Privacy policy

Thermofi provides heating and cooling monitoring and control for small commercial buildings. This policy explains what we collect, why, and who we share it with. It applies to our website, our customer console, and the alerts we send.

What we collect

• Account and contact details. The name, email address and phone number of the people a customer designates — account holders, installers, and the on-call contacts who receive alerts.
• Building and device data. Building and zone names, equipment configuration, and the readings the installed sensors and thermostats report: temperature, humidity, occupancy, relay state, setpoints, and device health.
• Usage data. Sign-in events and the actions taken in the console, so changes to a live building can be attributed and audited.

We do not collect payment card details ourselves, and we do not collect information from children. The sensors we install measure environmental conditions and presence; they do not record audio or video.

Why we use it

• To run the control loop that heats and cools the buildings we are asked to manage.
• To alert the on-call contacts a customer designates when a monitored condition needs attention.
• To show customers their own buildings' history, and to report the savings we claim.
• To support, secure and improve the service.

Who we share it with

We do not sell your personal information, and we do not share phone numbers or mobile opt-in data with third parties or affiliates for their own marketing purposes. Mobile information obtained as part of enrolling a contact for alerts is used only to send those alerts and is never shared for marketing.

We use service providers to operate the product, and they may process data only on our instructions and only for that purpose: Amazon Web Services for hosting and storage, and Twilio for SMS delivery. We also disclose information where the law requires it, or to protect the safety of people or property.

How long we keep it

Sensor readings are retained for as long as the account is active so that history and savings reporting remain meaningful. Contact details are retained while the contact is designated and for a short period afterwards for audit. A customer may ask us to delete their data, and we will do so except where we are required to keep it.

How we protect it

Data is encrypted in transit and at rest, access is limited to the people who need it to operate the service, and administrative actions against a live building are recorded in an append-only log.

Your choices

• An on-call contact can stop alert messages at any time by replying STOP to any message. See the messaging terms for what that does.
• You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by writing to ken@thermofi.ai.

Changes

If we change this policy we will update the date above. Material changes affecting how we use contact details will be sent to the account holder.

Contact

Thermofi, Boston, Massachusetts. ken@thermofi.ai · 617-733-4370