Privacy Policy

This Privacy Policy explains how Thrml collects, uses, shares, and protects your personal information when you use our platform. 1. Information We Collect 1.1 Information You Provide When you create an account or use our platform, we collect: Name, email address, and phone number Profile photo (optional) Payment information (processed and stored by Stripe - we do not store card numbers) Government-issued ID for Hosts during Stripe identity verification Listing details provided by Hosts (photos, descriptions, pricing, availability) Messages sent through the platform between Hosts and Guests Reviews and ratings submitted after completed bookings 1.2 Information Collected Automatically When you use the platform we may collect: Device type, browser, operating system, and IP address Pages viewed, time spent on pages, and navigation patterns Booking and transaction history Location data if you grant permission (used for map-based search features) Cookies and similar tracking technologies 1.3 Information from Third Parties We may receive information from: Stripe: payment status, payout eligibility, and identity verification status Social media platforms if you choose to connect your account Analytics providers 2. How We Use Your Information We use your information to: Create and manage your account Process bookings and payments Send booking confirmations, access codes, and session reminders Facilitate communication between Hosts and Guests Display listings and enable search functionality Promote Host listings on Thrml's social media and marketing channels (Hosts may opt out) Respond to support requests and resolve disputes Detect and prevent fraud, abuse, and platform policy violations Comply with legal obligations Improve and develop our platform and services 3. How We Share Your Information 3.1 With Other Users When a booking is made, limited information is shared between Hosts and Guests, including name, profile photo, and relevant booking details. Access codes are shared only with the confirmed Guest. 3.2 With Service Providers We share information with trusted third-party service providers who help us operate the platform, including: Stripe (payment processing and Host identity verification) Resend or similar providers (transactional email delivery) Supabase (database and authentication infrastructure) Vercel (platform hosting) Analytics and performance monitoring tools These providers are contractually obligated to protect your information and use it only for the purposes we specify. 3.3 For Marketing With Host consent, we may share listing content (photos, descriptions, location) publicly on Thrml's social media channels for promotional purposes. We do not sell Host or Guest personal data to advertisers. 3.4 Legal Requirements We may disclose information when required by law, court order, or government authority, or to protect the rights, property, or safety of Thrml, our users, or the public. 3.5 Business Transfers In the event of a merger, acquisition, or sale of substantially all of Thrml's assets, user information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy. 4. Cookies and Tracking We use cookies and similar technologies to maintain sessions, remember preferences, and analyze platform usage. You can control cookie settings through your browser, but disabling cookies may affect platform functionality. We do not use cookies for cross-site behavioral advertising or sell data to ad networks. 5. Data Retention We retain your information for as long as your account is active or as needed to provide services. After account deletion: Account and profile data is deleted within 30 days Booking and transaction records may be retained for up to 7 years for financial and legal compliance purposes Messages may be retained for up to 2 years for dispute resolution purposes Anonymized analytics data may be retained indefinitely 6. Your Rights and Choices Depending on your location, you may have the following rights regarding your personal data: Access: Request a copy of the personal information we hold about you Correction: Request correction of inaccurate or incomplete information Deletion: Request deletion of your personal data, subject to legal retention requirements Portability: Request your data in a portable format Opt-out: Opt out of marketing communications at any time Restrict processing: Request that we limit how we use your data in certain circumstances To exercise any of these rights, contact us at legal@usethermal.com. We will respond within 30 days. 7. California Privacy Rights (CCPA) California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. Thrml does not sell personal information. To submit a CCPA request, contact us at the address below. 8. Children's Privacy The Thrml platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly. 9. Security We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no system is completely secure. We encourage users to use strong passwords and protect their account credentials. In the event of a data breach that affects your rights or freedoms, we will notify affected users as required by applicable law. 10. Third-Party Links The platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently. 11. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of material changes by email or via notice on the platform. The date at the top of this policy reflects the most recent revision. 12. Contact For privacy-related inquiries, data requests, or to report a concern, contact us at: legal@usethermal.com