where consent is the basis, users can withdraw it. Other processing supports a requested service, contract, security, or legitimate operational needs as applicable. Material policy changes will update the effective date and, when appropriate, be communicated through the service or email.
- No sale of personal data
- Hashed one-time and session tokens
- Rounded saved coordinates
- Separate unchecked marketing consent
- Export and deletion controls
Direct answers
Frequently asked questions
Does AirAgora store my exact browser location?
The live request uses the selected coordinate, but saved planning coordinates are rounded and public payloads/logs omit exact latitude and longitude.
Does AirAgora store raw magic or result tokens?
No. Raw tokens are returned or sent only for use; D1 stores SHA-256 hashes.
Is marketing consent required?
No. It is separate, optional, and unchecked on result capture.
Does AirAgora sell personal information?
No.
How do I export or delete my account?
Use authenticated settings. Export is redacted; deletion revokes sessions and removes or anonymizes owned product data subject to required retention.
Who can I contact about privacy?
Email [email protected].
Evidence register
Sources and further reading
The links below identify the primary references used on this page. Selection, summary, and presentation are AirAgora modifications.
Keep exploring
AirAgora provides informational planning guidance, not medical advice. Local conditions can differ from modeled forecasts; follow official guidance during severe events.