WATCHFLOOR PRIVACY POLICY
Version 1.0 | Effective Date: 18 August 2026
Watchfloor is a crisis-intelligence platform owned and operated by Notamy Ltd (“Notamy”, “we”, “us” or “our”).
This Privacy Policy explains how we collect, use, share and protect personal data when you use Watchfloor at crisis.notamy.app and related Watchfloor services (“Watchfloor” or the “Services”).
The data controller is:
Notamy Ltd
168, Triq San Kristofru
Valletta, VLT 1467
Malta
Company Registration Number: C 114174
Email: legal@notamy.app
Watchfloor is intended only for users aged 18 or above.
1. Information We Collect
Account Information
Watchfloor uses Google sign-in through Firebase Authentication.
When you sign in, we may receive and store:
your Google user identifier;
email address;
display name;
profile photo;
account tier;
language; and
account preferences.
Both personal Google accounts and Google Workspace accounts are supported.
Information You Provide or Create
Depending on how you use Watchfloor, we may process:
questions, prompts and conversations;
watchlists;
registered assets or sites, including their names and coordinates;
Studio report requests and configurations;
generated reports, briefs and files;
scheduled dispatch settings, including delivery email, timezone, language and schedule;
field notes or messages where those features are used; and
other information you choose to provide through the Services.
Location
Watchfloor does not automatically collect your physical location.
If you expressly select “use my location” when registering an asset or site, your browser will ask for permission to access your location.
If you grant permission, the resulting coordinates may be saved as the coordinates of the asset or site you choose to register.
Payments and Subscriptions
Payments are processed by Stripe.
Watchfloor does not store your complete payment-card details.
We may store:
subscription status;
credit balances and transactions;
Stripe customer or transaction identifiers;
payment and webhook status; and
refunds or other account adjustments.
Technical Information
We process technical information necessary to operate and secure Watchfloor, which may include:
IP addresses;
authentication and access information;
server logs;
security events; and
other technical information generated when you use the Services.
IP addresses may be used for security and rate limiting.
2. How We Use Your Information
We use personal data to:
create and manage your Watchfloor account;
authenticate users and protect account security;
provide Watchfloor features;
process research questions and prompts;
generate analysis, briefs and reports;
maintain watchlists and registered assets;
provide scheduled dispatches and alerts where enabled;
operate Watchfloor Studio;
manage subscriptions, credits and payments;
provide customer and technical support;
maintain and troubleshoot the Services;
prevent fraud, misuse and unauthorised access;
protect the security and integrity of Watchfloor; and
comply with applicable legal obligations.
3. Legal Bases for Processing
Where the GDPR or similar data-protection laws apply, we rely on the following legal bases:
Contract: where processing is necessary to provide Watchfloor or a feature you request, including account management, research, reports, Studio, subscriptions and dispatches.
Legitimate Interests: where processing is necessary to operate, maintain and secure Watchfloor, prevent fraud and abuse, troubleshoot problems and protect our Services and users.
Consent: where you expressly enable functionality requiring your permission, such as allowing your browser to provide your location.
Legal Obligations: where processing is required to comply with applicable laws, accounting or taxation requirements, legal processes or lawful requests from public authorities.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
4. Artificial Intelligence
Certain Watchfloor research and analytical features use third-party artificial-intelligence providers.
These currently include:
Anthropic, including Claude models; and
Alibaba Cloud DashScope, including models from the Qwen family and other supported models.
When you use an AI-enabled feature, information necessary to provide the requested analysis may be transmitted to one or more AI providers.
This may include:
your questions or prompts; and
relevant information or data excerpts used by Watchfloor to respond to your request.
These providers process the information to generate or assist with the requested Watchfloor analysis.
Their processing is also subject to their applicable commercial terms, data-processing terms and privacy practices.
Watchfloor does not use payment-card information for AI processing.
Watchfloor does not use AI to make decisions about users that produce legal or similarly significant effects.
5. Sharing of Personal Data
We do not sell your personal data.
We may share personal data with service providers where necessary to operate and provide Watchfloor.
