Prepared for the sales launch. Not yet approved as final sales terms.
The provider is Tobias Bender, trading as HailSignal (Hailman Hagelschaden & Dellencenter), Kastanienstraße 29, 58332 Schwelm, Germany; info@hailman.com, VAT ID DE289184710.
The service is offered to businesses and self-employed paintless dent repair technicians purchasing for their professional activities, not private use. Anyone ordering for a business must be authorised to do so. Customers confirm this before entering the paid checkout. Registration or an IP address alone does not establish business status. A declaration does not override mandatory statutory rights.
HailSignal supports deployment planning with hail reports derived from weather data, a map, an inbox and configurable areas. The initial channels are email and web push. Push requires a supported device, notification permission and appropriate system settings; on iPhones the website is added to the Home Screen.
The US service covers the actual available radar footprint within the contiguous United States (CONUS). Canada, Mexico, Alaska, Hawaii and US territories are outside this initial scope. The European core uses MeteoSwiss within actual radar reach; this does not imply nationwide coverage of neighbouring countries. Available coverage and data interruptions are described in the service.
According to the current provider documentation, Swiss hail products are calculated from 1 April to 30 September. Outside this season, this source provides no current hail estimates; an empty file does not confirm that no hail occurred. This limitation applies to the Swiss radar feed, not to the separate US radar data. This seasonal information does not change existing billing periods or agreed contractual rights.
Hail size, potential damage and tracks are estimates. C1–C4 expresses the evidence level separately from size. C2 is not proof of damage to a particular vehicle; C3/C4 do not establish damage at every point in an area. Reports may be missing, late or incorrect. Older observations may appear as delayed reports and assessments may be downgraded. No particular jobs, revenue, profitable trips or fixed delivery time are promised. The service does not replace official warnings or independent safety and deployment decisions.
Creating a free account does not initiate a payment. The selected plan, currency, taxes, billing period and terms are shown before the binding order. Stripe handles payment. The confirmed checkout offer governs; access follows the confirmed payment/subscription status. Abandoning checkout is not a completed purchase.
The agreed base prices are EUR 89 monthly or EUR 649 annually, or USD 89 monthly or USD 649 annually, plus applicable taxes. These are separate prices, not a live currency conversion. Changing the website currency does not convert existing subscriptions. The annual price is paid upfront for the year, not in monthly instalments.
Limited-time price offers apply to new subscriptions initiated during the stated booking period. The advertised discount applies only to the first billing period: the first month or the first year. Renewals use the regular base price displayed at purchase unless cancelled beforehand. New offers do not change existing subscriptions. An offer checkout opened during the campaign remains valid for up to 60 minutes, even if the campaign ends meanwhile.
A monthly subscription renews for another month and an annual subscription for another year unless cancelled before the current paid period ends. Cancellation is available through the customer portal in “Account & subscription” and takes effect at that period's end. Paid access continues until then. If the portal is unavailable, cancellation can be sent to info@hailman.com. Account deletion and subscription cancellation are different operations; deletion requests are checked against any existing subscription.
Failed payment may suspend premium access according to the confirmed subscription status. Customers can update their payment method in the portal. No fixed extra grace period is promised. Support handles refund requests; statutory rights remain unaffected.
Promotional keys provide the limited access period stated with the key, without payment details. Access ends automatically, without cancellation or automatic conversion to a paid subscription. Only one key can be redeemed per account.
Customers keep contact and billing details accurate and protect account credentials. They may only submit information and photographs they are entitled to share and should omit unnecessary personal details from weather evidence. Business use does not permit reselling account access or bypassing access controls. Rights in open source data are unaffected by these restrictions.
Support is available at info@hailman.com and through the service's help facilities. No continuously staffed emergency centre is promised. Weather sources, internet, email and push providers may fail. Material lasting reductions to the paid service will be communicated; resulting statutory rights remain available. Material changes to contractual terms or prices will be announced and require a new agreement where necessary. Silence alone is not treated as blanket acceptance. Existing paid periods are not changed retroactively.
