Privacy Policy | Thermal

Introduction

Thermal ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our desktop application and web services.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign up via Google, we receive your basic profile information from Google.

Usage Data

We collect anonymous analytics to improve our product, including app launches, feature usage, and error reports. We use Aptabase for desktop analytics and Plausible for web analytics - both are privacy-focused and do not track personal information.

SSH Connection Metadata

If you enable cloud sync, we store encrypted connection names and settings. We never store or have access to your SSH passwords, private keys, or the content of your terminal sessions. All credentials are encrypted client-side before transmission.

AI Agent Usage

When you use the AI agent feature, your task descriptions are sent to our AI providers (OpenAI or Anthropic) to generate commands. We do not store the content of your AI conversations or the commands executed on your servers.

How We Use Your Information

To provide and maintain our services
To process payments and manage your subscription
To send important service updates and security notices
To improve our product based on anonymous usage patterns
To respond to support requests

Data Storage and Security

Your data is stored on secure servers. All data transmission is encrypted using TLS. Sensitive credentials are encrypted client-side using your encryption password before being stored on our servers - we cannot decrypt them.

We retain your account data for as long as your account is active. You can request deletion of your account and associated data at any time.

Third-Party Services

We use the following third-party services:

Stripe - Payment processing
Google OAuth - Authentication (optional)
OpenAI / Anthropic - AI agent capabilities
Plausible - Privacy-focused web analytics
Aptabase - Privacy-focused desktop analytics

Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Opt out of non-essential communications

Cookies

We use essential cookies for authentication and session management. Our analytics providers (Plausible and Aptabase) do not use cookies and do not track you across websites.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through the application.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@thermal.sh