Privacy Policy
How StormwaterIQ collects, uses, and protects information about customers, inspectors, and the public records we process on your behalf.
1. Who we are
StormwaterIQ ("we", "us", "our") provides a computational hydrology platform used by stormwater utilities, public works departments, consulting engineers, and watershed organizations. This Privacy Policy describes the information we collect when you visit our website, request access, evaluate the platform, or use it under a customer agreement.
2. Information we collect
We collect three categories of information:
- Account information — names, work email addresses, employer, role, and authentication credentials provided when you or your organization create an account.
- Operational data — inspection records, photos, GPS tracks, parcel geometries, permit identifiers, and other content uploaded to or generated by the platform under your customer agreement.
- Technical information — IP address, device and browser metadata, pages requested, and timestamps captured automatically when you interact with our website or product.
Public regulatory data (NPDES permits, NOAA Atlas 14 records, USGS 3DEP, NLCD, NRCS soils) is referenced from authoritative sources. We do not treat that data as personal information.
3. How we use information
We use the information we collect to:
- provide, maintain, secure, and improve the platform;
- authenticate users and enforce role-based access;
- generate compliance reports and engineering outputs at your direction;
- communicate with you about your account, support requests, and material changes to the service;
- comply with legal obligations and respond to lawful requests from regulators.
We do not sell personal information. We do not run third-party advertising or analytics pixels on authenticated dashboard surfaces.
4. Field-collected data
Inspection photos, signatures, and GPS tracks captured by our mobile applications are collected only during active inspection sessions and are tagged to the responsible inspector and the customer organization that authorized the work. Background location is opt-in and disabled by default.
5. Sharing
We share information only:
- with service providers under written contracts that limit use to providing services to us (e.g. hosting, error monitoring, email delivery);
- with the customer organization that authorized your account;
- when required by law or to protect the rights, safety, or property of StormwaterIQ, our customers, or the public;
- in connection with a corporate transaction, where the recipient agrees to honor this Policy.
6. Security
We protect customer data using AES-256 encryption at rest, TLS 1.3 in transit, VPC isolation per environment, web application firewalls on public endpoints, least-privilege IAM, and row-level security in the database. We target SOC 2 Type II by the end of Phase 3 of our published roadmap. No system is perfectly secure; we will notify affected customers without undue delay if we determine a personal data breach has occurred.
7. Retention
We retain customer operational data for the life of the customer agreement and for the period required by applicable regulatory recordkeeping rules thereafter. Account information for individual users is retained until the account is deleted or the customer organization terminates its agreement.
8. Your choices and rights
Depending on where you live, you may have the right to access, correct, port, or delete information about you, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. Where StormwaterIQ acts as a processor for a customer organization, we will route your request to that organization.
9. International transfers
The platform is hosted in the United States. If you access it from outside the U.S., your information will be transferred to and processed in the United States. We use reasonable safeguards consistent with applicable law for any cross-border transfers.
10. Children
The platform is not directed to children under 16, and we do not knowingly collect personal information from them.
11. Changes
We may update this Privacy Policy. We will post the revised version with an updated effective date and, where the changes are material, provide additional notice.
12. Contact
Questions, complaints, or rights requests: privacy@stormwateriq.com.