Privacy Policy
Last updated: June 15, 2026
Thermal is a chat-first CRM operated by enc0re inc, a Delaware corporation ("we", "us"). It helps you capture contacts and remember your professional network. This policy describes what we collect, how it is used, and the choices you have.
Account and sign-in
You sign in with your Google account. We receive your name, email address, and profile photo from Google to create and identify your account. We never see your Google password. During onboarding, we also store the survey answers you provide, such as where you heard about us, your role, team size, current system, and setup goals.
Google Drive access (optional)
If you connect Google Drive, Thermal requests the per-file Drive scope (drive.file), which lets us create and manage only the files Thermal itself adds to your Drive — for example, archiving screenshots you capture. We cannot see or access any other files in your Drive. Gmail-based auto-filing is planned for a future release and will request additional permission, with your consent, only when that feature ships.
Thermal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is only used to provide user-facing features of Thermal, is never transferred to third parties except as necessary to provide those features (or for security or legal compliance), and is never used for serving ads. Humans do not read your Google data except with your explicit consent, for security purposes, or where required by law.
What we store
Your contacts, organizations, interactions, notes, tasks, and chat history are stored in a Postgres database hosted by Neon. Screenshots you capture can optionally be archived to your own Google Drive. We retain this data while your account is active.
AI processing
Chat messages, uploaded screenshots, and forwarded or detected emails are sent to OpenAI to extract structured contact and relationship information and to power the chat assistant. This processing happens only to provide the features you invoke; nothing is written to your CRM until you accept a proposed change.
Billing
Payments are processed by Stripe. We never store full card numbers; Stripe shares with us only the subscription status and billing metadata needed to operate your plan.
Data deletion
You can request deletion of your account and all associated data at any time by emailing rickyandoni@gmail.com. We will delete your data within 30 days, except where retention is required by law. You can also revoke Thermal's Google access at any time from your Google Account security settings.
Contact
Questions about this policy: rickyandoni@gmail.com. See also our Terms of Service.