1. Scope
This Privacy Policy applies to the Equinox suite operated by Weathertop Studios LLC (“Weathertop,” “we,” “us”): the Equinox Account Hub, SOL (commerce and business operations), TERRa (production and facility operations), related marketing sites, signup and gateway flows, and in-product settings. When you use Plaid Link or other bank-connection features inside SOL, this policy covers how we handle identity and financial data associated with that connection.
2. Who we are
Equinox is a program of Weathertop Studios LLC. For privacy inquiries, contact privacy@weathertopstudios.com. For product or account support, contact equinox@weathertopstudios.com.
3. Information we collect
We collect information you provide directly (name, work email, company legal and trade names, address, tax identifiers, workspace preferences, support messages); authentication data (Firebase Auth identity, Google OAuth profile fields you authorize — we never receive your Google password); security step-up data (PIN verification results, WebAuthn / passkey public credentials, authenticator enrollment metadata — never plaintext PINs or TOTP secrets in logs); usage and device data (pages viewed, approximate IP-derived location, browser/user agent); and business content you enter into SOL or TERRa (catalog, orders, ledgers, facilities, staff records). When you connect a financial institution via Plaid Link, we receive tokens and account/transaction metadata necessary to operate bank feeds and reconciliation on behalf of your organization.
4. How we use information
We use information to authenticate operators, enforce multi-factor / step-up verification, provision and maintain workspaces, operate SOL and TERRa features (including finance, banking, and reconciliation), provide support, send transactional and security notices, improve product reliability, and meet legal obligations. We do not sell personal information.
5. Tenant and organization data
Business data you enter into Equinox, SOL, or TERRa is processed on behalf of your organization. Your organization controls access through memberships and roles. Weathertop acts as a service provider / processor for that content under your customer agreement, except where we process limited account and billing data as an independent controller.
6. Authentication and security credentials
Suite access requires primary sign-in (email/password or Google) plus a configured second factor (security PIN, passkey / WebAuthn, and/or authenticator app). PIN hashes, passkey public keys, and TOTP secrets are stored server-side only. We never ask for your PIN, passkey, or authenticator codes by email. Report suspected compromise to equinox@weathertopstudios.com immediately.
7. Banking connections and Plaid
SOL may offer bank linking (including Plaid Link) so your organization can import transactions and reconcile accounts. Plaid Link is surfaced only after an authenticated operator completes suite multi-factor verification. Plaid access tokens and related secrets are stored server-side and are not exposed to browsers. Bank account and transaction data imported through these integrations are treated as organization financial records subject to role-based access in SOL. We use this data to provide the finance features you request, not for unrelated marketing.
8. Cookies and local storage
We use cookies, local storage, and session storage for authentication sessions, theme and appearance preferences, step-up session flags, and product continuity across Equinox, SOL, and TERRa. Clearing site data may sign you out or require re-verification.
9. Sharing and processors
We share data with infrastructure and service providers under contractual safeguards (for example hosting, authentication, email delivery, payments, and banking connectivity providers such as Plaid), with your organization’s administrators as needed to operate the workspace, and when required by law. We do not sell personal information to third parties.
10. Retention, deletion, and periodic review
Account, workspace, and operational records are retained while your subscription is active and for a limited period afterward for legal, billing, security, and dispute purposes. Bank connection tokens and imported financial records follow the same organizational retention rules and may be deleted when you disconnect an institution, close a workspace, or request deletion, subject to legal holds and backup cycles. Weathertop reviews this retention and deletion practice periodically (at least annually, or after material product or legal changes) to keep it aligned with applicable privacy laws and customer agreements.
11. Consent for collection and processing
By creating an Equinox account, accepting workspace invitations, signing in, or using features that collect data (including connecting a bank via Plaid Link), you consent to the collection, processing, and storage of information described in this policy for the purposes stated here and in your organization agreement. Organization administrators may provide consent on behalf of their business for tenant operational data. You may withdraw optional consents (such as non-essential analytics preferences in Settings → Privacy & data) without losing core account access.
12. Your rights and requests
Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Organization admins can manage much of this in-product. For personal data requests, contact privacy@weathertopstudios.com. We will respond within applicable legal timelines.
13. Security measures
We protect data in transit with TLS, restrict privileged API access with verified identity tokens, store secrets server-side, apply role-based authorization, and log security-relevant authentication events. No method of transmission or storage is perfectly secure; please use strong account credentials and keep second factors enrolled.
14. Children
Equinox is a business product and is not directed to children under 16. We do not knowingly collect personal information from children.
15. Changes
We may update this policy. Material changes will be posted in Equinox, SOL, and TERRa (and on the marketing policy page) with an updated effective date. Continued use after changes constitutes acceptance of the revised policy where permitted by law.
16. Contact
Privacy — Weathertop Studios LLC — privacy@weathertopstudios.com. Product support — equinox@weathertopstudios.com.