Liability remains unlimited for intentional misconduct, gross negligence, death or personal injury and any other mandatory statutory liability. For ordinary negligence in breach of essential contractual duties, liability is limited to foreseeable loss typical of the contract at the time it was made; otherwise ordinary-negligence liability is excluded only to the extent permitted by law. The stated forecasting limitations are relevant to the service actually promised.
Personal data is processed as described in the separate privacy notice. Acknowledging that notice is not blanket consent to every processing activity. Optional push is activated separately.
German law, excluding the UN Convention on Contracts for the International Sale of Goods, applies, subject to overriding mandatory law. No blanket US arbitration or class-action waiver is agreed. Applicable statutory rules determine jurisdiction. An unenforceable provision does not invalidate the remaining terms. German and English versions describe the same agreement.
HailSignal is offered to business customers. A purchase for professional purposes generally does not carry a statutory consumer withdrawal right. The business declaration does not remove mandatory rights that actually apply. Subscription cancellation is separate: cancel in the customer portal effective at the end of the paid billing period, or email info@hailman.com if the portal is unavailable. Promotional keys expire after their stated duration without automatic payment.
You may withdraw from the contract within fourteen days after its conclusion without giving a reason. Any further statutory conditions for the start of that period remain unaffected. Send an unambiguous statement to Tobias Bender, HailSignal, Kastanienstraße 29, 58332 Schwelm, Germany, info@hailman.com. Sending it before the deadline is sufficient.
We refund payments received within fourteen days after receiving the withdrawal, using the same payment method unless another method has been expressly agreed without additional cost. Creating an account, activating push or confirming business status does not by itself waive this right.
To Tobias Bender, HailSignal, Kastanienstraße 29, 58332 Schwelm, Germany, info@hailman.com: I hereby withdraw from the contract for the following service: … Ordered on: … Name: … Address: … Date: … Signature only for a paper statement. Using this template is not mandatory.
Tobias Bender, HailSignal (Hailman Hagelschaden & Dellencenter) Kastanienstraße 29, 58332 Schwelm, Germany
Phone: +49 171 4804760 Email: info@hailman.com VAT identification number: DE289184710
HailSignal produces its own interpretations of weather data. These are not official warnings or recommendations from the source providers. US weather data: NOAA / National Weather Service. Storm reports: NWS through Iowa Environmental Mesonet, Iowa State University. Swiss radar data: MeteoSwiss, CC BY 4.0, analysed and summarised by HailSignal.
Maps: OpenFreeMap, OpenMapTiles and © OpenStreetMap contributors, ODbL. Country boundaries: Natural Earth, public domain. Place directory: GeoNames, CC BY 4.0, filtered and adapted for place descriptions. Country defaults and aggregate country statistics: DB-IP Lite, CC BY 4.0. Event time zones: timezone-boundary-builder, ODbL, via timezonefinder-data 1.2026.3.
Fonts: Inter (The Inter Project Authors) and Space Grotesk (The Space Grotesk Project Authors), SIL Open Font License 1.1, served locally without modification. Licenses: Inter and Space Grotesk.
Flags: Twemoji (Twitter), CC BY 4.0, provided as a subset through Twemoji Mozilla and TalkJS Country Flag Emoji Polyfill, used without further changes. Source and licence, full CC BY 4.0 terms. Map library: MapLibre GL JS 5.9.0 with a documented security correction, licence and copyright notice.
Additional weather models and warning evidence: DWD, CC BY 4.0, analysed by HailSignal; MeteoAlarm, CC BY 4.0, crediting the national meteorological service identified by the source.
European warning area boundaries: Statistics Austria (Austria, CC BY 4.0); IGN ADMIN EXPRESS COG 2025 through Sandre (France, Licence Ouverte 2.0); ISTAT through geoBoundaries (Italy, CC BY 3.0); World Bank through geoBoundaries (Romania, CC BY 4.0); Statistics Belgium through geoBoundaries (Belgium) and © OpenStreetMap contributors/Wambacher through geoBoundaries (Hungary). The Belgian and Hungarian databases are each available under the Open Database License 1.0. HailSignal mapped and combined areas and simplified boundaries. Sources, data years and licences; the complete adapted databases are available for free: Austria, France, Italy, Romania, Belgium, Hungary.
