Privacy

What it's for

Privacy is Thermal's Privacy Policy — what information Thermal collects, how it's used, and who it's shared with. It exists so a buying committee's own counsel has something concrete to review before a purchase, instead of a placeholder that says the page is still coming.

Reached from the site footer's "Privacy" link, or by visiting trythermal.com/privacy directly. The route is /privacy.

Tabs

The page has no tabs. It's a single document, broken into numbered sections rather than tabs, read top to bottom.

Panels and controls

• A draft banner at the top marks this as pending final legal review — it's a real, substantive document, not a "not built yet" placeholder, but outside counsel hasn't signed off on it yet.
• Numbered sections cover: information collected (lead, account, payment, technical, analytics), how it's used, the service providers Thermal relies on (Stripe, Clerk, Supabase, Vercel, Telnyx, Postmark, Retell, QuickBooks Online, Cloudflare R2, Google Maps, Sentry, Inngest, and a small set of automated data-processing providers), data retention, how data is protected, your rights and choices, cookies and tracking, children's privacy, international transfers, and how changes are communicated.
• A contact section with an email link for privacy questions.

Planned visit-location sharing.

When live visit tracking becomes available, a customer tracking link will show the technician's location only from the moment the visit is on the way until arrival. The technician's phone will send location only while the app is open and a visit is on the way. The link will expire at arrival or after 24 hours, whichever is first. Customers will see only the latest position, never location history. Location pings will be kept for 30 days.

Technician clock-in location.

A technician's clock-in and clock-out location is recorded for payroll. It is one reading taken at the moment they clock in or out, only if they allow location access, and it is never tracked in between or in the background. It is visible to their employer's office staff and is never shown to customers.

This describes the planned policy. It does not mean live visit tracking is available today. The draft banner and pending legal review still apply.

What it accepts

Nothing. This is a static legal document — the only interactive element is a mailto: link.

How to configure it

Nothing in Settings changes this page. The "last updated" date and the policy text are edited directly, by hand, when the policy changes.

Who can see it

This is a public page. Anyone can open it, signed in or not.