Privacy Policy

1. Data Controller

Thermopy is the data controller for personal data processed through our website and services. Contact: hello@thermopy.com

2. Information We Collect

We collect information to operate Thermopy (professional heating calculators), including premium subscriptions and one-time purchase of digital PDF reports.

• Account data: Email address, encrypted password, and basic profile data you provide
• Premium access data: Subscription status and premium feature access flags (e.g., whether premium is active)
• Payment identifiers (via Stripe): We store limited Stripe identifiers such as Stripe Customer ID and, where applicable, subscription/payment session identifiers. We never store full credit card details.
• Calculator and project data: Technical inputs (e.g., room dimensions, heating parameters, energy costs) and calculation results. If you choose to save projects, these can be stored with your account.
• Report purchase data: For one-time PDF reports we process an email address for delivery and receive the purchase tier/market/locale and calculation context required to generate the report.
• Usage data: Pages visited and interactions (including premium features), device/browser information, and anonymized IP data used for analytics and security.
• Cookies and consent: Essential cookies for authentication and functionality, and consent choices for non-essential cookies where applicable.

3. How We Use Your Information

We use your information to provide and improve Thermopy and to keep the service secure.

• Provide and deliver services: Run calculators, store saved projects (if enabled), generate and deliver purchased PDF reports
• Manage accounts and premium access: Authenticate users, manage subscriptions, and enable premium features
• Process billing: Create and verify payments and subscriptions via Stripe
• Improve user experience: Analyze aggregated usage and performance
• Security and abuse prevention: Detect fraud/abuse and protect our infrastructure
• Compliance: Meet legal obligations (e.g., accounting and tax where applicable)

Note on communications: We send service-related emails (e.g., account and report delivery). Marketing emails require a separate opt-in where applicable.

4. Payment Processing, Subscriptions & Reports

Thermopy uses Stripe as a payment processor for subscriptions and one-time purchases (such as PDF reports). Stripe handles card data securely.

• What we store: Stripe Customer ID (where applicable), subscription status and premium access details, and limited payment/session identifiers
• What we don't store: Credit card numbers, CVV codes, or full card details
• Stripe as processor: Stripe processes payments according to their Privacy Policy
• Checkout metadata: To fulfill purchases (e.g., generate a report), we may send limited purchase context to Stripe (such as selected tier/market/locale and limited calculation context) as part of Stripe Checkout metadata.

5. Legal Basis (GDPR/RODO)

For users in the EU/EEA (and similar jurisdictions), we process personal data based on:

• Performance of a contract (to provide subscribed services and deliver purchased digital reports)
• Legitimate interests (service improvement, security, fraud prevention, analytics in aggregated form)
• Legal obligations (e.g., accounting and tax compliance where applicable)
• Consent (for non-essential cookies and similar technologies where required)

6. Data Retention

We retain data as long as your account is active or as needed to provide services, resolve disputes, and comply with legal obligations. You may request account deletion at any time; certain records may be retained where legally required.

7. Data Sharing & International Transfers

We share personal data only with trusted processors needed to operate the service, including:

• Stripe — payment processing (USA). Safeguards: Standard Contractual Clauses.
• Google LLC — analytics (GA4) and tag management (GTM) (USA). Safeguards: Standard Contractual Clauses.
• Meta Platforms Ireland Ltd / Meta Platforms Inc — advertising measurement via Meta Pixel (USA), only when you have given consent for Marketing cookies. Safeguards: Standard Contractual Clauses.
• Hosting & infrastructure providers — under appropriate contractual safeguards.

We do not sell your personal data.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through our cookie banner at any time.

• Google Analytics (GA4): Used to analyze site usage anonymously. Requires your consent (Analytics cookies). Data may be transferred to Google LLC in the USA.
• Google Tag Manager: Used to manage analytics and marketing tags. Operates under the same consent rules.
• Meta Pixel (Facebook/Instagram): We use the Meta Pixel to measure the effectiveness of our advertising and, with your consent, to build audiences for relevant ads on Facebook and Instagram. The Pixel is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (EU users) / Meta Platforms Inc, USA. Activation requires your explicit consent under "Marketing Cookies" in our cookie banner. Without consent, the Pixel operates in limited mode (no personal profiling). Data may be transferred to the USA under Standard Contractual Clauses. See Meta's Privacy Policy. You can also opt out via Meta Ad Preferences.

9. Security

We implement industry-standard measures to protect data. However, no online service can be guaranteed 100% secure.

10. Children's Privacy

Our services are not intended for individuals under 18.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page and may be communicated via email where appropriate.

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@thermopy.com