Ensemble Weather AIGet API access

Legal

Privacy policy

What we collect, why, and what we do not do with it.

Draft — pending legal review

This page states our intended position so the service is transparent about how it works. It has not yet been drafted or reviewed by a lawyer and is not a binding agreement.

What we collect

Account details you give us — name, email, company. API usage records tied to your key, which we need in order to meter and bill accurately.

Locations attached to alert subscriptions. Where those locations identify a person, we treat them as personal data.

When you submit the contact form, we record the IP address it was sent from, the approximate location derived from that IP address, and your browser type. We use these only to identify spam and abuse and to understand where enquiries come from, and they are kept with your message.

If you apply for a role, we also collect your LinkedIn profile, phone number, country and region, and the CV you upload. Your CV is sent to our team's email inbox and is not stored anywhere else on our website. We use this information only to assess your application, and you can ask us to delete it at any time.

Identity verification and biometric data

Every applicant verifies their identity before an interview, under the same rule for everyone; the link to book an interview is sent once verification is approved. Verification is carried out by our provider, Didit, and checks your phone number, an identity document, a live face scan, and the IP address you connect from.

The face scan creates biometric data. We collect it only with your explicit consent, given on the verification page before anything starts, and only to confirm that you are who you say you are and to prevent fraud. We never sell it and never use it for anything else. The only thing that affects your application is whether your identity was confirmed — never the biometric data itself.

Your documents, face scan and biometric data are held by Didit, not on our website. Our team receives a summary of the result — whether each check passed and the name on the document — and does not receive your document number, your date of birth or the images, except when a human review is needed, in which case authorised staff view them in Didit's secure console.

We delete verification data when it is no longer needed for hiring: within 12 months of our last contact with you if no contract is signed, and in any case no later than 3 years after collection. You can withdraw consent and ask us to delete it at any time by emailing us. If you can't complete the check — for example because of your ID document, your device or a disability — contact us and we'll arrange another way to confirm your identity.

What we do not do

We do not sell your data. We do not use your query patterns to build a profile for advertising, and we do not share your forecast queries with other customers.

Retention

Usage records are retained for the period required for billing and dispute resolution, then aggregated. You can request deletion of your account data at any time.