Current providers include:
Google Firebase and Google Cloud — authentication, hosting, database infrastructure, security and logging;
Anthropic — AI processing;
Alibaba Cloud DashScope — AI processing and related research functionality;
Stripe — subscription and payment processing;
Microsoft 365 — delivery of Watchfloor emails and reports; and
Cesium ion — provision of the interactive 3D globe and related geospatial functionality.
Where a third-party resource is loaded directly through your browser, that provider may receive technical connection information such as your IP address and browser or request information.
Watchfloor also obtains information from scientific, governmental, geospatial and other third-party data sources relating to earthquakes, disasters, weather, geography, population and other crisis indicators. These sources generally concern events and locations rather than personal information about Watchfloor users.
We may also disclose personal data:
where required by applicable law or lawful requests from public authorities;
where necessary to establish, exercise or defend legal claims; or
where reasonably necessary to protect Notamy Ltd, Watchfloor, our users or others against fraud, security threats or unlawful conduct.
6. Browser Storage and Analytics
Watchfloor does not currently use third-party advertising or behavioural analytics tools such as advertising pixels or similar tracking services.
Watchfloor may use necessary browser storage and similar technologies to:
support authentication and security;
remember interface preferences;
remember map, layer or layout settings; and
provide essential functionality.
Some preferences are stored locally on your device.
If we introduce non-essential analytics, advertising or tracking technologies in the future, we will update our privacy information and obtain consent where required.
7. Data Retention
We retain personal data for as long as reasonably necessary to provide the Services and for legitimate legal, security, financial and operational purposes.
In particular:
account information may be retained while your account remains active and until it is deleted or you request deletion;
conversations, watchlists, registered assets, dispatch settings and Studio records may be retained while needed to provide the relevant Services or until deleted;
delivered briefs and files may cease to be available through Watchfloor after approximately 90 days, although this does not necessarily mean that all associated operational records are automatically deleted at that time;
temporary rate-limiting information is generally retained for approximately 65 seconds;
payment and transaction records may be retained as necessary for accounting, taxation, fraud prevention and legal requirements; and
security and technical logs are retained for the period reasonably necessary for security, troubleshooting and operational purposes, subject to our infrastructure configuration.
Where Watchfloor provides a function to delete an individual item, you may use that function to remove it.
Watchfloor does not currently provide a self-service account-deletion function. You may request deletion of your account and personal data by contacting:
Following a deletion request, we may retain limited information where necessary to comply with legal obligations, maintain financial records, prevent fraud, resolve disputes or establish, exercise or defend legal claims.
8. International Data Transfers
Watchfloor operates using service providers that may process personal data in countries outside Malta or the European Economic Area.
Where international transfers of personal data are subject to the GDPR or other applicable data-protection laws, we use appropriate lawful transfer mechanisms and safeguards as required.
These may include applicable adequacy decisions, contractual safeguards such as Standard Contractual Clauses, or other mechanisms recognised under applicable law.
9. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.
These measures include:
secure Google authentication;
HTTPS/TLS communications;
cloud access controls;
managed cloud infrastructure;
rate limiting;
protection of authentication credentials and API secrets; and
restricted access to production systems.
No internet-based service can guarantee complete security.
10. Your Rights
Depending on applicable law, you may have the right to:
access personal data we hold about you;
request correction of inaccurate personal data;
request deletion of your personal data;
request restriction of certain processing;
object to processing based on legitimate interests;
withdraw consent where processing is based on consent;
receive certain personal data in a portable format; and
lodge a complaint with a competent data-protection authority.
To exercise your rights, contact:
We may need to verify your identity before responding.
If you are in Malta, you may lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC).
11. Users Under 18
Watchfloor is intended only for persons aged 18 or over.
We do not knowingly provide Watchfloor accounts to persons under 18.
If we become aware that personal data has been collected from a person under 18 in breach of this requirement, we may take appropriate steps to remove the account and associated personal data.
12. Changes to This Privacy Policy
We may update this Privacy Policy where Watchfloor, our service providers, our data practices or applicable legal requirements change.
Where changes are material, we will take reasonable steps to inform users as appropriate.
13. Contact
For questions, requests or concerns relating to this Privacy Policy or the processing of personal data through Watchfloor, contact: