Legal
Last updated: January 2025
Thermolytics ("we", "us", "our") operates the website thermolytics.in and the Thermolytics web application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable international data protection regulations.
Account Information: When you register, we collect your name, email address, company name, phone number (optional), and GSTIN (optional).
Calculation Data: Boiler parameters, calculation inputs, results, and saved reports you create through the Service.
Payment Information: Payment processing is handled by Razorpay and Stripe. We do not store your credit card or bank account details on our servers. We receive only transaction confirmation, amount, and subscription status.
Usage Data: We automatically collect IP address, browser type, device information, pages visited, and timestamps to improve our Service.
Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
We use collected information to:
Provide, maintain, and improve the Service; process your calculations and generate reports; manage your account and subscription; send transactional emails (verification, password reset, billing); respond to your enquiries and support requests; analyse usage patterns to improve user experience; comply with legal obligations.
Your data is stored on secure cloud servers hosted in India. We implement standard security measures including HTTPS/TLS encryption for all data in transit, hashed passwords, authenticated access controls, and rate limiting. Access to production data is restricted to authorised personnel.
We are a small team and do not currently hold formal certifications such as ISO 27001 or SOC 2. We describe our actual practices here rather than claiming standards we have not been independently audited against.
We do not sell, trade, or rent your personal information. We may share data only with:
Service Providers: AWS (hosting), Razorpay/Stripe (payments), Anthropic (AI analysis — only anonymised calculation data is sent, never personal information).
Legal Requirements: When required by law, court order, or governmental authority.
Under the DPDP Act, 2023, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; withdraw consent for data processing; receive your data in a portable format. To exercise any of these rights, email us at contact@thermolytics.in.
We retain your account data for as long as your account is active. Calculation data and reports are retained for 3 years after your last activity. Upon account deletion, all personal data is permanently removed within 30 days.
Our Service is not intended for individuals under 18. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website.
If you have questions about this Privacy Policy or your data, contact us at:
Email: contact@thermolytics.in