Tobias Bender, HailSignal (Hailman Hagelschaden & Dellencenter), Kastanienstraße 29, 58332 Schwelm, Germany; info@hailman.com.
| Activity | Information and purpose | Basis where GDPR applies |
|---|---|---|
| Website/operations | IP address, technical connection/error data; delivery and security | Legitimate interests, Article 6(1)(f) |
| Account | Email, password hash, profile, country, selected language, session/reset records; access and administration | Contract/precontract steps (b), abuse prevention (f) |
| Optional Google sign-in | Google identifier, verified email and supplied profile information; no Google password received | Customer-selected sign-in for the account (b) |
| Rules/inbox | Areas, optional starting location, thresholds, channels, reports and delivery attempts | Contract (b) |
| Orders | Account reference, time, accepted document identity/language, plan/currency and business declaration | Contract (b), required records (c), legal claims (f) |
| Web push | Device endpoint, encryption keys and label; encrypted delivery through the device's service | Optional activation/consent (a) |
| Support/feedback | Voluntary text, contact/account references and submitted photographs; support and quality review | Contract enquiries (b), quality/abuse prevention (f) |
Place searches go from the browser to our server and use a locally stored GeoNames directory. Search text is not sent to Nominatim or GeoNames. A saved starting point is part of the rule held on our server. The separate current-location marker on the map is handled in the browser after device permission.
Country defaults use a local DB-IP table without sending the visitor's IP to DB-IP. Event time zones are computed offline. Language, currency, theme and local usage preferences are stored in the browser; session cookies support sign-in. Advertising tracking is disabled. Optional Google analytics is described separately below.
Only with your voluntary consent do we load Google Analytics 4 on public information pages, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal bases are Article 6(1)(a) GDPR and Section 25(1) German TDDDG. Without consent, no Google tag is loaded and no cookieless analytics request is sent. Rejection is equally available. Signed-in customer areas, forms, internal pages and archived contractual documents are excluded.
Purpose: understanding website use, approximate visitor countries, devices, traffic sources and sessions. Google processes technical connection data (including the IP address required for the connection), browser/device information, public page visits and random browser identifiers. Google states that GA4 does not log or store IP addresses. We do not send account details, email addresses, form entries or URL query parameters. Advertising features and Google Signals are disabled. Analytics is not linked to your HailSignal account.
Analytics cookies (_ga and _ga_…) last up to 60 days without renewal on each visit. Your consent choice is stored locally for up to 180 days. You can reject at any time using “Analytics settings” on public pages; further collection stops and accessible analytics cookies for this browser are removed. Earlier processing remains unaffected. DNT/GPC and the opt-out offered below are respected.
Google also processes data through affiliated companies and subprocessors, potentially in the USA. The Google data processing terms, including their transfer mechanisms, apply. See Google Privacy and GA4 privacy information. User- and event-level data is intended to be retained for two months; aggregated standard reports may remain available longer. Google reports supplement local daily counts and cover only visits with consent.
To improve our public website, we maintain separate local daily counts of page views, approximate countries, device types, browser families and broad referral categories. The legal basis is our legitimate interest in improving the website and understanding its reach (Article 6(1)(f) GDPR). The IP address already transmitted with a page request is used only for immediate country lookup in a local DB-IP table; browser and referral information is reduced to fixed categories. Our statistics do not store IP addresses, complete browser headers, referral URLs, search terms, visitor identifiers or individual browsing paths. For these local daily counts, no analytics cookies are set and no analytics data is sent to an external analytics provider.
Only successful public page requests without a session cookie are counted; customer areas, internal pages and recognised bots are excluded. Separate totals cannot be combined into a visitor profile. Up to 90 days are shown; older counts are removed on the next counting operation. These statistics are separate from technical security and operational logs.
