Privacy Policy for Foreca Weather API and Business Customers

Last updated: June 18, 2026

Foreca Ltd (Business ID: 1084243-9, Keilaranta 1, 02150 Espoo, Finland) ("Foreca", "we", "us") protects the privacy of our business clients and platform users. All personal data is processed in accordance with the EU General Data Protection Regulation ("GDPR") and other applicable data protection laws.

1. Who This Policy Applies To

This Privacy Policy applies to personal data processed by Foreca, if you interact with us in any of these roles:

• Business Customers & Partners: You use or evaluate Foreca’s commercial services (business.foreca.com).

• Corporate Representatives: You interact with Foreca on behalf of your employer.

• Freemium & Non-Commercial Users: You are an individual or developer using our free, non-commercial API tiers.

Note for Consumer users: If you use our public weather application or website, please view our separate Consumer Privacy Policy available in the relevant platform.

If you are an end user of an application or website built by one of our API business customers: That company is the data controller responsible for your personal data processed through that application or website. Please contact the service provider directly with any privacy questions or request relating to your personal data.

2. Our Legal Grounds for Processing Your Data

We process your personal data under the following legal bases under the GDPR:

• Performance of a Contract: We process your name, login credentials, contact details, and intended use-case to manage your account, issue API keys, monitor usage quotas, and manage subscription tiers. For free tiers, this contract comprises our platform Terms of Service.
• Legitimate Interests: We log API traffic to prevent service abuse, track trial single-use limits, enforce our terms, and reach out to business prospects via B2B marketing. You can opt out of B2B marketing communications at any time via email to sales@foreca.com or by clicking the unsubscribe link in any marketing email.
• Consent: If you opt in, we use cookies and tracking tools to remember your preferences and analyze how you interact with our web shop and portals. You may withdraw your consent at any time.

3. What Data We Collect and Why

We collect your data to provide a secure, operational web shop and API management ecosystem. We never collect sensitive personal health, financial, or demographic data.

A. Information You Provide Directly

• Account & Profile Details: Your name, email, password, phone number, company name, API use-case, and other similar details. We utilize Auth0 as our identity management provider to securely capture and manage these login credentials. We also accept profile data via Google Single Sign-On (SSO).

• Billing Details: Billing name, address, email, and phone number.

• Payment Notice: We do not see or store raw credit card numbers. Your payment details are processed securely and directly by Stripe using encrypted tokens.

• Communications: Direct inquiries via web contact forms, business card exchanges, emails, or optional company surveys.

B. Data Collected Automatically

• API Operations & Security: API keys, security tokens, request volumes, error logs, and success metrics to ensure your application stays within plan limits.

• Technical Identifiers: Connecting IP addresses used exclusively to troubleshoot technical errors and detect platform misuse.

• Real-Time Location: If your app integration passes location coordinates via the "locate" API query, we process them instantly to supply local weather data. This data is processed entirely in volatile memory and is never saved to disk.

C. Cookies, Tracking, and Public Data

Cookies and Web Analytics: We use tracking cookies and/or measurement tags on business.foreca.com and developer.foreca.com websites. Specifically, we utilize HubSpot to map user behavior and optimize our marketing actions, and Google Analytics 4 (GA4) to analyze aggregated traffic trends. These tools may collect technical identifiers, device types, and page interaction data. You can manage your preferences via our cookie consent banner or disable cookies through your browser settings at any time.

Public Discovery: We may collect corporate phone numbers or emails from public websites or professional networks to initiate business development outreach.

4. Third-Party Data Processors and Service Integration

We treat your personal data  as confidential and disclose it only where necessary for the purposes described in this Privacy Policy or where required by law. We do not sell or lease user information. To deliver our platform, we share data with trusted data processors that process data on our behalf under applicable data processing agreements:

5. International Data Transfers

Your data is securely stored within the European Union (EU). As part of providing our services, certain operations managed by HubSpot, Stripe, or Google may involve infrastructure in the United States or elsewhere outside EEA. When this occurs, transfers are carried out with applicable data protection laws and legitimized via the European Commission's Standard Contractual Clauses (SCCs) or where applicable, the EU-US Data Privacy Framework. Completely anonymous analytics data may be processed globally.

6. Data Retention and Your Rights

We keep data only as long as necessary for the purpose for which it was collected, and in line with the applicable laws:

• User Account and Profile Data: Account profiles and access credentials are permanently deleted or fully anonymized two (2) years after your subscription terminates and your account is deactivated.

• Billing Records: Transaction records, billing addresses, and payment logs are retained for six (6) years from the end of the matching financial year, to comply with mandatory requirements of the Finnish Accounting Act (Kirjanpitolaki 1336/1997).

• Free Trial Abuse Control: Trial emails are kept for two (2) years post-trial to enforce single-use eligibility policies. We use these emails only for fraud prevention and abuse monitoring.

• Marketing Contact Data: Corporate prospect data is retained for twelve (12) months following our last meaningful communication, or until you opt-out. Upon opt-out, your email is immediately moved to a permanent suppression list in HubSpot to block future messages.

• Location Processing: Real-time data coordinates are immediately discarded and never saved.

7. Your Legal Rights and Controls

You hold full authority over your data under the GDPR. You have the right to access, correct, or delete your records, restrict or object to data processing (including blocking B2B marketing), request a portable copy of your data, or withdraw consent.

To exercise your data protection rights, contact us at sales@foreca.com. We will review and fulfill verified requests within one calendar month. If you believe our processing infringes upon data regulations, you have a legal right to file a formal complaint with the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi) or with the competent regulatory authority in the EU.

8. Age Restrictions

Our commercial infrastructure, subscription frameworks, and professional API layers are restricted from use by individuals under sixteen (16) years of age.

9. Modifications to This Policy

We may revise this Privacy Policy from time to time as our services evolve. If we implement material modifications, we will issue a prominent platform alert or email notification at least 30 days before the terms change. We will publish the most current version on our website or platform. Immediate updates may occur if required by emergency statutory regulations.