Effective Date: 05/20/2026 |Last Updated: 05/20/2026
ComplyStorm ("ComplyStorm," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://complystorm.com (the "Site") and use our SWPPP compliance software and related services (the "Service").
This Service is intended for use by businesses and professionals operating in the United States.
By accessing or using the Site or the Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please do not access the Site or use the Service.
This Privacy Policy is incorporated into and forms part of the ComplyStorm Terms & Conditions.
1.Information We Collect
Personal Information
When you register for an account, use the Service, or contact us, we may collect personal information such as your name, email address, phone number, job title, company name, mailing address, and billing information.
Report recipients' email addresses may be processed for the purpose of delivering inspection reports and related compliance documentation.
Project and Site Data ("Customer Data")
When using the Service, you may upload, input, generate, or transmit project-related information, including SWPPP inspection records, corrective action documentation, dewatering forms, site details, weather-related inputs, photographs of jobsites, signatures, certifications, and related compliance documentation.
Location Data
When you use the mobile application to perform an inspection, we may collect approximate or precise geolocation data (where permitted by your device settings) to tag inspections with site coordinates and to retrieve site-relevant weather and precipitation data.
Photograph Metadata
When you upload photographs through the Service, associated metadata (such as date, time, and, where available, location) may be retained as part of the inspection record.
Weather and Environmental Data
Real-time weather and precipitation data drawn from third-party meteorological providers and associated with the site or inspection. This data is provided "as is" from third parties; ComplyStorm does not generate or warrant the accuracy, completeness, or timeliness of weather data.
Usage Data
We may collect information about how you access and use the Site and Service, including IP address, device identifiers, browser type and version, operating system, language preferences, referring URLs, pages viewed, features used, and timestamps of activity.
Cookies and Similar Technologies
We use cookies, web beacons, pixels, and similar tracking technologies to enhance functionality, maintain session security, analyze usage, and improve user experience. You may manage cookie preferences through your browser settings and any cookie banner displayed on the Site. Blocking certain cookies may impact functionality.
2.How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Authenticate users and manage accounts, subscriptions, and billing
- Generate suggested auto-populated fields, suggested inspection schedules, suggested deadlines, suggested notifications, and other automated outputs that users are required to independently verify before relying upon them
- Retrieve site-relevant weather and precipitation data from third-party providers
- Process payments through third-party payment processors
- Improve performance and functionality
- Communicate service-related notices, security alerts, and customer support
- Send marketing communications (you may opt out at any time)
- Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
- Comply with legal obligations and protect our rights
3.How We Share Information
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. We share information only in the following circumstances:
Service Providers
Vendors that assist with cloud hosting, infrastructure, analytics, email delivery, weather data, mapping, customer support, and payment processing. These vendors are contractually bound to protect your information and use it only as needed to perform services on our behalf.
The Customer's Organization
If you use the Service through an organizational account, your activity, inspections, and reports may be visible to administrators and other authorized users within that organization.
Recipients You Designate
When you send an inspection report or other documentation through the Service (including via tokenized secure download links or email), the report and any attachments are transmitted to the recipients you select. You are solely responsible for selecting accurate and authorized recipients and for the consequences of any transmission.
Legal Requirements
We may disclose information if required by law, regulation, subpoena, court order, or governmental request, or to protect the rights, property, or safety of ComplyStorm, our users, or the public.
Business Transfers
In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction.
With Your Consent
For any other purpose disclosed to you and to which you have consented.
A current list of our principal subprocessors is available upon request at support@complystorm.com.
4.Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit, access controls, and routine monitoring. However, no system or method of transmission is completely secure, and we cannot and do not guarantee absolute security.
You are solely responsible for:
- Safeguarding your account credentials
- Keeping your devices and software up to date
- Notifying us promptly of any unauthorized use or suspected breach
- Maintaining your own backups of Customer Data
ComplyStorm is not responsible for unauthorized access resulting from compromised email accounts, forwarding of report emails or download links, or improper handling of downloaded files by recipients. ComplyStorm is not liable for any unauthorized access to, alteration of, or loss of information except to the extent caused by our gross negligence or willful misconduct, and only to the maximum extent permitted by applicable law.
5.Data Retention
We retain personal information and Customer Data for as long as your account is active, as needed to provide the Service, and as required to comply with legal, regulatory, tax, accounting, audit, and reporting obligations. Inspection records and reports may be retained for the period required by applicable environmental laws and the customer's recordkeeping policies.
Generated reports may remain accessible via secure download links for a limited period (e.g., up to 18 months) as determined by ComplyStorm. ComplyStorm reserves the right to modify retention periods at its discretion. After this period, ComplyStorm may delete data in accordance with its data retention policies, unless otherwise required by law.
ComplyStorm is not obligated to retain data indefinitely following account termination.
6.Your Rights
Subject to applicable U.S. law, you may request:
- Access to your personal information
- Correction of inaccurate or incomplete information
- Deletion of your personal information, subject to legal retention requirements and our right to retain information necessary to defend legal claims, comply with law, or maintain an audit trail of inspection activities
- To opt out of marketing communications (you may unsubscribe using the link in any marketing email; transactional communications will continue)
To submit a request, email support@complystorm.com. We will respond within the timeframe required by applicable law. We may require verification of your identity before processing your request. If you use the Service through an organizational account, you may need to direct your request to that organization.
California Residents (CCPA/CPRA)
California residents have the right to know what categories of personal information we collect, to request access and deletion, to correct inaccurate information, to limit the use of "sensitive personal information," and to opt out of "sales" or "sharing" of personal information as defined under California law. ComplyStorm does not sell personal information and does not share personal information for cross-context behavioral advertising. You may exercise your rights by contacting support@complystorm.com.
Authorized Agents
You may designate an authorized agent to submit a request on your behalf. We may require verification of the agent's authority and your identity before processing the request.
7.Third-Party Links and Services
The Site and Service may contain links to third-party websites or integrate with third-party services (such as weather providers, mapping services, payment processors, and email clients). ComplyStorm is not responsible for the privacy practices, content, accuracy, or availability of any third-party service. Your use of third-party services is subject to those providers' privacy policies and terms.
8.Children's Privacy
The Site and Service are intended for business use by adults and are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
9.Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will post the updated policy on the Site with a revised effective date and, where appropriate, notify you by email or in-Service notice. Your continued use of the Site or Service after the effective date constitutes your acceptance of the updated Policy. If you do not agree to a change, your sole remedy is to stop using the Service.
10.Contact
For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:
This Privacy Policy is provided for informational purposes and does not constitute legal advice. ComplyStorm recommends that you consult your own legal counsel regarding your specific obligations and rights.