You may object to counting: we honour Do Not Track and Global Privacy Control. Alternatively, the button below stores only your opt-out preference in this browser for one year. Please opt out again after clearing browser data or when using another device.
Hetzner Online GmbH provides hosting and encrypted external backup storage. A data processing agreement was concluded on 14 September 2026. Stripe collects payment and billing details; HailSignal does not receive full card numbers. Depending on purpose, Stripe acts as a processor or an independent controller. Resend (Plus Five Five, Inc.) delivers email, including weather and account messages, using the configured sending region in Ireland. Processing by the US provider and its subprocessors is not limited to that sending region. Web push uses the service selected by the device, such as Apple, Google or Mozilla. Message content is encrypted for the device; the provider processes technical delivery information.
The map loads styles, tiles and related resources from OpenFreeMap, which receives IP addresses and technical request information. Fonts are served directly by HailSignal; loading the fonts does not connect to Google Fonts. Google sign-in is optional. A Google Maps link connects to Google only when selected and includes the linked event location. GeoNames and DB-IP datasets are downloaded for local processing, not queried for each visitor as an external geocoding service.
The optional help assistant sends entered questions to the Anthropic API. Answers can be incorrect. Signed-in questions and answers are stored with an account reference. Guest rate limits use a daily identifier rather than a plain-text IP in the questions log; personal information voluntarily entered in text is still personal information. Please do not submit sensitive information or third-party details you are not entitled to share. The account number and full customer profile are not sent as a standard account record to the answering model. Standard 30-day retention of inputs and outputs is enabled for the Anthropic API. Longer retention may apply, in particular for legal obligations or security and abuse investigations. The commercial standard terms provide that our API content is not used to train models; optional user feedback sharing is disabled. This provider retention period is separate from storage by HailSignal described below.
Existing individually configured ntfy or other channels may involve further recipients. The initial new-customer channels are email and web push. Existing customer configurations are not silently migrated.
Processing outside the EEA requires an applicable transfer mechanism. The Hetzner data processing agreement mentioned above is in place. Resend incorporates its data processing agreement through registration; the commercial Anthropic API is governed by commercial terms including a data processing addendum. Depending on purpose, Stripe acts as an independent controller or processor. The provider agreements govern subprocessors and international transfers, including EU Standard Contractual Clauses where applicable. Information on recipients and the applicable safeguards is available through our contact above.
Accounts, rules and related usage information are retained as needed for the account and stated purposes. Access/deletion requests require identity verification. Sessions are generally valid for 30 days and reset links for 60 minutes; expiry does not mean physical deletion of every associated record. Guest questions older than 90 days are removed by the designated cleanup. Account questions do not currently have the same automatic age limit and are included in account deletion handling.
Invoices generally require eight years' retention under German VAT Act section 14b, starting at the end of the year of issue; other business records and specific legal holds may differ. This does not justify keeping an entire account indefinitely or establish a verified payment-provider deletion deadline. Necessary records are handled separately for their specific purpose when deleting an account.
Protected backups retain 14 daily, eight weekly and twelve monthly selections; critical backups also retain closely spaced snapshots for two days. Physical removal depends on successful pruning. A minimal, separately backed-up deletion register prevents old backups from reactivating deleted accounts and remains while such copies can be restored. Supplier/support copies and statutory records are reviewed separately for each request. Messages already delivered to customer devices cannot be recalled by our server.
Where applicable, rights include access, correction, deletion, restriction, portability, objection and withdrawal of consent for future processing. Push can be disabled in HailSignal and device settings. Complaints can be made to a competent supervisory authority, including LDI North Rhine-Westphalia. Verified requests are generally handled within one month; any necessary justified extension is communicated within that period. Statutory exceptions and other people's rights are respected.
Other mandatory local rights remain unaffected. We do not claim that every US privacy law is inapplicable simply because customers are businesses, or that a checkbox waives statutory rights.